Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/6A7F9130CDBD11EF9F091066C4F9AE02.roa
File: 6A7F9130CDBD11EF9F091066C4F9AE02.roa (raw, json)
Hash identifier: QtO3oDV6NX6wdBXHylWuL39gej0uK5EJNaRw2GKHn5c=
Subject key identifier: A4:0D:15:2E:FA:6F:5B:3D:C4:37:87:96:E9:81:70:90:58:28:DF:C7
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 0216
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/6A7F9130CDBD11EF9F091066C4F9AE02.roa
Signing time: Wed 08 Jan 2025 12:38:09 +0000
ROA not before: Wed 08 Jan 2025 12:38:09 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 397373
IP address blocks: 103.85.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 09 Jan 2025 08:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Jan 8 12:38:09 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=677e71b1-b44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:f9:15:40:fa:44:bc:20:d1:17:40:7c:3a:
69:c9:b1:b6:af:3c:52:4d:70:50:b4:b6:89:64:24:
46:ec:ee:24:33:61:da:af:72:13:94:41:ff:56:38:
72:f7:fd:0b:ea:7c:7a:12:af:f4:44:8a:20:b7:b7:
43:f7:1e:fc:df:21:c5:e2:18:82:bb:66:15:5a:85:
05:e9:ef:49:27:ed:dc:36:e0:dd:f2:d8:c2:17:31:
d8:54:c2:15:d7:0e:19:6d:58:cb:a1:a9:86:75:89:
fe:58:1d:53:9b:d3:5e:32:0e:d2:3b:ac:e4:a1:09:
ac:09:40:33:85:2a:1e:b9:9e:8a:83:90:c0:7c:06:
05:db:94:9d:37:a1:9c:4c:f5:77:03:22:1b:82:28:
55:f6:6c:e3:66:97:d4:44:2c:bb:d6:3b:27:2e:b9:
4a:40:1b:c3:96:78:48:ed:e8:31:f9:6b:7d:ad:5c:
27:0e:98:70:38:bc:d8:0d:8b:fd:0b:fd:53:0f:73:
eb:3a:d2:70:ce:81:e2:6c:58:39:26:76:05:8f:87:
5a:44:06:2f:1d:90:f5:06:73:29:1b:d5:42:02:13:
d6:e7:23:88:95:91:43:4a:8d:dc:07:ab:6c:52:ec:
30:21:c1:f6:6d:6b:03:6e:a0:be:b1:10:b1:b4:3f:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:15:2E:FA:6F:5B:3D:C4:37:87:96:E9:81:70:90:58:28:DF:C7
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/6A7F9130CDBD11EF9F091066C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:f3:d2:ba:af:25:14:33:fd:a1:16:1b:d7:42:df:03:f2:6d:
d1:c2:0a:19:89:d8:d5:a6:e8:e9:7c:6b:d0:36:9e:a8:3a:83:
86:c4:ab:f0:17:f1:8a:43:d2:dc:79:1f:6c:10:67:ee:40:fd:
8b:90:2f:4c:52:d1:4c:0b:6e:d1:0d:b3:37:4a:e7:6c:0b:db:
3d:c6:af:08:83:8d:81:c2:96:58:4f:b3:90:5b:1d:16:09:66:
32:af:22:cd:91:6b:01:b7:75:96:c2:6a:75:09:f4:f8:74:14:
07:81:21:9f:18:11:db:fd:bc:5e:83:42:12:2b:29:ad:a3:46:
c7:a8:d7:d0:09:7b:46:6c:d8:39:84:e3:ce:13:5f:83:d4:e5:
09:e0:7e:8a:3e:8a:bc:38:09:a5:05:ac:52:bf:a9:e3:d4:72:
7c:ba:13:b4:b8:db:7a:77:12:ac:c8:2b:ef:87:30:29:79:8f:
dd:f2:34:e4:45:9b:5f:ae:47:7f:d0:c8:e9:58:e2:66:1e:d0:
02:b1:a6:55:7f:73:9c:ef:15:bc:2f:f3:b5:c0:b9:79:f4:e1:
1b:26:96:2c:3c:af:80:49:c4:f8:4d:6e:5e:8a:11:f4:04:68:
04:a6:b7:34:76:95:f6:2a:9a:57:8b:fc:b4:68:73:68:98:8a:
eb:cd:f8:8e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF
MDIwNDg4RDQwHhcNMjUwMTA4MTIzODA5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdlNzFiMS1iNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Ef5FUD6RLwg0RdAfDppybG2rzxSTXBQtLaJZCRG7O4kM2Har3ITlEH/Vjhy
9/0L6nx6Eq/0RIogt7dD9x783yHF4hiCu2YVWoUF6e9JJ+3cNuDd8tjCFzHYVMIV
1w4ZbVjLoamGdYn+WB1Tm9NeMg7SO6zkoQmsCUAzhSoeuZ6Kg5DAfAYF25SdN6Gc
TPV3AyIbgihV9mzjZpfURCy71jsnLrlKQBvDlnhI7egx+Wt9rVwnDphwOLzYDYv9
C/1TD3PrOtJwzoHibFg5JnYFj4daRAYvHZD1BnMpG9VCAhPW5yOIlZFDSo3cB6ts
UuwwIcH2bWsDbqC+sRCxtD9FEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKQNFS76
b1s9xDeHlumBcJBYKN/HMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz
MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTAxNUQvNkM0NzQ5MjA3MzEyMTFFREI3MEJDRTMzQzRGOUFFMDIvNkE3RjkxMzBD
REJEMTFFRjlGMDkxMDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnVcgwDQYJKoZIhvcNAQELBQADggEBACrz0rqvJRQz/aEW
G9dC3wPybdHCChmJ2NWm6Ol8a9A2nqg6g4bEq/AX8YpD0tx5H2wQZ+5A/YuQL0xS
0UwLbtENszdK52wL2z3GrwiDjYHCllhPs5BbHRYJZjKvIs2RawG3dZbCanUJ9Ph0
FAeBIZ8YEdv9vF6DQhIrKa2jRseo19AJe0Zs2DmE484TX4PU5Qngfoo+irw4CaUF
rFK/qePUcny6E7S423p3EqzIK++HMCl5j93yNORFm1+uR3/QyOlY4mYe0AKxplV/
c5zvFbwv87XAuXn04Rsmliw8r4BJxPhNbl6KEfQEaASmtzR2lfYqmleL/LRoc2iY
iuvN+I4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:34:35 2025 by rpki-client