Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/8A725D3EFF1211EFB34CD362C4F9AE02.roa
File: 8A725D3EFF1211EFB34CD362C4F9AE02.roa (raw, json)
Hash identifier: 8uv63YV63O17OSdWEfAJlIZQTwrfQQL2Wyto5AHDpwU=
Subject key identifier: D9:24:D1:84:23:60:76:44:5B:D7:93:EF:D8:19:7C:3D:20:45:B7:3C
Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Certificate serial: 02
Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/8A725D3EFF1211EFB34CD362C4F9AE02.roa
Signing time: Wed 12 Mar 2025 07:20:57 +0000
ROA not before: Wed 12 Mar 2025 07:20:57 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138590
IP address blocks: 103.134.0.0/22 maxlen: 22
2404:5840:1::/48 maxlen: 48
2404:5840:2::/48 maxlen: 48
2404:5840:3::/48 maxlen: 48
2404:5840:4::/48 maxlen: 48
2404:5840:5::/48 maxlen: 48
2404:5840:6::/48 maxlen: 48
2404:5840:7::/48 maxlen: 48
2404:5840:8::/48 maxlen: 48
2404:5840:12::/48 maxlen: 48
2404:5840:13::/48 maxlen: 48
2404:5840:14::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Mar 2025 08:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197488
Validity
Not Before: Mar 12 07:20:57 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67d135d9-0845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:05:f4:45:78:79:9a:00:43:4f:40:25:bd:f7:
b1:c5:5b:41:77:a1:fe:22:5e:8f:3d:4d:ad:7b:3a:
20:ee:60:74:74:04:83:4b:48:d6:59:2c:55:de:a2:
e9:86:58:78:47:26:df:7b:25:9c:47:fc:27:ae:14:
e0:67:8b:1a:73:a6:7f:27:42:fd:9f:2d:2d:6e:ca:
16:14:b5:58:9d:7e:3d:43:38:f7:01:04:c0:54:df:
c9:41:a9:87:19:4c:a1:0d:44:30:d0:9c:7c:83:91:
21:ff:7d:d6:07:04:ca:d1:bd:e2:ad:07:93:61:fb:
2f:44:47:31:bd:f0:cc:be:17:1f:98:23:3a:9e:53:
57:3f:38:8e:cd:36:7a:e0:69:92:64:b5:23:78:e3:
04:30:c0:54:e8:39:fd:6c:71:48:e0:91:9c:91:96:
e9:38:96:03:8a:b0:97:8f:6c:28:bb:2c:e8:47:a5:
f4:fb:64:ae:b0:cf:d1:d9:7a:16:91:da:98:c8:43:
b9:9e:5d:a6:bc:f0:ce:78:93:35:9e:4d:68:f1:ce:
68:bf:8b:17:f0:5e:f7:a7:1f:c8:9e:04:1c:4f:63:
d8:29:84:68:42:28:8c:86:3f:8b:05:8e:54:ad:87:
83:ec:ca:68:