Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4172F5C20A2411F0A2D02B4AC4F9AE02.roa
File: 4172F5C20A2411F0A2D02B4AC4F9AE02.roa (raw, json)
Hash identifier: +TCijoDyAgdj/NCmQZl0Z2WNeVOwZbEKqIywg/Mx290=
Subject key identifier: 9A:74:63:43:9B:AD:9E:58:2F:85:01:FC:26:16:6E:7E:9C:F1:C0:9B
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2805
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4172F5C20A2411F0A2D02B4AC4F9AE02.roa
Signing time: Wed 26 Mar 2025 09:25:28 +0000
ROA not before: Wed 26 Mar 2025 09:25:28 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 7489
IP address blocks: 27.100.36.0/23 maxlen: 24
45.124.64.0/22 maxlen: 24
45.249.88.0/24 maxlen: 24
103.192.176.0/22 maxlen: 24
103.196.20.0/23 maxlen: 24
103.217.252.0/22 maxlen: 22
103.217.253.0/24 maxlen: 24
103.217.255.0/24 maxlen: 24
2402:9e80::/48 maxlen: 48
2402:9e80:1::/48 maxlen: 48
2402:9e80:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 18:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10245 (0x2805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D
Validity
Not Before: Mar 26 09:25:28 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67e3c808-94ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:97:92:74:e8:c2:25:2a:55:c0:14:5f:e4:
34:a7:49:ff:79:c1:1b:77:50:90:3e:16:0e:0f:b2:
7f:6e:4d:46:46:f1:11:be:91:ac:8f:a4:1e:2d:eb:
a1:1c:fc:71:c4:9c:93:11:33:66:c8:1e:d7:f6:b7:
23:f8:df:0d:59:3b:24:d2:5a:4a:1d:c6:f2:52:58:
37:a0:cf:8e:12:63:8e:28:12:9a:f5:dc:63:12:7e:
ba:43:63:85:4e:5f:a9:70:e3:f4:cb:3e:0a:a9:5c:
77:0b:ee:5b:68:15:87:08:11:23:7a:07:84:ad:8c:
35:b2:78:c5:bb:15:0f:cd:31:49:96:5d:af:93:0b:
cd:b3:0e:7b:ad:3c:29:22:a6:d4:8f:2d:62:2a:e8:
c6:6c:78:5f:1a:8e:0d:3c:67:3b:a6:49:f8:1a:48:
b4:69:12:93:73:ea:db:0a:0a:bc:ff:69:df:90:3f:
2f:0e:83:69:15:eb:e8:00:02:96:88:8d:b0:ee:0f:
9b:ff:74:8c:b4:db:bc:bb:ed:07:a1:15:d3:ef:ac:
ea:58:23:a4:83:75:3c:71:36:4e:65:04:e2:0a:69:
3e:f2:7c:80:1e:4e:01:41:a4:aa:72:73:47:7e:d4:
39:8d:d4:9f:0c:13:65:67:ee:0b:b0:08:cb:2a:bd:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:63:43:9B:AD:9E:58:2F:85:01:FC:26:16:6E:7E:9C:F1:C0:9B
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4172F5C20A2411F0A2D02B4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.36.0/23
45.124.64.0/22
45.249.88.0/24
103.192.176.0/22
103.196.20.0/23
103.217.252.0/22
IPv6:
2402:9e80::/47
2402:9e80:5::/48
Signature Algorithm: sha256WithRSAEncryption
3b:03:b7:82:02:ba:30:3c:73:10:d9:aa:e3:ca:ea:74:ba:f4:
19:1d:ef:28:11:cd:34:33:ce:9c:2c:e6:5f:f9:04:25:13:36:
4e:8a:4f:86:e1:0c:15:3f:10:7e:a8:5e:3d:d4:f3:bf:82:7f:
97:b0:c5:8f:79:6a:11:b3:3d:1b:3e:f5:2f:d5:98:5d:1a:37:
d1:75:40:2c:f5:61:fa:10:63:2b:6d:a3:ce:fe:85:18:25:e9:
10:c2:46:ec:d7:b5:6f:0b:50:d4:fe:04:a6:72:70:a6:64:48:
7f:f5:d4:98:50:69:4e:3c:b5:9f:48:3f:de:3d:3c:7b:e6:75:
33:97:35:e5:20:3d:34:c2:2c:61:d0:60:47:88:8d:69:d8:f8:
a5:5d:ce:97:0c:a6:e4:49:18:02:94:78:24:bd:89:94:d8:d9:
e9:c8:e7:cc:3a:d5:7c:0a:e1:4f:02:6e:6b:7d:63:34:27:e0:
09:4d:8a:d3:7d:e7:95:e8:48:b6:9c:8f:50:2d:65:03:7c:2d:
8d:b2:99:d7:d7:c6:61:94:21:95:65:9d:5e:66:7c:c1:00:c0:
6b:87:5b:2b:e4:20:ad:ae:ce:8e:2a:e8:7a:61:85:f9:61:d1:
3c:c2:5b:39:5d:fb:e2:47:2d:d5:1b:48:db:8a:04:e0:2c:b4:
72:98:fd:54
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgICKAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwMzI2MDkyNTI4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2UzYzgwOC05NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpiXknTowiUqVcAUX+Q0p0n/ecEbd1CQPhYOD7J/bk1GRvERvpGsj6QeLeuh
HPxxxJyTETNmyB7X9rcj+N8NWTsk0lpKHcbyUlg3oM+OEmOOKBKa9dxjEn66Q2OF
Tl+pcOP0yz4KqVx3C+5baBWHCBEjegeErYw1snjFuxUPzTFJll2vkwvNsw57rTwp
IqbUjy1iKujGbHhfGo4NPGc7pkn4Gki0aRKTc+rbCgq8/2nfkD8vDoNpFevoAAKW
iI2w7g+b/3SMtNu8u+0HoRXT76zqWCOkg3U8cTZOZQTiCmk+8nyAHk4BQaSqcnNH
ftQ5jdSfDBNlZ+4LsAjLKr1nLQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFJp0Y0Ob
rZ5YL4UB/CYWbn6c8cCbMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDE3MkY1QzIw
QTI0MTFGMEEyRDAyQjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E
SDBGMCoEAgABMCQDBAEbZCQDBAItfEADBAAt+VgDBAJnwLADBAFnxBQDBAJn2fww
GAQCAAIwEgMHASQCnoAAAAMHACQCnoAABTANBgkqhkiG9w0BAQsFAAOCAQEAOwO3
ggK6MDxzENmq48rqdLr0GR3vKBHNNDPOnCzmX/kEJRM2TopPhuEMFT8QfqhePdTz
v4J/l7DFj3lqEbM9Gz71L9WYXRo30XVALPVh+hBjK22jzv6FGCXpEMJG7Ne1bwtQ
1P4EpnJwpmRIf/XUmFBpTjy1n0g/3j08e+Z1M5c15SA9NMIsYdBgR4iNadj4pV3O
lwym5EkYApR4JL2JlNjZ6cjnzDrVfArhTwJua31jNCfgCU2K033nlehItpyPUC1l
A3wtjbKZ19fGYZQhlWWdXmZ8wQDAa4dbK+Qgra7OjiroemGF+WHRPMJbOV374kct
1RtI24oE4Cy0cpj9VA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:05 2025 by rpki-client