Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B6E17E29D9811EEB3AB2839C4F9AE02.roa
File: 7B6E17E29D9811EEB3AB2839C4F9AE02.roa (raw, json)
Hash identifier: 0nYJ6vAEpCRthVSYfDiVFG+80N01al8GMmjrc/A9kuo=
Subject key identifier: 9E:1D:BA:C7:15:D4:B8:A2:40:E3:93:94:EF:97:49:6D:68:5D:63:39
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A371
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B6E17E29D9811EEB3AB2839C4F9AE02.roa
Signing time: Thu 23 Jan 2025 06:27:12 +0000
ROA not before: Thu 23 Jan 2025 06:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146904
IP address blocks: 103.111.6.0/23 maxlen: 24
103.114.246.0/24 maxlen: 24
103.114.247.0/24 maxlen: 24
103.134.250.0/23 maxlen: 24
103.157.126.0/23 maxlen: 24
103.173.242.0/23 maxlen: 24
103.206.176.0/24 maxlen: 24
103.206.177.0/24 maxlen: 24
103.206.178.0/24 maxlen: 24
103.206.179.0/24 maxlen: 24
2001:df5:1e80::/48 maxlen: 48
2001:df7:ac80::/48 maxlen: 48
2400:ea60::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Feb 2025 08:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41841 (0xa371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 23 06:27:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6791e140-e472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:50:9b:83:d3:fb:0d:74:f0:92:85:29:ca:
ad:7a:fe:da:8d:ca:b9:50:35:5f:ce:c0:14:98:b4:
b8:98:21:0b:3f:73:a1:91:f6:f3:8b:17:8e:6e:f5:
a1:6b:69:d0:c9:9a:64:e7:32:59:27:07:50:e6:ed:
70:1a:01:11:c8:b8:36:f4:a5:68:bd:b8:ed:7d:5c:
fd:6b:af:48:d3:ba:38:82:75:21:bc:19:06:1a:85:
3b:c9:b5:98:2b:f4:16:ee:35:6f:f4:e7:d4:d7:ae:
8f:26:d5:45:f7:ef:c1:db:fa:de:aa:08:2c:b3:fc:
83:b4:5f:45:8b:ef:50:e4:39:39:52:96:8a:32:fe:
c2:b6:48:e8:7a:3b:61:9e:f0:bc:c9:cd:78:7c:e8:
0b:4f:4a:5c:ff:a1:06:38:ac:a8:b0:0d:96:30:2f:
aa:04:ee:ce:3f:98:5d:a6:9b:cf:48:f7:c5:87:b6:
6b:44:31:a8:f5:12:a6:95:12:98:02:bb:b2:ca:49:
aa:2b:8c:4a:d7:a0:d4:12:0a:7b:92:15:8e:9b:5b:
c2:2e:0f:a2:bd:a4:76:5f:b2:df:53:df:39:fe:cf:
e1:3f:de:7e:86:18:bf:22:b9:bb:6c:0c:b8:aa:a0:
bf:59:08:ec:4a:d3:83:50:7b:b1:fb:53:93:96:dd:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:BA:C7:15:D4:B8:A2:40:E3:93:94:EF:97:49:6D:68:5D:63:39
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B6E17E29D9811EEB3AB2839C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.6.0/23
103.114.246.0/23
103.134.250.0/23
103.157.126.0/23
103.173.242.0/23
103.206.176.0/22
IPv6:
2001:df5:1e80::/48
2001:df7:ac80::/48
2400:ea60::/32
Signature Algorithm: sha256WithRSAEncryption
90:e6:b7:b0:a2:b6:50:2f:f3:75:21:3a:a9:73:d7:92:da:38:
7b:ff:33:85:5e:e3:a7:13:dd:e3:18:dd:ac:40:5d:b5:25:da:
91:f1:9f:71:f4:50:aa:e6:06:a9:1c:b4:99:12:f7:a9:6d:f4:
84:de:7f:99:95:1a:cf:00:a2:15:4f:86:e0:a3:3d:2a:00:79:
cf:96:1c:77:5e:90:ef:81:98:67:ff:f8:3a:9c:09:42:8a:34:
90:5d:c4:86:ca:8a:d3:84:d1:49:47:5c:14:4d:08:74:d2:e7:
84:27:15:43:d0:8a:e6:95:65:f9:e8:5d:06:6f:63:ab:05:28:
81:0e:37:8b:02:66:ae:f8:fe:70:9a:c7:f1:08:92:c7:91:a9:
e1:7e:53:fb:5c:9f:e8:c4:1d:bd:9d:26:23:64:83:21:4e:e2:
c0:46:11:b7:71:a8:c1:4d:c1:82:4c:9e:d7:69:e3:fe:bf:23:
a4:9a:dd:53:bf:fd:58:79:08:ba:1b:e1:7a:e0:8d:7d:81:1d:
0a:f5:8c:c4:f7:f4:9a:c0:cb:2f:e2:ff:31:32:b8:1d:4c:bd:
ed:14:93:73:56:14:d0:07:ef:70:e8:9f:fd:a5:a5:32:c7:52:
d5:58:d7:88:ab:58:3a:a0:26:97:87:9a:f5:5e:a4:3e:36:bc:
cb:1a:b4:c9
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDAKNxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDEyMzA2MjcxMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc5MWUxNDAtZTQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDfUJuD0/sNdPCShSnKrXr+2o3KuVA1X87AFJi0uJghCz9zoZH284sXjm71
oWtp0MmaZOcyWScHUObtcBoBEci4NvSlaL247X1c/WuvSNO6OIJ1IbwZBhqFO8m1
mCv0Fu41b/Tn1NeujybVRffvwdv63qoILLP8g7RfRYvvUOQ5OVKWijL+wrZI6Ho7
YZ7wvMnNeHzoC09KXP+hBjisqLANljAvqgTuzj+YXaabz0j3xYe2a0QxqPUSppUS
mAK7sspJqiuMSteg1BIKe5IVjptbwi4Por2kdl+y31PfOf7P4T/efoYYvyK5u2wM
uKqgv1kI7ErTg1B7sftTk5bdfwMCAwEAAaOCAtQwggLQMB0GA1UdDgQWBBSeHbrH
FdS4okDjk5Tvl0ltaF1jOTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCNkUxN0Uy
OUQ5ODExRUVCM0FCMjgzOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMF4GCCsGAQUFBwEHAQH/
BE8wTTAqBAIAATAkAwQBZ28GAwQBZ3L2AwQBZ4b6AwQBZ51+AwQBZ63yAwQCZ86w
MB8EAgACMBkDBwAgAQ31HoADBwAgAQ33rIADBQAkAOpgMA0GCSqGSIb3DQEBCwUA
A4IBAQCQ5reworZQL/N1ITqpc9eS2jh7/zOFXuOnE93jGN2sQF21JdqR8Z9x9FCq
5gapHLSZEvepbfSE3n+ZlRrPAKIVT4bgoz0qAHnPlhx3XpDvgZhn//g6nAlCijSQ
XcSGyorThNFJR1wUTQh00ueEJxVD0IrmlWX56F0Gb2OrBSiBDjeLAmau+P5wmsfx
CJLHkanhflP7XJ/oxB29nSYjZIMhTuLARhG3cajBTcGCTJ7XaeP+vyOkmt1Tv/1Y
eQi6G+F64I19gR0K9YzE9/SawMsv4v8xMrgdTL3tFJNzVhTQB+9w6J/9paUyx1LV
WNeIq1g6oCaXh5r1XqQ+NrzLGrTJ
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:25 2025 by rpki-client