Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/E070EA16B08411EFA9263D23C4F9AE02.roa
File: E070EA16B08411EFA9263D23C4F9AE02.roa (raw, json)
Hash identifier: oLRRzmTSfaC2YTM1oKQAuNklocFiuThMu/6BNYBjjjI=
Subject key identifier: 3A:96:EA:0B:C2:8B:4F:C6:A5:EF:8E:DD:3E:92:C8:E2:D4:0C:8A:5B
Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial: 011F
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/E070EA16B08411EFA9263D23C4F9AE02.roa
Signing time: Mon 02 Dec 2024 08:10:22 +0000
ROA not before: Mon 02 Dec 2024 08:10:22 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 55501
IP address blocks: 103.155.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 14:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91765CB
Validity
Not Before: Dec 2 08:10:22 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=674d6b6e-2ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:3d:9a:66:46:1b:67:22:17:1c:49:39:03:
2c:f1:71:ac:5d:3d:e6:74:d5:7c:8f:a2:d1:6e:c1:
e1:f5:d2:5f:77:7a:e4:90:25:0c:16:29:bf:57:2e:
8e:42:89:8b:24:2a:bb:a3:25:b0:27:d3:83:27:15:
34:09:99:f9:eb:23:8b:58:f8:63:85:fd:26:37:df:
53:ba:79:83:e1:79:b7:5b:6a:9c:09:0f:4f:05:44:
f7:9c:35:65:d2:a7:65:d3:f1:37:bf:63:db:fe:c2:
5f:70:89:d8:fd:c1:e4:c3:f8:23:51:58:66:fe:4c:
5c:82:0d:9a:e3:e5:24:fc:a3:d2:5d:65:56:03:00:
0b:04:aa:e3:20:6e:a9:32:76:f6:5a:62:84:f0:c9:
db:d0:4f:21:ed:24:a9:2e:5e:bb:10:12:db:bc:d3:
93:94:1b:02:92:ca:d2:db:48:ba:17:80:0a:c7:ea:
48:0e:e4:e3:27:0d:5f:be:fe:35:e6:ca:e8:11:6c:
44:5f:80:7b:69:f5:cc:a2:ea:40:b9:8b:0c:c5:56:
c6:09:a2:be:7a:ea:e1:de:c9:57:ec:f6:94:ff:82:
cb:50:89:86:93:c9:3a:af:eb:03:e1:ac:dd:01:34:
da:33:d6:ff:92:13:50:bd:a7:40:33:2c:df:03:95:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:EA:0B:C2:8B:4F:C6:A5:EF:8E:DD:3E:92:C8:E2:D4:0C:8A:5B
X509v3 Authority Key Identifier:
keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/E070EA16B08411EFA9263D23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.63.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e1:6a:d7:c2:c1:65:b2:42:6b:ce:67:1f:f9:7d:fc:e3:7f:
aa:bd:02:ff:e2:4f:bc:e8:64:71:ed:b7:7f:e2:eb:58:96:9b:
00:e9:49:62:a0:26:07:d0:f8:45:f2:be:d1:4e:2b:50:6b:0a:
78:af:08:1d:4d:33:87:8b:fe:17:41:7e:7d:a4:b8:a2:a7:15:
b6:05:4f:6c:f0:f3:88:e3:2a:35:ff:e5:db:28:15:10:41:86:
b7:37:14:95:07:ad:e6:57:e6:6b:12:53:24:6a:2a:00:fe:7a:
8d:0f:d3:61:8d:23:e3:1f:bf:0d:c2:2e:08:cb:f3:7f:12:ee:
be:dd:db:92:90:e3:c4:87:5e:af:31:9b:0c:71:c9:be:18:14:
3a:93:c1:b1:29:94:10:c0:15:b9:20:01:0d:4e:26:40:39:f7:
ba:4f:6d:0f:a6:19:0d:94:81:5d:27:f2:11:56:79:b4:84:07:
92:9e:d9:a4:70:29:fb:63:15:dd:09:bc:ae:f1:9a:f1:c7:9f:
c0:07:5b:a7:3a:fd:8c:20:33:ff:55:69:96:eb:0a:dd:f1:7f:
de:f7:7c:7c:29:03:47:69:fb:5e:96:a7:e9:0b:66:47:59:7b:
ab:ad:ac:28:f3:28:68:97:92:71:c5:02:25:b2:d5:a6:d9:94:
79:b2:f6:f0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF
NjVCN0YwRTkwHhcNMjQxMjAyMDgxMDIyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRkNmI2ZS0yYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthQ9mmZGG2ciFxxJOQMs8XGsXT3mdNV8j6LRbsHh9dJfd3rkkCUMFim/Vy6O
QomLJCq7oyWwJ9ODJxU0CZn56yOLWPhjhf0mN99TunmD4Xm3W2qcCQ9PBUT3nDVl
0qdl0/E3v2Pb/sJfcInY/cHkw/gjUVhm/kxcgg2a4+Uk/KPSXWVWAwALBKrjIG6p
Mnb2WmKE8Mnb0E8h7SSpLl67EBLbvNOTlBsCksrS20i6F4AKx+pIDuTjJw1fvv41
5sroEWxEX4B7afXMoupAuYsMxVbGCaK+eurh3slX7PaU/4LLUImGk8k6r+sD4azd
ATTaM9b/khNQvadAMyzfA5VctQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDqW6gvC
i0/Gpe+O3T6SyOLUDIpbMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2
MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzY1Q0IvNjk1NTE1RTAwNjI4MTFFRUE3MTRDMjYzQzRGOUFFMDIvRTA3MEVBMTZC
MDg0MTFFRkE5MjYzRDIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnmz8wDQYJKoZIhvcNAQELBQADggEBACfhatfCwWWyQmvO
Zx/5ffzjf6q9Av/iT7zoZHHtt3/i61iWmwDpSWKgJgfQ+EXyvtFOK1BrCnivCB1N
M4eL/hdBfn2kuKKnFbYFT2zw84jjKjX/5dsoFRBBhrc3FJUHreZX5msSUyRqKgD+
eo0P02GNI+Mfvw3CLgjL838S7r7d25KQ48SHXq8xmwxxyb4YFDqTwbEplBDAFbkg
AQ1OJkA597pPbQ+mGQ2UgV0n8hFWebSEB5Ke2aRwKftjFd0JvK7xmvHHn8AHW6c6
/YwgM/9VaZbrCt3xf973fHwpA0dp+16Wp+kLZkdZe6utrCjzKGiXknHFAiWy1abZ
lHmy9vA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:11 2025 by rpki-client