Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A54AA6CEDD911EF81C6AE84C4F9AE02.roa
File: 9A54AA6CEDD911EF81C6AE84C4F9AE02.roa (raw, json)
Hash identifier: V5o8XJSeLc+hvG2jVqDTkiZF3zgImpJuWodwX2vF0sg=
Subject key identifier: 5A:9C:62:3E:03:36:ED:CA:9C:14:E5:E4:D7:B2:02:44:1C:8E:8B:67
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A8AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A54AA6CEDD911EF81C6AE84C4F9AE02.roa
Signing time: Mon 03 Mar 2025 07:31:43 +0000
ROA not before: Mon 03 Mar 2025 07:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150027
IP address blocks: 43.243.80.0/24 maxlen: 24
43.243.81.0/24 maxlen: 24
43.243.83.0/24 maxlen: 24
45.250.227.0/24 maxlen: 24
103.69.220.0/22 maxlen: 24
103.167.75.0/24 maxlen: 24
103.230.220.0/22 maxlen: 24
103.232.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 09:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43179 (0xa8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 3 07:31:43 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c55adf-0538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:0a:65:ab:89:5a:df:c5:a8:9b:12:2c:00:
d1:9e:5f:57:28:d3:28:57:40:cf:cc:eb:65:f6:c9:
db:24:9b:8f:8e:67:90:6d:a8:ff:b0:af:15:3e:f4:
29:72:30:13:63:7d:c9:d6:9e:eb:5e:ca:f1:d3:7b:
b8:11:0b:08:9d:1b:22:6b:9c:b8:08:0f:39:18:32:
d9:76:7d:a6:b8:b2:6a:35:3b:32:1e:bc:c3:8c:0d:
a1:ec:79:f5:d9:8a:41:ff:5d:e2:b0:e6:28:34:42:
77:7a:a6:41:14:9e:a7:6e:74:18:ba:19:6e:a0:f8:
91:76:f5:c5:cc:ae:6a:10:be:af:88:e2:aa:ba:3e:
ea:77:8d:96:2e:2d:1f:5b:42:cb:13:f7:54:84:44:
c1:80:aa:a9:1f:a0:e9:0c:99:20:d9:ac:e6:aa:d3:
b4:6a:5b:d5:f9:87:25:bc:ac:62:b7:51:94:bf:a7:
aa:e9:fc:a9:ec:04:d4:fb:88:82:82:42:46:79:76:
d4:ac:46:ba:d3:41:c7:08:3e:9f:14:d2:c8:a8:23:
b5:b9:02:ed:a7:be:2a:70:4a:f8:6a:35:34:31:c0:
9f:d5:2e:63:86:2a:e2:c9:51:99:e9:b8:2a:e1:1d:
38:e6:4b:e5:b3:59:62:70:82:a3:1d:83:e2:e0:d9:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:62:3E:03:36:ED:CA:9C:14:E5:E4:D7:B2:02:44:1C:8E:8B:67
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A54AA6CEDD911EF81C6AE84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.80.0/23
43.243.83.0/24
45.250.227.0/24
103.69.220.0/22
103.167.75.0/24
103.230.220.0/22
103.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5e:c8:66:c0:4f:8a:7f:76:1f:3c:23:86:a2:81:68:d3:92:
50:c1:8e:92:a2:bb:38:4d:aa:06:1b:3e:ae:1f:7e:7c:20:00:
a2:a1:9c:2a:3a:a8:68:7f:d4:02:a0:40:f6:4e:09:34:a3:27:
4d:a2:e2:85:3e:af:39:82:8b:f1:92:ea:d8:49:be:47:41:99:
21:c1:fa:1e:ce:5e:9f:5b:4a:63:00:ec:9f:c1:a5:f4:8e:c3:
9e:5b:6c:74:3f:71:b6:2c:6a:6f:83:69:05:1d:4f:23:48:16:
7f:d4:72:71:ef:0e:3b:1f:07:c1:60:77:cb:cb:cc:17:6e:e1:
ae:6c:5f:b6:cc:fd:85:02:fd:97:ba:49:c1:56:a5:91:1d:ca:
09:53:bf:d4:7b:b2:88:ad:f4:e2:d0:c9:d0:44:ab:3d:db:49:
f0:9f:3f:02:a7:d9:6e:de:95:64:ce:1d:a6:eb:ee:99:02:a0:
6d:10:a8:fb:14:ea:52:42:37:8c:e1:98:14:33:f1:5f:e2:d3:
31:2e:f4:a8:63:94:7e:7e:2f:ea:b4:9b:1d:79:12:c6:1d:3e:
a2:10:19:87:40:4b:fe:90:2f:11:92:dd:7d:a7:2f:ba:7a:5d:
a3:f0:6b:e3:fe:1b:9e:ea:dd:80:42:3e:d6:51:20:ef:12:2a:
f9:27:be:4c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAKirMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDMwMzA3MzE0M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdjNTVhZGYtMDUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMZiCmWriVrfxaibEiwA0Z5fVyjTKFdAz8zrZfbJ2ySbj45nkG2o/7CvFT70
KXIwE2N9ydae617K8dN7uBELCJ0bImucuAgPORgy2XZ9priyajU7Mh68w4wNoex5
9dmKQf9d4rDmKDRCd3qmQRSep250GLoZbqD4kXb1xcyuahC+r4jiqro+6neNli4t
H1tCyxP3VIREwYCqqR+g6QyZINms5qrTtGpb1fmHJbysYrdRlL+nqun8qewE1PuI
goJCRnl21KxGutNBxwg+nxTSyKgjtbkC7ae+KnBK+Go1NDHAn9UuY4Yq4slRmem4
KuEdOOZL5bNZYnCCox2D4uDZyKsCAwEAAaOCArkwggK1MB0GA1UdDgQWBBRanGI+
AzbtypwU5eTXsgJEHI6LZzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlBNTRBQTZD
RUREOTExRUY4MUM2QUU4NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEMGCCsGAQUFBwEHAQH/
BDQwMjAwBAIAATAqAwQBK/NQAwQAK/NTAwQALfrjAwQCZ0XcAwQAZ6dLAwQCZ+bc
AwQAZ+jvMA0GCSqGSIb3DQEBCwUAA4IBAQB3XshmwE+Kf3YfPCOGooFo05JQwY6S
ors4TaoGGz6uH358IACioZwqOqhof9QCoED2Tgk0oydNouKFPq85govxkurYSb5H
QZkhwfoezl6fW0pjAOyfwaX0jsOeW2x0P3G2LGpvg2kFHU8jSBZ/1HJx7w47HwfB
YHfLy8wXbuGubF+2zP2FAv2XuknBVqWRHcoJU7/Ue7KIrfTi0MnQRKs920nwnz8C
p9lu3pVkzh2m6+6ZAqBtEKj7FOpSQjeM4ZgUM/Ff4tMxLvSoY5R+fi/qtJsdeRLG
HT6iEBmHQEv+kC8Rkt19py+6el2j8Gvj/hue6t2AQj7WUSDvEir5J75M
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:37:33 2025 by rpki-client