Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/57F1B45AE12B11EEA7895018C4F9AE02.roa
File: 57F1B45AE12B11EEA7895018C4F9AE02.roa (raw, json)
Hash identifier: zcf6Vei29l4lj8gWkDgTo5JxzU0J58i4aS0Ctka4IuI=
Subject key identifier: 1C:82:0C:A3:E7:87:9F:51:6F:9D:A5:9C:5F:21:8B:AF:B4:B5:AF:FE
Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445
Certificate serial: 9D
Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/57F1B45AE12B11EEA7895018C4F9AE02.roa
Signing time: Tue 07 Jan 2025 04:49:10 +0000
ROA not before: Tue 07 Jan 2025 04:49:10 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 40669
IP address blocks: 203.30.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 08:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445
Validity
Not Before: Jan 7 04:49:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677cb246-2ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:5f:b8:87:49:d5:eb:14:3b:7c:8c:e0:c5:
fd:7b:bf:c9:4b:db:19:e7:79:7d:05:d4:14:73:24:
7a:1a:d3:a8:99:b5:5f:83:2e:2c:a8:91:80:ad:c3:
26:fb:67:18:5d:ca:aa:89:b8:8b:d5:a4:79:dd:c4:
0c:b7:0f:7b:d5:e0:9e:c9:0e:7b:12:fd:ca:a7:43:
16:79:c6:31:13:c9:1e:ab:04:0e:55:74:d8:9c:5e:
14:e0:2a:05:3d:a5:b9:ea:0d:fb:0d:1b:09:0a:fa:
b7:77:15:3e:0a:c2:24:cc:fb:a5:5d:82:a5:03:06:
36:8b:16:05:1c:ae:b4:48:45:2e:1b:4f:a4:91:cd:
28:83:6b:b4:7b:24:7d:10:3c:6b:18:2e:09:d1:0a:
ed:32:ed:0d:91:29:b3:33:d4:65:af:e2:27:02:59:
c6:98:91:3b:f9:8b:40:ab:8b:5c:69:f9:4f:fe:df:
bd:6d:0b:87:a4:f5:2f:d7:3a:98:31:13:ac:36:21:
67:69:de:2c:ec:b0:b5:63:7f:8d:96:10:ba:d5:ac:
24:65:92:b5:db:e4:74:11:c6:23:b5:8d:13:21:92:
11:ea:ee:f8:03:79:85:18:fc:6d:6d:b0:f6:0f:18:
49:cc:98:90:02:c3:b6:8e:26:81:41:bf:6e:16:a8:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:0C:A3:E7:87:9F:51:6F:9D:A5:9C:5F:21:8B:AF:B4:B5:AF:FE
X509v3 Authority Key Identifier:
keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/57F1B45AE12B11EEA7895018C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.30.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:00:58:a0:39:49:d6:d8:2a:81:01:d6:23:af:43:63:a5:26:
9e:78:65:11:f1:75:73:bb:d0:1f:9a:9f:6f:c1:e1:97:27:16:
d1:72:be:e1:47:63:f9:3a:99:38:4a:63:3e:e1:1e:d6:aa:4e:
d3:4a:fd:57:d7:5c:05:c9:93:83:ba:b0:00:d2:03:f1:c1:1d:
ae:61:63:6d:c6:29:ee:4e:a2:bc:8a:12:9a:fd:a4:1b:75:74:
95:76:f4:66:04:db:bf:66:8e:f3:52:0a:0c:94:a8:fc:44:32:
00:82:c0:db:3f:b3:e7:ee:5d:00:d7:01:99:6a:7d:41:b2:d4:
32:e3:5d:5f:2a:1a:7b:2d:1b:54:69:0c:d4:71:a5:84:ec:e7:
9f:aa:de:e9:79:c3:27:68:17:ae:b6:83:c9:bd:93:aa:1a:e4:
6d:50:44:90:6c:33:c1:d3:50:54:eb:4e:54:f7:77:2b:5a:48:
1e:0a:1e:57:39:c3:dd:96:f4:5e:73:41:5f:6d:8c:03:27:55:
dc:50:86:9e:a6:7b:99:3d:58:99:0a:19:4d:72:e4:61:1c:06:
e1:28:13:f3:15:33:3c:26:8b:75:51:16:d0:23:2b:5a:e5:9c:
f0:8b:a2:b9:ba:5a:d4:ee:73:2b:be:28:57:90:10:f4:b3:f4:
8e:0c:d2:94
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD
NzYyOEM0NDUwHhcNMjUwMTA3MDQ0OTEwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdjYjI0Ni0yZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1hfuIdJ1esUO3yM4MX9e7/JS9sZ53l9BdQUcyR6GtOombVfgy4sqJGArcMm
+2cYXcqqibiL1aR53cQMtw971eCeyQ57Ev3Kp0MWecYxE8keqwQOVXTYnF4U4CoF
PaW56g37DRsJCvq3dxU+CsIkzPulXYKlAwY2ixYFHK60SEUuG0+kkc0og2u0eyR9
EDxrGC4J0QrtMu0NkSmzM9Rlr+InAlnGmJE7+YtAq4tcaflP/t+9bQuHpPUv1zqY
MROsNiFnad4s7LC1Y3+NlhC61awkZZK12+R0EcYjtY0TIZIR6u74A3mFGPxtbbD2
DxhJzJiQAsO2jiaBQb9uFqhlnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFByCDKPn
h59Rb52lnF8hi6+0ta/+MB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx
MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjk2OEIvRkMxRDI3MzZFMTJBMTFFRTg2ODRDMjE3QzRGOUFFMDIvNTdGMUI0NUFF
MTJCMTFFRUE3ODk1MDE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLHsMwDQYJKoZIhvcNAQELBQADggEBAFoAWKA5SdbYKoEB
1iOvQ2OlJp54ZRHxdXO70B+an2/B4ZcnFtFyvuFHY/k6mThKYz7hHtaqTtNK/VfX
XAXJk4O6sADSA/HBHa5hY23GKe5OoryKEpr9pBt1dJV29GYE279mjvNSCgyUqPxE
MgCCwNs/s+fuXQDXAZlqfUGy1DLjXV8qGnstG1RpDNRxpYTs55+q3ul5wydoF662
g8m9k6oa5G1QRJBsM8HTUFTrTlT3dytaSB4KHlc5w92W9F5zQV9tjAMnVdxQhp6m
e5k9WJkKGU1y5GEcBuEoE/MVMzwmi3VRFtAjK1rlnPCLorm6WtTucyu+KFeQEPSz
9I4M0pQ=
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:02:28 2025 by rpki-client