Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
File: 38D5D8D0197111EE86688756C4F9AE02.roa (raw, json)
Hash identifier: kzi0KQ9ZEMCUP2vXFdh+HmBpVIrIEaO/65LeWyh5tmM=
Subject key identifier: EF:5A:F4:F2:09:EC:B8:F3:1E:79:25:E6:6C:FE:D7:1B:34:7B:54:00
Certificate issuer: /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial: 0105
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
Signing time: Fri 15 Nov 2024 03:26:52 +0000
ROA not before: Fri 15 Nov 2024 03:26:52 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151476
IP address blocks: 103.231.34.0/23 maxlen: 23
103.231.34.0/24 maxlen: 24
103.231.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 15:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F76A
Validity
Not Before: Nov 15 03:26:52 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6736bf7b-8627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:c2:bc:3d:b6:72:8e:14:36:37:ca:f2:16:
a3:4c:c2:0a:ea:c6:2c:d3:25:81:23:15:4c:4b:5d:
42:79:53:40:19:9c:30:b3:ae:00:60:7e:5d:e5:31:
17:87:ca:e9:8d:86:40:bb:47:34:74:13:ec:f2:75:
45:65:1b:92:c2:c1:e4:c1:54:0a:58:4d:a3:f8:29:
f7:21:d4:02:a9:ba:32:a7:ba:70:13:71:f8:dd:a6:
1a:5e:6a:f7:4b:ae:92:ad:44:26:c1:b8:f3:cb:f0:
4c:09:ac:95:1a:dc:66:c0:72:f4:25:5c:c1:b5:7b:
0d:75:51:33:9d:00:a4:e6:eb:41:f1:a2:34:49:b9:
7a:f8:94:8f:ef:36:30:9f:43:6a:73:1b:22:0f:6c:
07:02:24:79:73:4c:23:92:e1:61:84:fe:ba:d8:a4:
de:d3:21:8c:cc:73:84:ff:6f:0e:66:ef:09:f6:e6:
b1:76:c9:c2:c8:ec:b1:4c:16:2e:c9:c3:63:a7:b2:
b2:8e:73:0d:ea:7c:5d:a2:4d:5f:b5:c5:67:9a:fd:
28:93:b6:13:b1:28:c9:a4:be:56:27:33:62:fe:ac:
a2:02:0c:1c:f2:b6:dc:c0:be:a2:57:8a:1f:3b:5d:
23:ef:43:eb:2f:11:1f:a1:56:aa:2e:b6:59:d4:fa:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:F4:F2:09:EC:B8:F3:1E:79:25:E6:6C:FE:D7:1B:34:7B:54:00
X509v3 Authority Key Identifier:
keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:e4:33:e9:a5:14:e1:2a:0f:11:a0:e7:36:ba:0a:d1:5d:bc:
2f:c7:3e:0a:e4:f0:93:22:ec:01:78:c9:fd:d4:57:3a:87:5a:
e9:cc:63:43:b9:1d:3f:96:2a:43:f4:6e:e1:fa:ab:1d:a5:3b:
98:d8:07:0c:11:0d:24:c1:41:b6:1f:ec:56:46:c3:66:a7:72:
72:a6:da:c7:f9:13:c0:30:68:b0:96:bf:01:ef:24:94:d1:d5:
80:bc:f4:13:1a:80:1f:15:d1:71:3d:4a:ca:d3:85:3c:40:15:
ba:bc:fe:57:bb:85:fe:88:d8:23:ca:12:05:50:b8:c9:58:29:
d0:c4:a1:d4:84:ea:b1:e5:71:9c:f2:f1:15:97:84:d4:e3:af:
f9:e5:2c:90:62:10:fc:e5:24:62:6b:13:f6:8a:07:2f:b8:1c:
ba:75:63:23:ee:fe:05:b3:30:51:e8:8a:36:10:93:9a:3d:4e:
66:49:43:3f:e7:a8:df:3e:86:2f:0f:50:04:62:06:5f:33:97:
b7:89:9b:7e:00:48:f7:44:8f:fe:13:ee:88:3f:2f:80:8b:48:
62:b8:59:35:38:3e:a4:4c:36:3d:78:3d:d1:2d:eb:6a:95:78:
47:86:d0:57:93:2d:70:cc:04:90:b6:a7:58:7f:98:2f:51:a5:
fe:0e:3b:18
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY3NkExMTAvBgNVBAUTKDExOEI4MzYxRTQ0RDUwNTI1Q0I2MTM1MEIyNTI2QjU5
RjZERTJEQ0QwHhcNMjQxMTE1MDMyNjUyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM2YmY3Yi04NjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6DCvD22co4UNjfK8hajTMIK6sYs0yWBIxVMS11CeVNAGZwws64AYH5d5TEX
h8rpjYZAu0c0dBPs8nVFZRuSwsHkwVQKWE2j+Cn3IdQCqboyp7pwE3H43aYaXmr3
S66SrUQmwbjzy/BMCayVGtxmwHL0JVzBtXsNdVEznQCk5utB8aI0Sbl6+JSP7zYw
n0NqcxsiD2wHAiR5c0wjkuFhhP662KTe0yGMzHOE/28OZu8J9uaxdsnCyOyxTBYu
ycNjp7KyjnMN6nxdok1ftcVnmv0ok7YTsSjJpL5WJzNi/qyiAgwc8rbcwL6iV4of
O10j70PrLxEfoVaqLrZZ1PrJCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9a9PIJ
7LjzHnkl5mz+1xs0e1QAMB8GA1UdIwQYMBaAFBGLg2HkTVBSXLYTULJSa1n23i3N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjc2QS8yRkJBOEJGRTE5
NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVGSmN0aE5Rc2xKcldmYmVM
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VZdURZZVJOVUZKY3RoTlFzbEpyV2ZiZUxjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY3NkEvMkZCQThCRkUxOTZFMTFFRUFCNDVEQjU0QzRGOUFFMDIvMzhENUQ4RDAx
OTcxMTFFRTg2Njg4NzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn5yIwDQYJKoZIhvcNAQELBQADggEBAJrkM+mlFOEqDxGg
5za6CtFdvC/HPgrk8JMi7AF4yf3UVzqHWunMY0O5HT+WKkP0buH6qx2lO5jYBwwR
DSTBQbYf7FZGw2ancnKm2sf5E8AwaLCWvwHvJJTR1YC89BMagB8V0XE9SsrThTxA
Fbq8/le7hf6I2CPKEgVQuMlYKdDEodSE6rHlcZzy8RWXhNTjr/nlLJBiEPzlJGJr
E/aKBy+4HLp1YyPu/gWzMFHoijYQk5o9TmZJQz/nqN8+hi8PUARiBl8zl7eJm34A
SPdEj/4T7og/L4CLSGK4WTU4PqRMNj14PdEt62qVeEeG0FeTLXDMBJC2p1h/mC9R
pf4OOxg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:25 2025 by rpki-client