Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/65F89850A96711E79BECEA42C4F9AE02.roa
File: 65F89850A96711E79BECEA42C4F9AE02.roa (raw, json)
Hash identifier: 5TOjePk+7WXC9EztMM3azNwXTCLUCVRgqyyVuTVhz/M=
Subject key identifier: 36:B9:2D:9C:0E:42:3B:66:9A:87:0F:0D:6C:A3:94:ED:12:85:16:A3
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 17F9
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/65F89850A96711E79BECEA42C4F9AE02.roa
Signing time: Sat 30 Nov 2024 16:44:29 +0000
ROA not before: Sat 30 Nov 2024 16:44:29 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 17828
IP address blocks: 103.77.24.0/23 maxlen: 23
103.77.25.0/24 maxlen: 24
2401:d540::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Apr 2025 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6137 (0x17f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5
Validity
Not Before: Nov 30 16:44:29 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674b40ed-5a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:42:db:c2:3c:cb:87:d7:b8:e8:11:97:08:
3a:8c:95:eb:cd:58:71:89:25:00:ec:ac:cb:8d:42:
dd:f1:38:b3:ce:10:cb:48:39:ee:06:33:32:66:1e:
ae:3b:22:2c:00:18:b3:ba:22:92:6a:cb:97:b1:b2:
4e:7d:01:e6:0a:5b:8a:31:03:71:38:9d:25:ee:7e:
fe:a4:45:1f:d8:46:0f:30:09:99:13:e8:41:84:d5:
1c:1f:bd:f1:37:a8:f5:ce:3f:1e:fd:52:c2:11:46:
80:21:57:e8:5e:80:8c:ca:de:df:ae:5b:96:30:31:
4f:f1:d2:5d:0a:e9:fd:26:51:af:8c:4a:27:bb:ab:
77:e2:d5:60:88:27:80:d4:3f:cf:e6:83:11:57:ac:
73:13:1e:9f:46:b7:36:59:94:4b:63:e3:eb:80:d1:
59:d1:d9:4b:44:56:25:6d:d6:c8:4a:9d:a0:c9:14:
79:79:c1:f6:60:1c:6b:0c:b2:ef:79:61:d9:c0:f1:
e6:3a:ae:fb:ea:cb:64:6b:2e:c4:59:8f:5a:60:e7:
21:6e:46:93:8e:87:9d:5a:25:d7:72:f1:49:49:32:
59:67:fd:a9:5c:e7:80:0b:0a:ae:41:8b:fb:e0:68:
8e:fe:ee:e6:3b:f6:b0:d9:4c:51:29:ce:4d:e9:05:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B9:2D:9C:0E:42:3B:66:9A:87:0F:0D:6C:A3:94:ED:12:85:16:A3
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/65F89850A96711E79BECEA42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.24.0/23
IPv6:
2401:d540::/32
Signature Algorithm: sha256WithRSAEncryption
01:71:41:c2:61:e0:4e:ac:ee:72:9e:0c:42:6c:86:25:d6:f4:
ae:68:91:1b:7d:85:ae:53:98:42:b3:5d:b5:ae:88:e8:5f:79:
4a:0e:7d:bc:54:d2:d9:e4:df:c3:6b:1e:f3:e1:47:0c:86:a2:
01:42:06:e8:57:5b:e0:65:09:28:21:3d:e4:79:54:31:31:0f:
8a:63:71:3d:c4:fa:ac:a4:00:21:15:c0:87:06:21:b8:8f:61:
05:4a:d6:9f:f3:a0:a3:0c:36:9e:bb:21:35:3e:5e:98:03:a5:
6e:ab:fb:ac:5e:92:ec:09:a2:fb:0a:96:22:c5:5a:6e:0e:20:
9e:7d:c5:a0:28:d7:7c:9a:63:2a:70:79:10:6c:b0:d1:70:ca:
a7:c2:4a:b1:fa:31:a5:ae:43:e0:df:2a:8d:c0:f0:ec:95:3b:
9a:25:15:a1:13:a1:64:6e:eb:75:b8:71:59:14:77:2b:d4:d1:
cc:f1:73:27:9c:0a:ff:d9:b6:07:db:78:40:52:5a:98:2b:f8:
20:c8:b2:fa:22:7c:4d:ed:ac:28:57:28:50:e2:f1:22:83:29:
af:c6:9e:01:15:8b:56:8c:ae:39:e7:51:7c:f2:18:51:81:b8:
6d:c2:fd:9c:f4:8c:a1:02:4c:53:83:58:ae:ab:cf:c3:28:2e:
e4:e4:a8:5e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICF/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG
RDg5NDdENjAwHhcNMjQxMTMwMTY0NDI5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRiNDBlZC01YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvudC28I8y4fXuOgRlwg6jJXrzVhxiSUA7KzLjULd8TizzhDLSDnuBjMyZh6u
OyIsABizuiKSasuXsbJOfQHmCluKMQNxOJ0l7n7+pEUf2EYPMAmZE+hBhNUcH73x
N6j1zj8e/VLCEUaAIVfoXoCMyt7frluWMDFP8dJdCun9JlGvjEonu6t34tVgiCeA
1D/P5oMRV6xzEx6fRrc2WZRLY+PrgNFZ0dlLRFYlbdbISp2gyRR5ecH2YBxrDLLv
eWHZwPHmOq776stkay7EWY9aYOchbkaTjoedWiXXcvFJSTJZZ/2pXOeACwquQYv7
4GiO/u7mO/aw2UxRKc5N6QWb9QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDa5LZwO
QjtmmocPDWyjlO0ShRajMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5
NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVCRTUvNjRDNTI3MDhBOTVGMTFFNzlBRDRFNzM0QzRGOUFFMDIvNjVGODk4NTBB
OTY3MTFFNzlCRUNFQTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnTRgwDQQCAAIwBwMFACQB1UAwDQYJKoZIhvcNAQELBQAD
ggEBAAFxQcJh4E6s7nKeDEJshiXW9K5okRt9ha5TmEKzXbWuiOhfeUoOfbxU0tnk
38NrHvPhRwyGogFCBuhXW+BlCSghPeR5VDExD4pjcT3E+qykACEVwIcGIbiPYQVK
1p/zoKMMNp67ITU+XpgDpW6r+6xekuwJovsKliLFWm4OIJ59xaAo13yaYypweRBs
sNFwyqfCSrH6MaWuQ+DfKo3A8OyVO5olFaEToWRu63W4cVkUdyvU0czxcyecCv/Z
tgfbeEBSWpgr+CDIsvoifE3trChXKFDi8SKDKa/GngEVi1aMrjnnUXzyGFGBuG3C
/Zz0jKECTFODWK6rz8MoLuTkqF4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:15:27 2025 by rpki-client