Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/24D4478E774611EFA3ACCD6AC4F9AE02.roa
File: 24D4478E774611EFA3ACCD6AC4F9AE02.roa (raw, json)
Hash identifier: +pe4eqTQ9F69zhlYC8yJPOPmZ0wokoywwIR/1D5hJyQ=
Subject key identifier: FA:4C:23:06:10:F8:43:20:13:32:F2:05:BE:AA:BD:F6:B3:E5:3A:29
Certificate issuer: /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial: 13E8
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/24D4478E774611EFA3ACCD6AC4F9AE02.roa
Signing time: Tue 10 Jun 2025 17:18:37 +0000
ROA not before: Tue 10 Jun 2025 17:18:37 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135542
IP address blocks: 14.192.48.0/24 maxlen: 24
14.192.51.0/24 maxlen: 24
103.64.12.0/24 maxlen: 24
103.64.13.0/24 maxlen: 24
103.78.242.0/24 maxlen: 24
2001:df2:8e00::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Jun 2025 15:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5096 (0x13e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Validity
Not Before: Jun 10 17:18:37 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=684868ed-d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:0c:3b:4a:34:fb:a7:9b:7c:20:78:4a:e3:
6e:98:86:c1:82:19:88:af:0e:fe:cc:da:dd:cd:9b:
4b:1d:2d:00:13:3c:3e:31:d2:5f:9d:d0:36:46:7d:
44:49:4f:7d:c8:68:78:56:22:29:4a:c6:96:b9:dd:
45:cc:6d:ad:75:d3:a6:32:a2:96:9b:5c:90:e1:24:
18:95:4d:c5:ed:19:9c:22:ce:8e:57:05:18:e2:d0:
3c:a5:c6:1c:7d:ba:40:90:af:5e:cc:72:e8:00:77:
74:06:29:76:ae:c5:f7:85:04:8d:8c:d3:52:6c:3e:
7c:35:90:88:a5:9e:9c:be:bb:34:13:49:ea:49:95:
29:cf:c8:29:ed:05:86:50:5e:07:75:0f:e2:cf:f2:
4a:22:df:e3:c1:f5:f2:e4:72:b1:6b:ce:62:85:65:
37:1d:0d:4c:60:76:40:16:46:c8:6c:54:55:55:24:
b6:41:d8:1a:d3:e8:c3:62:d2:65:79:07:d7:2e:4c:
d3:70:f6:2c:a3:b7:e3:d2:e2:00:6e:99:56:b8:d7:
5b:d7:e1:1f:f5:07:77:98:bc:44:3d:fa:a7:c4:60:
97:ef:ee:b1:cf:19:62:03:fd:1f:57:db:3b:d9:18:
aa:86:64:59:3d:25:65:ce:f1:ec:83:7c:d1:25:91:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:23:06:10:F8:43:20:13:32:F2:05:BE:AA:BD:F6:B3:E5:3A:29
X509v3 Authority Key Identifier:
keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/24D4478E774611EFA3ACCD6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.48.0/24
14.192.51.0/24
103.64.12.0/23
103.78.242.0/24
IPv6:
2001:df2:8e00::/48
Signature Algorithm: sha256WithRSAEncryption
63:57:bb:23:5a:57:77:3a:cd:55:65:fb:1b:32:ad:a7:fc:b9:
51:4b:e2:fc:09:a4:03:be:ac:4d:36:3f:f9:b9:b6:b0:71:af:
