Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/5987607AC1CD11EF9FF6E05EC4F9AE02.roa
File: 5987607AC1CD11EF9FF6E05EC4F9AE02.roa (raw, json)
Hash identifier: oCWZaHLCcASRWJETZnFF6z1evYK4XLaG9BDT9puMq7s=
Subject key identifier: 17:75:85:60:CE:74:AC:9B:84:9E:E3:09:BB:96:2C:A9:42:FD:C4:36
Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial: 55
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/5987607AC1CD11EF9FF6E05EC4F9AE02.roa
Signing time: Wed 08 Jan 2025 04:19:11 +0000
ROA not before: Wed 08 Jan 2025 04:19:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.78.222.0/24 maxlen: 24
103.78.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 03:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172A52
Validity
Not Before: Jan 8 04:19:11 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=677dfcbf-836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:01:1b:0c:f6:10:68:a2:7e:ce:af:bd:f9:
a4:0b:b4:e3:d6:bb:98:f9:a1:e4:e2:ee:74:80:43:
3f:12:de:c2:ee:da:9a:7d:3e:97:2b:5a:a8:11:c6:
ee:c1:c9:a5:6c:8c:eb:2a:e9:aa:13:a9:24:2d:a3:
95:33:20:50:e6:3c:79:c3:78:c7:eb:c0:6e:89:99:
d1:a7:6c:35:3b:93:0f:45:e9:79:1a:0d:9c:6b:9a:
75:48:e1:c3:46:36:90:f6:27:e4:1c:2d:23:fe:bf:
6d:98:e7:b2:2f:00:22:02:ba:6f:ae:b8:bc:e1:fa:
a8:15:51:31:0f:6b:01:da:45:b6:3f:61:02:33:a9:
00:23:b5:58:67:79:36:1f:cf:56:4d:7d:7f:e7:34:
d7:78:cd:f4:76:b3:88:2d:a8:3b:08:4e:d9:82:4d:
10:27:fd:17:ea:3a:e4:b1:1b:78:57:6e:bf:70:62:
04:65:34:df:b4:c4:2b:ee:c7:b5:23:db:e8:d7:59:
a7:06:ff:64:28:8f:40:c6:79:51:00:d7:1d:c9:33:
60:b0:ac:84:79:00:d0:4c:64:d4:95:00:ef:c9:77:
45:09:0d:e3:8a:03:2e:6c:47:b6:ca:cf:b8:81:cd:
5e:43:a2:9d:5f:43:05:cc:16:22:25:5a:f6:8b:a2:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:75:85:60:CE:74:AC:9B:84:9E:E3:09:BB:96:2C:A9:42:FD:C4:36
X509v3 Authority Key Identifier:
keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/5987607AC1CD11EF9FF6E05EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.222.0/23
Signature Algorithm: sha256WithRSAEncryption
04:8e:50:b3:21:7b:d9:74:0c:01:40:6b:e6:7d:f3:d2:60:15:
aa:a4:bf:ab:3c:79:00:fa:cb:b1:fe:c9:ed:39:bd:ea:31:39:
97:22:1e:7e:eb:76:3b:84:01:0f:8b:bd:d5:59:30:66:0e:71:
ca:e4:51:5e:bb:c5:02:a4:0e:22:09:13:a6:56:7a:7c:fa:8e:
8f:a0:af:35:92:f8:61:9e:dc:1c:8e:14:ed:2e:91:e8:48:09:
83:13:9d:87:07:ea:63:d4:17:12:8c:a9:6c:91:d5:9d:7f:f1:
a1:7d:ff:0d:19:51:17:1c:dd:58:d0:c8:ff:0d:9c:16:77:05:
5c:8f:8c:09:05:0e:57:9a:9b:d4:f0:79:d5:c2:2f:0a:94:a3:
ea:d4:39:72:6a:6c:e7:06:74:19:4f:e5:65:7e:d8:c3:aa:a3:
25:0b:98:b3:fe:ce:25:93:c6:27:38:5b:31:23:5b:7f:a8:0e:
cf:0a:fb:f1:2a:af:7d:9e:9c:89:df:28:60:01:56:71:de:88:
07:8b:24:10:52:84:2a:48:df:f2:13:62:a2:aa:a0:09:ca:8b:
ac:0b:3f:5a:b8:cc:36:79:e9:86:41:4d:d6:c0:7e:6c:89:26:
cd:4a:ca:ea:0a:8c:21:99:0d:b5:3e:92:70:dd:c4:59:c0:e6:
54:e1:0d:2d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MkE1MjExMC8GA1UEBRMoNjc0QUM1N0MwOTk4NzZBMDY2NTcxODBCMzRFMjRFNkVF
RTg4NDQxMTAeFw0yNTAxMDgwNDE5MTFaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3N2RmY2JmLTgzNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMLgEbDPYQaKJ+zq+9+aQLtOPWu5j5oeTi7nSAQz8S3sLu2pp9PpcrWqgRxu7B
yaVsjOsq6aoTqSQto5UzIFDmPHnDeMfrwG6JmdGnbDU7kw9F6XkaDZxrmnVI4cNG
NpD2J+QcLSP+v22Y57IvACICum+uuLzh+qgVUTEPawHaRbY/YQIzqQAjtVhneTYf
z1ZNfX/nNNd4zfR2s4gtqDsITtmCTRAn/RfqOuSxG3hXbr9wYgRlNN+0xCvux7Uj
2+jXWacG/2Qoj0DGeVEA1x3JM2CwrIR5ANBMZNSVAO/Jd0UJDeOKAy5sR7bKz7iB
zV5Dop1fQwXMFiIlWvaLoh5JAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUF3WFYM50
rJuEnuMJu5YsqUL9xDYwHwYDVR0jBBgwFoAUZ0rFfAmYdqBmVxgLNOJObu6IRBEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQTUyLzNFNzZEN0VFOTgx
OTExRUZCMEQwREQzNEM0RjlBRTAyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJC
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWjByRmZBbVlkcUJtVnhnTE5PSk9idTZJUkJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi81OTg3NjA3QUMx
Q0QxMUVGOUZGNkUwNUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdO3jANBgkqhkiG9w0BAQsFAAOCAQEABI5QsyF72XQMAUBr
5n3z0mAVqqS/qzx5APrLsf7J7Tm96jE5lyIefut2O4QBD4u91VkwZg5xyuRRXrvF
AqQOIgkTplZ6fPqOj6CvNZL4YZ7cHI4U7S6R6EgJgxOdhwfqY9QXEoypbJHVnX/x
oX3/DRlRFxzdWNDI/w2cFncFXI+MCQUOV5qb1PB51cIvCpSj6tQ5cmps5wZ0GU/l
ZX7Yw6qjJQuYs/7OJZPGJzhbMSNbf6gOzwr78SqvfZ6cid8oYAFWcd6IB4skEFKE
Kkjf8hNioqqgCcqLrAs/WrjMNnnphkFN1sB+bIkmzUrK6gqMIZkNtT6ScN3EWcDm
VOENLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:53:50 2025 by rpki-client