Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/0FDF148A50DA11F0B27BC71DC4F9AE02.roa
File: 0FDF148A50DA11F0B27BC71DC4F9AE02.roa (raw, json)
Hash identifier: 3rn/z+55N9PKJbjHtLnmYFpHSbkxxDyDQ75z85WBZpc=
Subject key identifier: 94:45:29:04:0E:53:1A:7E:16:AB:8A:49:C2:1D:A9:3A:74:4D:97:9B
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 26B9
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/0FDF148A50DA11F0B27BC71DC4F9AE02.roa
Signing time: Tue 24 Jun 2025 09:03:15 +0000
ROA not before: Tue 24 Jun 2025 09:03:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139870
IP address blocks: 103.139.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 10:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9913 (0x26b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Validity
Not Before: Jun 24 09:03:15 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=685a69d3-58f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:a8:af:b3:1b:49:4f:6f:4c:62:00:7f:84:
89:fd:2a:b9:40:6b:ab:c3:2f:46:7f:3f:93:9f:d6:
32:2f:ea:3b:24:eb:70:a4:a7:a9:4a:56:16:46:d3:
15:22:59:de:9c:ad:88:e8:fd:43:90:17:cc:6b:a0:
3e:ff:be:2a:3b:0e:10:6e:e2:e6:10:d5:bf:40:21:
09:d4:93:aa:61:bd:92:82:ac:ab:8c:86:6b:6f:cb:
ec:d7:fa:bc:ae:0e:22:80:0d:7a:8f:f0:0f:87:57:
5a:ba:62:c3:63:af:3b:28:16:01:24:67:39:1d:9b:
b4:0a:13:44:19:a7:f6:0e:4a:4f:be:12:1a:cd:3c:
31:a6:e0:11:18:25:80:1c:ab:57:72:0c:be:51:94:
19:50:8d:94:3c:5d:be:a3:f8:c9:d7:80:0d:53:d2:
3e:6c:49:45:a8:06:00:7b:2c:18:39:0c:b8:f3:92:
d3:85:9c:13:f4:ac:64:65:88:d1:b9:0e:33:56:b1:
5a:f2:b5:11:be:56:6c:14:3b:6b:d4:94:6f:ad:91:
aa:cc:80:2f:43:97:a4:36:2f:ab:f8:f7:dc:78:ee:
0f:5f:6a:a6:42:d9:81:02:06:9d:32:86:80:68:fd:
8a:1f:80:f6:cf:b6:3a:67:44:4c:03:2b:5d:9d:59:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:45:29:04:0E:53:1A:7E:16:AB:8A:49:C2:1D:A9:3A:74:4D:97:9B
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/0FDF148A50DA11F0B27BC71DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.235.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3e:0d:b4:bb:77:1d:b8:1c:74:49:6d:a5:f6:48:4b:69:57:
70:f0:3a:77:b4:2b:26:1b:61:c2:4a:b8:02:6c:44:7d:2f:ac:
f5:b9:6d:a1:9b:9f:10:cf:bc:24:ac:df:3a:94:cc:1c:b7:b7:
a4:8e:a9:17:52:53:00:d3:f7:c7:f1:b6:3e:8a:03:4b:12:0a:
be:02:23:d6:25:89:b4:7b:22:ce:f9:2e:5b:1f:27:01:55:8c:
d6:31:b8:84:e9:24:d9:e1:80:8d:1c:57:7e:84:74:38:91:fa:
13:6b:aa:4a:60:a6:b2:18:39:b3:5a:3e:91:4b:7c:ea:28:6e:
09:ec:83:17:e7:ae:5f:82:a8:7d:60:41:e2:53:bf:e5:d5:7a:
51:10:e8:5f:c7:cf:3a:15:d6:2a:ea:b9:2e:d4:f2:f8:16:da:
bb:da:ec:59:fe:6c:00:9b:07:32:ce:6c:99:9c:89:26:70:95:
84:9f:24:c2:45:9a:19:39:ad:6b:9d:0e:14:89:b1:1a:c4:b4:
38:25:f1:bb:5c:47:97:39:84:52:e8:2b:39:93:02:7f:3a:20:
45:40:9d:25:26:61:63:82:a9:81:ab:98:b4:9e:35:65:3f:67:
b6:e3:40:97:2e:9f:8d:06:8a:8b:8a:8a:ed:78:d5:ac:be:a6:
64:e9:5e:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD
REE3NDZCRDQwHhcNMjUwNjI0MDkwMzE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVhNjlkMy01OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7uor7MbSU9vTGIAf4SJ/Sq5QGurwy9Gfz+Tn9YyL+o7JOtwpKepSlYWRtMV
IlnenK2I6P1DkBfMa6A+/74qOw4QbuLmENW/QCEJ1JOqYb2SgqyrjIZrb8vs1/q8
rg4igA16j/APh1daumLDY687KBYBJGc5HZu0ChNEGaf2DkpPvhIazTwxpuARGCWA
HKtXcgy+UZQZUI2UPF2+o/jJ14ANU9I+bElFqAYAeywYOQy485LThZwT9KxkZYjR
uQ4zVrFa8rURvlZsFDtr1JRvrZGqzIAvQ5ekNi+r+PfceO4PX2qmQtmBAgadMoaA
aP2KH4D2z7Y6Z0RMAytdnVlQ4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJRFKQQO
Uxp+FquKScIdqTp0TZebMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1
MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvMEZERjE0OEE1
MERBMTFGMEIyN0JDNzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABni+swDQYJKoZIhvcNAQELBQADggEBAEM+DbS7dx24HHRJ
baX2SEtpV3DwOne0KyYbYcJKuAJsRH0vrPW5baGbnxDPvCSs3zqUzBy3t6SOqRdS
UwDT98fxtj6KA0sSCr4CI9YlibR7Is75LlsfJwFVjNYxuITpJNnhgI0cV36EdDiR
+hNrqkpgprIYObNaPpFLfOoobgnsgxfnrl+CqH1gQeJTv+XVelEQ6F/HzzoV1irq
uS7U8vgW2rva7Fn+bACbBzLObJmciSZwlYSfJMJFmhk5rWudDhSJsRrEtDgl8btc
R5c5hFLoKzmTAn86IEVAnSUmYWOCqYGrmLSeNWU/Z7bjQJcun40GiouKiu141ay+
pmTpXpo=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:01:25 2025 by rpki-client