91:a7:26:f5:23:90:a6:cc:9e:7a:db:b2:1e:8d:db:14:26:84:
cf:34:b7:ee:ac:99:d9:1d:16:91:37:05:34:83:ef:ab:73:d6:
aa:6d:0c:26:33:61:ae:22:9b:3d:d6:6d:5b:bc:fb:81:6d:55:
41:d1:59:cf:c4:d5:58:81:48:ec:9b:31:52:e1:ea:a4:e3:df:
77:14:8c:ea:5e:45:b4:90:b0:2f:b1:92:bf:59:34:8e:05:b8:
66:64:3f:e4:f1:a2:4e:ca:fc:56:42:59:9f:6b:39:57:37:6e:
27:a2:c5:d3:af:3c:05:91:b3:a2:c7:07:2c:d2:3c:a2:8c:4f:
b7:f7:fa:0b:64:4b:34:5f:c7:57:e1:37:ac:dc:95:0b:fc:8f:
75:9f:a1:a0:08:9a:45:0d:bf:27:b8:a9:3d:30:61:8b:58:f6:
a6:d9:50:ae:a4:a1:81:5e:2c:20:9d:7c:2b:8c:8f:cc:07:a7:
ad:96:dc:6d:d0:60:31:35:23:f4:ad:ff:8f:35:33:dc:76:8f:
9c:e6:bd:08:05:1d:74:f9:c5:23:5b:12:e1:6e:13:8e:e5:c3:
e9:77:d2:3b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICE+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5M0YxMTAvBgNVBAUTKEIyRjhBQjAwRDU3NDY0REQ1RDA1QTQ1QTQ3QzQyMEY1
Rjg5NkI4RkMwHhcNMjUwNjEwMTcxODM3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQ4NjhlZC1kNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfsMO0o0+6ebfCB4SuNumIbBghmIrw7+zNrdzZtLHS0AEzw+MdJfndA2Rn1E
SU99yGh4ViIpSsaWud1FzG2tddOmMqKWm1yQ4SQYlU3F7RmcIs6OVwUY4tA8pcYc
fbpAkK9ezHLoAHd0Bil2rsX3hQSNjNNSbD58NZCIpZ6cvrs0E0nqSZUpz8gp7QWG
UF4HdQ/iz/JKIt/jwfXy5HKxa85ihWU3HQ1MYHZAFkbIbFRVVSS2Qdga0+jDYtJl
eQfXLkzTcPYso7fj0uIAbplWuNdb1+Ef9Qd3mLxEPfqnxGCX7+6xzxliA/0fV9s7
2RiqhmRZPSVlzvHsg3zRJZFiIQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPpMIwYQ
+EMgEzLyBb6qvfaz5TopMB8GA1UdIwQYMBaAFLL4qwDVdGTdXQWkWkfEIPX4lrj8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkzRi8yRUQ3NzVEQUEz
NkMxMUU4OTE0MDU5MjZDNEY5QUUwMi9zdmlyQU5WMFpOMWRCYVJhUjhRZzlmaVd1
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N2aXJBTlYwWk4xZEJhUmFSOFFnOWZpV3VQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU5M0YvMkVENzc1REFBMzZDMTFFODkxNDA1OTI2QzRGOUFFMDIvMjRENDQ3OEU3
NzQ2MTFFRkEzQUNDRDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E
MzAxMB4EAgABMBgDBAAOwDADBAAOwDMDBAFnQAwDBABnTvIwDwQCAAIwCQMHACAB
DfKOADANBgkqhkiG9w0BAQsFAAOCAQEAY1e7I1pXdzrNVWX7GzKtp/y5UUvi/Amk
A76sTTY/+bm2sHGvkacm9SOQpsyeetuyHo3bFCaEzzS37qyZ2R0WkTcFNIPvq3PW
qm0MJjNhriKbPdZtW7z7gW1VQdFZz8TVWIFI7JsxUuHqpOPfdxSM6l5FtJCwL7GS
v1k0jgW4ZmQ/5PGiTsr8VkJZn2s5VzduJ6LF0688BZGzoscHLNI8ooxPt/f6C2RL
NF/HV+E3rNyVC/yPdZ+hoAiaRQ2/J7ipPTBhi1j2ptlQrqShgV4sIJ18K4yPzAen
rZbcbdBgMTUj9K3/jzUz3HaPnOa9CAUddPnFI1sS4W4TjuXD6XfSOw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:47:13 2025 by rpki-client