Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/077DD32ADEED11EBB0C6A33CC4F9AE02.roa
File: 077DD32ADEED11EBB0C6A33CC4F9AE02.roa (raw, json)
Hash identifier: FP0/JnMi1qJyy7uixLwqql8qa7L+FeTSsxI8UEqcTCo=
Subject key identifier: 52:54:1C:96:0E:55:B7:E0:60:39:24:8A:56:4E:2D:CE:D2:20:F1:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 88CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/077DD32ADEED11EBB0C6A33CC4F9AE02.roa
Signing time: Thu 30 May 2024 15:56:11 +0000
ROA not before: Thu 30 May 2024 15:56:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133257
IP address blocks: 103.121.68.0/22 maxlen: 24
2400:9d60::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 07:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35023 (0x88cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:56:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a19b-f2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:30:c1:54:50:9f:6a:c6:a3:0d:59:6c:3b:81:
2d:f6:90:c8:49:b9:99:85:92:a9:a5:3f:15:c9:54:
25:39:f1:e9:25:31:af:32:18:f3:f0:3c:61:f6:d1:
e7:0e:54:ca:63:bb:e8:81:07:06:1c:50:5c:49:7a:
7a:7e:99:4e:5f:a1:89:8f:32:64:63:8a:e0:16:e2:
08:75:28:8d:85:e7:58:2d:38:9c:53:8a:da:2b:c8:
84:c2:be:b4:e2:6a:f9:01:8b:94:9c:fb:4a:61:7d:
f0:4c:09:9a:9c:66:0b:42:a5:ec:a8:43:ed:61:55:
88:06:6d:25:e6:7b:51:f5:4c:93:8b:e8:4a:21:e2:
1d:b8:4e:df:29:43:d4:8d:ab:c1:29:ac:0c:03:f2:
36:85:38:33:2f:e5:7c:75:17:04:ac:de:01:3a:bf:
88:7f:c2:3d:bb:72:7c:06:3c:a7:67:ab:63:63:1c:
c8:6d:ad:bb:bb:52:61:b4:39:5c:a3:41:d4:8a:62:
0c:a7:dc:4c:8e:16:1c:6a:0e:1b:0e:e2:41:0a:b7:
2b:d9:88:7d:a6:ea:ba:f0:28:b6:de:79:ee:ab:4c:
d1:f0:1a:45:4e:9c:c0:96:eb:d3:66:9c:a0:a3:dc:
58:ea:e2:32:4e:74:04:f8:f5:54:1b:ee:cd:cd:7d:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:1C:96:0E:55:B7:E0:60:39:24:8A:56:4E:2D:CE:D2:20:F1:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/077DD32ADEED11EBB0C6A33CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.68.0/22
IPv6:
2400:9d60::/32
Signature Algorithm: sha256WithRSAEncryption
89:a5:75:cc:2e:ae:87:fb:7e:c7:41:05:17:6e:fa:52:d5:c3:
5d:4f:7a:9a:ac:2d:f8:19:91:17:77:bc:bd:46:25:31:2d:6d:
c5:d3:2b:fc:aa:81:f0:99:e6:8f:75:74:62:5d:f7:7a:59:39:
c8:5d:41:a1:af:22:79:be:38:c7:b9:16:96:32:38:df:37:2f:
c4:c6:ef:c1:97:35:45:cc:68:e9:13:54:32:57:dd:a2:4a:55:
73:a7:77:c7:d8:cc:e0:84:73:36:c8:7b:a4:2f:7b:f0:9d:19:
c4:cf:b2:2a:99:0d:d1:45:5b:be:b4:6d:3a:85:23:31:45:dc:
4c:fa:c0:1e:ae:49:e2:e9:6c:cf:c6:21:dc:ac:84:22:27:1e:
f8:88:9c:46:44:df:7f:f8:b9:f9:87:35:4c:d1:78:77:ab:ec:
1a:56:7b:90:a2:09:f1:52:42:e5:e8:49:eb:c1:bb:a2:fe:f6:
00:b6:54:12:e5:51:de:c1:31:01:eb:fc:a0:aa:3a:62:51:e8:
22:75:9f:84:92:2c:27:56:67:72:d4:5d:13:42:0f:f7:c7:d7:
5b:59:52:97:dd:8d:65:b1:8d:1d:a5:c1:09:c1:c5:18:31:fe:
a3:ad:5f:e7:3a:0d:44:c5:7d:cd:a7:6a:0e:d2:5c:8e:e9:fb:
69:82:02:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIjPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTYxMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGExOWItZjJhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPAwwVRQn2rGow1ZbDuBLfaQyEm5mYWSqaU/FclUJTnx6SUxrzIY8/A8YfbR
5w5UymO76IEHBhxQXEl6en6ZTl+hiY8yZGOK4BbiCHUojYXnWC04nFOK2ivIhMK+
tOJq+QGLlJz7SmF98EwJmpxmC0Kl7KhD7WFViAZtJeZ7UfVMk4voSiHiHbhO3ylD
1I2rwSmsDAPyNoU4My/lfHUXBKzeATq/iH/CPbtyfAY8p2erY2McyG2tu7tSYbQ5
XKNB1IpiDKfcTI4WHGoOGw7iQQq3K9mIfabquvAott557qtM0fAaRU6cwJbr02ac
oKPcWOriMk50BPj1VBvuzc19Bn8CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRSVByW
DlW34GA5JIpWTi3O0iDxNjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3N0REMzJB
REVFRDExRUJCMEM2QTMzQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCZ3lEMA0EAgACMAcDBQAkAJ1gMA0GCSqGSIb3DQEBCwUA
A4IBAQCJpXXMLq6H+37HQQUXbvpS1cNdT3qarC34GZEXd7y9RiUxLW3F0yv8qoHw
meaPdXRiXfd6WTnIXUGhryJ5vjjHuRaWMjjfNy/Exu/BlzVFzGjpE1QyV92iSlVz
p3fH2MzghHM2yHukL3vwnRnEz7IqmQ3RRVu+tG06hSMxRdxM+sAerkni6WzPxiHc
rIQiJx74iJxGRN9/+Ln5hzVM0Xh3q+waVnuQognxUkLl6Enrwbui/vYAtlQS5VHe
wTEB6/ygqjpiUegidZ+EkiwnVmdy1F0TQg/3x9dbWVKX3Y1lsY0dpcEJwcUYMf6j
rV/nOg1ExX3Np2oO0lyO6ftpggLa
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:45 2025 by rpki-client