Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa
File: 0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa (raw, json)
Hash identifier: /AyQMqWZ57bgXPGZC6xfQU7bxlqUkG6/f7HGBOIGwIM=
Subject key identifier: 18:4F:B2:BC:FF:A9:60:D7:3D:57:FE:0B:A2:18:4D:0B:D9:0F:C5:58
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: 06
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa
Signing time: Wed 17 Apr 2024 18:48:11 +0000
ROA not before: Wed 17 Apr 2024 18:48:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 38136
IP address blocks: 103.14.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098
Validity
Not Before: Apr 17 18:48:11 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6620196b-983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f9:74:a4:0f:8f:0e:ed:cb:05:97:1b:0d:af:
d3:55:37:21:53:64:9c:99:d5:70:cf:5e:32:aa:35:
38:e9:3b:15:4b:7b:2f:1b:d0:de:d1:b1:cb:52:c5:
09:48:a6:16:6b:89:8b:eb:df:8e:c3:d5:3f:cd:f5:
78:44:26:81:ed:18:54:14:f5:b8:85:4e:c1:e9:b9:
4d:c0:dd:f5:73:59:96:4e:7e:4a:64:72:da:4e:da:
32:3c:ef:d6:6d:98:44:eb:30:4c:39:0c:bb:22:91:
35:5d:9c:75:66:c8:1f:49:12:3e:ca:58:cf:01:23:
7c:62:a6:86:25:5c:cb:e1:bf:e7:9a:bb:67:ab:28:
f2:2e:eb:a3:5b:f6:41:bd:89:d1:23:77:06:c0:d3:
df:18:24:e4:9b:07:98:22:86:28:fb:26:db:6f:a6:
64:5b:99:90:33:0f:28:01:32:30:6e:f3:3d:17:41:
45:12:52:e9:7b:46:bf:6e:5c:74:72:61:78:6b:4e:
62:03:60:b8:55:2b:fd:41:74:f1:a3:99:95:bc:14:
59:f9:00:e2:cf:63:d1:a1:f2:be:ad:db:92:4e:83:
cd:fa:2e:59:a8:0d:70:fb:da:b6:3a:eb:57:51:39:
8c:67:50:00:93:1d:05:d6:22:4d:cc:71:6b:5a:bf:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:B2:BC:FF:A9:60:D7:3D:57:FE:0B:A2:18:4D:0B:D9:0F:C5:58
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.92.0/23
Signature Algorithm: sha256WithRSAEncryption
42:63:66:fb:78:9f:50:e3:46:a7:54:f5:40:c2:ec:21:d5:93:
53:a1:9e:61:c0:2d:4a:28:0a:a9:82:fd:e6:b5:a7:c9:ac:0f:
e3:c7:c2:23:b3:4b:9e:16:ed:e1:85:c8:98:91:3a:6c:d2:56:
0d:ad:40:94:c6:42:11:86:a5:26:e7:66:51:8e:82:ad:c3:09:
a4:66:fa:61:9d:b9:36:a0:ac:3e:56:b2:56:2f:98:41:65:b0:
59:06:45:8b:67:0b:41:75:01:09:b5:35:d9:6d:43:92:34:d3:
bf:86:80:ad:38:30:e6:9f:b6:08:9f:36:79:81:8d:b9:b5:aa:
fb:e4:fe:b8:39:f9:85:1a:dd:0e:a6:3e:3e:b9:a7:55:b8:d8:
76:43:a3:21:ef:5b:3f:09:2c:71:a3:6d:ca:ff:b4:a2:2d:4d:
b3:2b:5d:33:35:17:e2:e6:4b:9a:c8:91:da:46:c5:6b:5d:e8:
05:53:f6:af:07:ed:53:34:68:ea:12:60:d8:05:c8:41:31:f1:
fd:ab:2a:e6:d9:f3:6a:c6:cf:c5:3d:bc:9a:84:0f:fa:86:9c:
bb:1d:95:76:a1:e8:44:9a:a1:d1:a7:05:a8:52:3a:07:32:a2:
8b:a1:69:3e:41:bf:03:a1:65:e7:b9:f8:b5:f1:a8:e0:15:3a:
13:93:d3:96
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NTA5ODExMC8GA1UEBRMoNjAzMkY2M0ZEMjYxNjgxQTQwRjczMEI5Nzg3MjUxRTYz
MzI4Q0Q2RTAeFw0yNDA0MTcxODQ4MTFaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MjAxOTZiLTk4M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDi+XSkD48O7csFlxsNr9NVNyFTZJyZ1XDPXjKqNTjpOxVLey8b0N7RsctSxQlI
phZriYvr347D1T/N9XhEJoHtGFQU9biFTsHpuU3A3fVzWZZOfkpkctpO2jI879Zt
mETrMEw5DLsikTVdnHVmyB9JEj7KWM8BI3xipoYlXMvhv+eau2erKPIu66Nb9kG9
idEjdwbA098YJOSbB5gihij7JttvpmRbmZAzDygBMjBu8z0XQUUSUul7Rr9uXHRy
YXhrTmIDYLhVK/1BdPGjmZW8FFn5AOLPY9Gh8r6t25JOg836LlmoDXD72rY661dR
OYxnUACTHQXWIk3McWtav2jnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGE+yvP+p
YNc9V/4LohhNC9kPxVgwHwYDVR0jBBgwFoAUYDL2P9JhaBpA9zC5eHJR5jMozW4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1MDk4L0IyQjFBMkI4RkM3
MTExRUVCRENDNEI1M0M0RjlBRTAyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pX
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWURMMlA5SmhhQnBBOXpDNWVISlI1ak1velc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi8wQTIzMDFCMkZD
RUIxMUVFQkE1OURDMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcOXDANBgkqhkiG9w0BAQsFAAOCAQEAQmNm+3ifUONGp1T1
QMLsIdWTU6GeYcAtSigKqYL95rWnyawP48fCI7NLnhbt4YXImJE6bNJWDa1AlMZC
EYalJudmUY6CrcMJpGb6YZ25NqCsPlayVi+YQWWwWQZFi2cLQXUBCbU12W1DkjTT
v4aArTgw5p+2CJ82eYGNubWq++T+uDn5hRrdDqY+PrmnVbjYdkOjIe9bPwkscaNt
yv+0oi1NsytdMzUX4uZLmsiR2kbFa13oBVP2rwftUzRo6hJg2AXIQTHx/asq5tnz
asbPxT28moQP+oacux2VdqHoRJqh0acFqFI6BzKii6FpPkG/A6Fl57n4tfGo4BU6
E5PTlg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:42:45 2025 by rpki-client