Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/C6B1F018B2DF11EFA28E2A25C4F9AE02.roa
File: C6B1F018B2DF11EFA28E2A25C4F9AE02.roa (raw, json)
Hash identifier: RsBDf62hKwiMQ+iSUD3b+dIFj6JW2qbiUSUwwZMgw18=
Subject key identifier: A2:01:EB:9D:84:67:0E:F6:0C:6F:57:9E:9F:C8:B9:0B:32:08:88:FA
Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial: 04CC
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/C6B1F018B2DF11EFA28E2A25C4F9AE02.roa
Signing time: Thu 05 Dec 2024 08:06:05 +0000
ROA not before: Thu 05 Dec 2024 08:06:05 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 214408
IP address blocks: 103.101.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Dec 2024 19:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117373
Validity
Not Before: Dec 5 08:06:05 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67515eed-6f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:13:76:c1:7f:54:c7:e0:5d:a9:ba:fb:33:
df:d1:5a:a2:11:2d:4f:5c:62:19:54:55:9c:9a:9c:
c6:f0:d6:9c:13:d3:d0:c7:2c:01:bd:fc:44:17:b1:
b9:15:56:c4:f9:6c:a4:9a:e8:3a:e3:3c:f2:20:32:
ee:9f:89:1c:b5:fa:e5:21:9c:75:15:a2:bd:70:e0:
29:94:88:ce:55:ab:73:b4:3d:ec:58:18:11:0e:db:
99:a7:7a:b3:cc:4a:0d:6d:5f:66:48:14:a7:c4:a4:
e4:2e:4e:4b:3b:a9:ac:da:ed:dd:98:be:8b:97:84:
20:8d:fc:e7:14:3c:06:31:0b:39:5c:06:64:7a:1b:
1f:d0:51:e6:2d:8e:9d:0c:74:5d:0e:2c:a2:42:04:
87:65:f4:97:61:fe:ea:6d:61:5d:65:fe:aa:e4:33:
86:2b:b1:20:27:b2:d8:68:f6:c7:32:41:7a:96:7b:
8c:dc:6f:7f:d3:d1:d4:1c:7c:d8:00:ff:e7:fd:e3:
13:c6:54:5e:0f:62:fc:b8:4b:70:4f:0c:4d:7b:a6:
76:72:f2:f7:c2:cc:2c:7b:9d:9f:be:53:72:86:85:
6b:21:f8:93:30:1e:24:c4:53:db:02:25:03:92:f1:
cd:1a:60:13:9d:66:00:f2:dc:09:1b:a2:26:8a:78:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:EB:9D:84:67:0E:F6:0C:6F:57:9E:9F:C8:B9:0B:32:08:88:FA
X509v3 Authority Key Identifier:
keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/C6B1F018B2DF11EFA28E2A25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.85.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:74:c9:a3:9b:f4:16:5d:dc:0d:f6:15:a8:72:a0:d6:ac:43:
ab:17:c0:c7:fe:a1:7d:1c:69:e6:17:d4:84:a7:d1:1f:ac:1f:
6a:d4:12:1b:f2:36:ac:d9:9b:50:ce:29:04:28:b6:ca:a5:4f:
f7:4e:44:0f:e6:6a:38:89:8e:51:7a:e0:bb:aa:7d:ee:b3:72:
fb:99:48:32:35:21:e5:69:f4:ee:5f:b9:ac:df:49:36:65:d3:
a9:18:af:2a:2d:c9:20:bb:23:8c:5c:77:b2:09:97:4c:91:18:
ee:33:b4:7b:af:b0:8f:1d:99:e4:1e:db:38:af:48:f6:49:35:
1c:7d:7b:16:4b:bb:6b:64:5f:da:c7:6b:29:28:f3:61:fb:13:
f0:c6:10:b0:92:ca:a3:12:7f:e8:c8:a9:70:cf:2d:78:35:a3:
62:bf:57:a6:84:d6:43:63:85:01:35:b9:de:3a:3e:27:2c:ec:
6c:9b:02:00:fe:df:5d:2a:f6:dd:3a:ec:d2:62:4a:80:db:a9:
e4:65:fb:22:8a:96:11:b1:0a:bc:9d:07:85:e7:1d:1c:13:ff:
6a:eb:c0:b3:80:ef:8e:81:49:a9:0c:ae:99:b0:4c:14:6c:e3:
f1:2c:83:14:97:28:9d:7b:95:d5:96:d5:0d:af:c6:26:40:31:
63:b0:85:fb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTczNzMxMTAvBgNVBAUTKDYxODQxRDFFREFCRjlGRjBGNjAxOEM2MTEwMTdBRjcx
OTYyN0EyNEQwHhcNMjQxMjA1MDgwNjA1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUxNWVlZC02ZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/UTdsF/VMfgXam6+zPf0VqiES1PXGIZVFWcmpzG8NacE9PQxywBvfxEF7G5
FVbE+Wykmug64zzyIDLun4kctfrlIZx1FaK9cOAplIjOVatztD3sWBgRDtuZp3qz
zEoNbV9mSBSnxKTkLk5LO6ms2u3dmL6Ll4QgjfznFDwGMQs5XAZkehsf0FHmLY6d
DHRdDiyiQgSHZfSXYf7qbWFdZf6q5DOGK7EgJ7LYaPbHMkF6lnuM3G9/09HUHHzY
AP/n/eMTxlReD2L8uEtwTwxNe6Z2cvL3wswse52fvlNyhoVrIfiTMB4kxFPbAiUD
kvHNGmATnWYA8twJG6IminiHRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKIB652E
Zw72DG9Xnp/IuQsyCIj6MB8GA1UdIwQYMBaAFGGEHR7av5/w9gGMYRAXr3GWJ6JN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM3My9CRkE5QzM2MjIz
QUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRxX25fRDJBWXhoRUJldmNaWW5v
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lZUWRIdHFfbl9EMkFZeGhFQmV2Y1pZbm9rMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTczNzMvQkZBOUMzNjIyM0FBMTFFQ0E4MTE2QjI3QzRGOUFFMDIvQzZCMUYwMThC
MkRGMTFFRkEyOEUyQTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZVUwDQYJKoZIhvcNAQELBQADggEBANl0yaOb9BZd3A32
FahyoNasQ6sXwMf+oX0caeYX1ISn0R+sH2rUEhvyNqzZm1DOKQQotsqlT/dORA/m
ajiJjlF64Luqfe6zcvuZSDI1IeVp9O5fuazfSTZl06kYryotySC7I4xcd7IJl0yR
GO4ztHuvsI8dmeQe2zivSPZJNRx9exZLu2tkX9rHayko82H7E/DGELCSyqMSf+jI
qXDPLXg1o2K/V6aE1kNjhQE1ud46Pics7GybAgD+310q9t067NJiSoDbqeRl+yKK
lhGxCrydB4XnHRwT/2rrwLOA746BSakMrpmwTBRs4/EsgxSXKJ17ldWW1Q2vxiZA
MWOwhfs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:15:11 2025 by rpki-client