Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/BF97791C4B6C11F0843D3567C4F9AE02.roa
File: BF97791C4B6C11F0843D3567C4F9AE02.roa (raw, json)
Hash identifier: gGTp+vz6cxtSToJPADyEB0H+BiOLt3KWmtNaWUj3u5s=
Subject key identifier: 55:DF:43:A0:18:07:75:51:3C:B1:8A:6C:A5:50:5F:6D:FA:98:20:45
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 04E6
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/BF97791C4B6C11F0843D3567C4F9AE02.roa
Signing time: Tue 17 Jun 2025 11:18:09 +0000
ROA not before: Tue 17 Jun 2025 11:18:09 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.73.220.0/24 maxlen: 24
103.73.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 05:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Jun 17 11:18:09 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=68514ef1-6552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:b0:b8:72:d6:c0:75:8d:9d:6c:7d:a7:ca:
78:db:25:55:df:47:51:79:6a:99:e6:1c:e5:fa:c1:
4d:8c:c2:37:37:4a:97:ac:f8:42:e1:5a:cf:fc:31:
3e:a0:e1:b6:cd:1d:e1:5b:74:21:ad:c5:8b:93:94:
ef:fd:bf:42:00:25:52:85:ae:20:f3:46:e8:87:33:
20:60:47:3e:2a:b6:1d:19:f7:72:bf:c6:cc:00:cc:
89:1f:19:a2:e1:e1:19:c7:52:cb:3e:49:c1:2f:3d:
d1:f9:ef:9a:7f:e1:27:31:2e:b9:f0:30:2d:45:0c:
87:28:18:a9:be:f9:06:79:f4:2d:3a:a9:1a:06:52:
cd:c5:f4:5f:bc:db:72:e4:1c:49:e3:e1:2b:e8:db:
64:4d:2e:53:79:48:d3:e6:f8:e4:ef:a8:0e:75:0f:
d2:2d:b9:14:c2:ba:89:e0:71:8e:5a:85:b8:7e:d4:
00:30:54:4f:51:91:43:0c:90:45:a6:08:58:7c:b6:
8b:11:da:1d:57:12:a8:b2:1f:c6:50:d9:72:df:bb:
54:53:9a:8f:9d:79:35:eb:0c:6f:6d:af:e6:ca:bb:
7e:06:61:f1:77:dc:e3:86:0d:22:48:06:bc:5b:f2:
38:fd:8f:da:e7:31:4a:a5:22:69:fb:5a:fc:80:a3:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DF:43:A0:18:07:75:51:3C:B1:8A:6C:A5:50:5F:6D:FA:98:20:45
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/BF97791C4B6C11F0843D3567C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.220.0/24
103.73.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f3:c2:2d:7e:0d:a4:7a:8b:05:c7:72:b4:a4:6d:06:30:d9:
b2:db:45:c1:8d:6d:e7:73:a5:98:a9:50:90:95:46:62:98:44:
aa:89:a1:7e:7e:d7:2d:a5:db:31:c8:87:c7:91:65:3a:c9:da:
81:55:b5:a4:5f:76:b6:b1:87:d5:bb:94:7b:99:98:de:a8:d6:
36:84:26:df:57:09:d8:f2:79:38:a7:36:24:25:e2:a4:28:d4:
9d:b6:d6:8e:33:84:70:34:ad:64:b9:fb:ca:cc:db:37:e3:32:
0c:4e:73:f9:7f:7f:4d:12:5a:9a:33:cd:d7:0c:a0:9a:08:3c:
2d:6c:d8:31:5b:7d:20:cf:42:29:cb:6a:8d:5d:a0:a0:0c:03:
d8:a8:f8:9b:33:c3:68:f4:6b:ad:ca:ff:13:46:6f:7b:97:6a:
f8:f0:86:f2:8b:54:eb:44:7c:8f:54:61:b8:1b:d3:39:8c:4f:
fe:a8:d2:a2:9c:da:ad:5b:b1:f2:47:c0:34:9b:fe:c6:31:4d:
f7:6f:d3:e3:a2:e0:15:60:f3:87:c6:f5:ae:75:98:f2:f0:ba:
94:11:df:4a:f4:cf:2e:c3:93:5d:9b:86:c4:45:f4:b6:bd:cf:
97:9e:bd:65:f8:c6:6c:ba:64:b5:42:ff:09:00:24:dc:a6:8d:
fe:c5:82:9c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjUwNjE3MTExODA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODUxNGVmMS02NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjSwuHLWwHWNnWx9p8p42yVV30dReWqZ5hzl+sFNjMI3N0qXrPhC4VrP/DE+
oOG2zR3hW3QhrcWLk5Tv/b9CACVSha4g80bohzMgYEc+KrYdGfdyv8bMAMyJHxmi
4eEZx1LLPknBLz3R+e+af+EnMS658DAtRQyHKBipvvkGefQtOqkaBlLNxfRfvNty
5BxJ4+Er6NtkTS5TeUjT5vjk76gOdQ/SLbkUwrqJ4HGOWoW4ftQAMFRPUZFDDJBF
pghYfLaLEdodVxKosh/GUNly37tUU5qPnXk16wxvba/myrt+BmHxd9zjhg0iSAa8
W/I4/Y/a5zFKpSJp+1r8gKPYYwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFXfQ6AY
B3VRPLGKbKVQX236mCBFMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvQkY5Nzc5MUM0
QjZDMTFGMDg0M0QzNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnSdwDBABnSd4wDQYJKoZIhvcNAQELBQADggEBAD3zwi1+
DaR6iwXHcrSkbQYw2bLbRcGNbedzpZipUJCVRmKYRKqJoX5+1y2l2zHIh8eRZTrJ
2oFVtaRfdraxh9W7lHuZmN6o1jaEJt9XCdjyeTinNiQl4qQo1J221o4zhHA0rWS5
+8rM2zfjMgxOc/l/f00SWpozzdcMoJoIPC1s2DFbfSDPQinLao1doKAMA9io+Jsz
w2j0a63K/xNGb3uXavjwhvKLVOtEfI9UYbgb0zmMT/6o0qKc2q1bsfJHwDSb/sYx
Tfdv0+Oi4BVg84fG9a51mPLwupQR30r0zy7Dk12bhsRF9La9z5eevWX4xmy6ZLVC
/wkAJNymjf7Fgpw=
-----END CERTIFICATE-----
Generated at Mon Jul 21 06:54:19 2025 by rpki-client