Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5E7C46320F7E11F0A9F5EE5BC4F9AE02.roa
File: 5E7C46320F7E11F0A9F5EE5BC4F9AE02.roa (raw, json)
Hash identifier: enssFeX3d+tZG9pU+HLRCgc7CrK1bdormLMkCohag4U=
Subject key identifier: B8:74:51:DD:B7:5D:CD:5E:21:84:E2:AE:9A:89:13:D9:5B:68:6C:38
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0764
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5E7C46320F7E11F0A9F5EE5BC4F9AE02.roa
Signing time: Wed 02 Apr 2025 04:53:07 +0000
ROA not before: Wed 02 Apr 2025 04:53:07 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 137451
IP address blocks: 43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.225.198.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.234.54.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 15:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412
Validity
Not Before: Apr 2 04:53:07 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67ecc2b3-6ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:15:cd:8a:dc:7c:e9:95:61:9f:c0:43:33:
b6:b4:5b:9f:6a:22:5d:7e:0c:40:8f:dd:aa:2c:0f:
e0:6a:42:ae:dc:b1:ac:8f:b9:5b:36:05:f4:c6:c1:
fd:5e:1c:71:85:d4:74:a4:cf:70:7f:27:7b:c5:62:
f7:7e:93:58:09:1a:cf:31:88:d1:80:25:86:6c:eb:
d6:49:03:2d:2e:4f:90:7b:c7:9b:84:24:29:62:7a:
2a:10:f5:f9:d5:d6:2e:39:24:1b:d9:00:d9:f1:88:
76:2c:8a:4f:6c:e5:c3:bf:b6:19:c4:7a:26:cf:d3:
f9:11:df:04:af:17:54:47:44:5e:8b:a1:a7:a8:33:
47:8b:ce:8d:fa:e1:0b:74:5a:09:3d:fc:3f:10:92:
20:9f:3e:b1:26:a2:c7:2c:14:ae:a5:85:7e:4e:9a:
55:8c:4e:50:64:c6:12:2a:fd:5c:41:9c:ca:a3:be:
3a:00:1a:1b:42:7e:2c:65:06:d6:d7:ef:f3:99:b1:
60:b6:bd:e4:0f:72:f3:8c:0c:b1:76:b7:fe:cf:00:
22:53:ce:44:ee:d3:26:43:cc:21:bf:14:bb:a9:c6:
5b:e1:f2:c4:dc:17:2f:bd:f0:c5:bf:67:e2:f8:9f:
17:f8:c4:35:93:27:60:d2:98:85:c7:91:36:c9:ec:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:51:DD:B7:5D:CD:5E:21:84:E2:AE:9A:89:13:D9:5B:68:6C:38
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5E7C46320F7E11F0A9F5EE5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.209.0-43.252.210.255
103.225.198.0/24
103.228.64.0/24
103.234.54.0/24
150.107.1.0-150.107.3.255
Signature Algorithm: sha256WithRSAEncryption
9f:b9:fe:e8:37:5a:30:32:f0:99:e8:5e:b0:a4:e1:64:1f:5f:
13:4a:65:dc:ef:d7:0b:cb:c5:08:0c:83:48:bf:c0:92:0b:a1:
3f:14:27:fc:74:81:a8:b2:c7:9c:6d:ed:17:9c:ca:99:57:b0:
38:26:d0:5d:8f:df:13:35:e9:4c:71:8b:53:07:2e:52:ac:ea:
06:20:d8:82:9a:b1:3c:18:ce:3f:9b:e1:e8:3b:8b:d3:bb:d4:
f2:ad:d0:74:13:46:ed:d0:2a:dd:f6:3c:e1:9c:c4:2e:fc:2b:
d6:15:64:ae:95:a5:e9:70:35:e2:73:1d:5e:b5:69:17:f6:95:
1c:c1:a3:ea:0c:ec:1f:82:28:92:3e:e5:0b:2b:f6:d9:20:b6:
3b:16:17:85:27:af:14:ed:40:7b:d0:93:b1:ce:6d:93:c1:8c:
99:b7:05:e4:ee:f7:44:81:69:8b:67:b2:62:d0:ee:73:75:79:
48:a7:62:ed:14:10:ee:ca:fa:c3:c6:af:57:e0:49:a9:d9:36:
de:a5:b1:a7:9e:6d:64:69:15:09:10:0e:3d:5f:49:36:8b:70:
f0:91:0a:be:46:02:4d:7b:f7:e1:dc:7f:84:f6:fd:50:a3:7a:
83:ed:44:86:c4:41:f4:0b:93:69:b0:13:36:8b:ed:0b:b0:42:
aa:98:59:8f
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjUwNDAyMDQ1MzA3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VjYzJiMy02YWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2cVzYrcfOmVYZ/AQzO2tFufaiJdfgxAj92qLA/gakKu3LGsj7lbNgX0xsH9
XhxxhdR0pM9wfyd7xWL3fpNYCRrPMYjRgCWGbOvWSQMtLk+Qe8ebhCQpYnoqEPX5
1dYuOSQb2QDZ8Yh2LIpPbOXDv7YZxHomz9P5Ed8ErxdUR0Rei6GnqDNHi86N+uEL
dFoJPfw/EJIgnz6xJqLHLBSupYV+TppVjE5QZMYSKv1cQZzKo746ABobQn4sZQbW
1+/zmbFgtr3kD3LzjAyxdrf+zwAiU85E7tMmQ8whvxS7qcZb4fLE3BcvvfDFv2fi
+J8X+MQ1kydg0piFx5E2yeycAQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFLh0Ud23
Xc1eIYTirpqJE9lbaGw4MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNUU3QzQ2MzIw
RjdFMTFGMEE5RjVFRTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E
ODA2MDQEAgABMC4wDAMEACv80QMEACv80gMEAGfhxgMEAGfkQAMEAGfqNjAMAwQA
lmsBAwQClmsAMA0GCSqGSIb3DQEBCwUAA4IBAQCfuf7oN1owMvCZ6F6wpOFkH18T
SmXc79cLy8UIDINIv8CSC6E/FCf8dIGossecbe0XnMqZV7A4JtBdj98TNelMcYtT
By5SrOoGINiCmrE8GM4/m+HoO4vTu9TyrdB0E0bt0Crd9jzhnMQu/CvWFWSulaXp
cDXicx1etWkX9pUcwaPqDOwfgiiSPuULK/bZILY7FheFJ68U7UB70JOxzm2TwYyZ
twXk7vdEgWmLZ7Ji0O5zdXlIp2LtFBDuyvrDxq9X4Emp2TbepbGnnm1kaRUJEA49
X0k2i3DwkQq+RgJNe/fh3H+E9v1Qo3qD7USGxEH0C5NpsBM2i+0LsEKqmFmP
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:46:09 2025 by rpki-client