Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/0C05AEB4E39D11EFBF2E9828C4F9AE02.roa
File: 0C05AEB4E39D11EFBF2E9828C4F9AE02.roa (raw, json)
Hash identifier: eTh8kNxh7K5FKT5GmezKXoDVWCFbINvFyMeC380W/ts=
Subject key identifier: 74:BC:9A:C7:63:F7:80:79:E0:A1:45:5F:62:C6:AD:90:22:1A:66:AC
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: F0
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/0C05AEB4E39D11EFBF2E9828C4F9AE02.roa
Signing time: Wed 05 Feb 2025 08:41:53 +0000
ROA not before: Wed 05 Feb 2025 08:41:53 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.72.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Feb 2025 07:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Feb 5 08:41:53 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67a32450-1836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:27:ed:ba:0f:c3:ef:16:ad:5b:a0:f6:46:
4a:67:d5:a6:24:cf:c3:15:85:3b:e8:07:c2:d8:f0:
42:fd:ab:75:8b:65:45:a7:de:16:54:58:e2:76:e7:
0f:56:37:cf:ed:d6:cb:7a:e3:7b:7e:c6:bb:48:10:
1e:a1:ae:61:d1:e7:86:89:b2:11:37:70:41:41:22:
b7:10:af:2e:93:41:75:ff:b5:a5:56:c7:cb:60:4a:
de:4b:b9:e5:ad:03:57:b5:57:5b:ca:c8:0b:61:d9:
38:f1:6f:2d:d8:7d:73:01:88:6f:f8:5d:5e:3a:83:
0d:df:13:f3:d5:e2:64:99:e1:a6:51:b6:35:70:f4:
df:73:49:1e:f5:f4:db:31:76:95:a5:f6:a3:2d:e6:
71:4e:6d:45:a0:8d:08:19:d5:5d:1c:f7:07:e0:e7:
c2:13:c1:84:cf:40:70:fc:2b:a8:5f:a2:de:ca:35:
cc:97:56:2f:3d:d6:7e:8d:52:66:40:4c:c8:64:53:
a2:c9:65:c7:9d:8c:78:31:b6:92:b3:d4:83:ca:8a:
c4:1f:28:df:0d:64:cc:97:71:ff:81:77:37:5e:fb:
8d:19:40:1a:76:a2:90:26:65:87:6e:c3:95:8c:04:
b1:24:4c:6a:ef:07:c5:b3:cb:78:ad:2b:c8:42:3c:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BC:9A:C7:63:F7:80:79:E0:A1:45:5F:62:C6:AD:90:22:1A:66:AC
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/0C05AEB4E39D11EFBF2E9828C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.195.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fc:ac:af:fe:eb:ce:67:b6:5f:48:c9:c9:52:00:84:36:1b:
8b:54:f5:df:d4:09:91:81:4f:07:05:a6:5e:c7:4a:a0:10:28:
f8:b9:90:f8:bb:bc:21:e4:46:7f:bf:54:06:6b:e1:ce:df:9c:
a7:84:22:5e:8f:e0:70:91:14:b4:98:52:b2:cf:c0:b4:88:3b:
c8:f9:e9:a4:a6:dc:6a:83:88:a9:fc:ee:7d:88:4e:19:65:be:
b6:00:8b:db:63:43:dc:68:31:e9:d0:04:40:db:42:d8:fb:53:
9e:ec:1c:47:0f:dd:6c:99:ff:e2:98:09:83:d7:ae:9a:31:c2:
e9:e7:ad:62:08:53:d8:85:7a:63:85:54:db:50:19:17:5d:74:
f1:0d:a3:a1:6f:0d:93:ff:3c:dc:de:a5:0b:af:20:2a:4c:8d:
71:f1:98:ac:72:75:ae:b0:52:f3:e8:d7:a3:05:74:a1:8e:2e:
cf:4a:dd:9b:bd:3d:ea:f8:3a:d6:4c:bc:bf:5e:ee:45:f9:e7:
1d:b6:69:bb:8f:7b:91:a5:57:d3:cc:db:77:b0:b8:dd:5c:fd:
ed:f5:0d:db:38:9d:1f:5c:b7:82:7c:52:74:cc:51:49:ca:7a:
a7:aa:4c:55:84:df:ea:51:c8:ea:49:e4:5d:15:37:92:c2:af:
5c:1b:2d:f2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw
MEQ3ODhCRkIwHhcNMjUwMjA1MDg0MTUzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2EzMjQ1MC0xODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7kUn7boPw+8WrVug9kZKZ9WmJM/DFYU76AfC2PBC/at1i2VFp94WVFjiducP
VjfP7dbLeuN7fsa7SBAeoa5h0eeGibIRN3BBQSK3EK8uk0F1/7WlVsfLYEreS7nl
rQNXtVdbysgLYdk48W8t2H1zAYhv+F1eOoMN3xPz1eJkmeGmUbY1cPTfc0ke9fTb
MXaVpfajLeZxTm1FoI0IGdVdHPcH4OfCE8GEz0Bw/CuoX6LeyjXMl1YvPdZ+jVJm
QEzIZFOiyWXHnYx4MbaSs9SDyorEHyjfDWTMl3H/gXc3XvuNGUAadqKQJmWHbsOV
jASxJExq7wfFs8t4rSvIQjxBFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHS8msdj
94B54KFFX2LGrZAiGmasMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz
NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvMEMwNUFFQjRF
MzlEMTFFRkJGMkU5ODI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnSMMwDQYJKoZIhvcNAQELBQADggEBAEP8rK/+685ntl9I
yclSAIQ2G4tU9d/UCZGBTwcFpl7HSqAQKPi5kPi7vCHkRn+/VAZr4c7fnKeEIl6P
4HCRFLSYUrLPwLSIO8j56aSm3GqDiKn87n2IThllvrYAi9tjQ9xoMenQBEDbQtj7
U57sHEcP3WyZ/+KYCYPXrpoxwunnrWIIU9iFemOFVNtQGRdddPENo6FvDZP/PNze
pQuvICpMjXHxmKxyda6wUvPo16MFdKGOLs9K3Zu9Per4OtZMvL9e7kX55x22abuP
e5GlV9PM23ewuN1c/e31Dds4nR9ct4J8UnTMUUnKeqeqTFWE3+pRyOpJ5F0VN5LC
r1wbLfI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:06:58 2025 by rpki-client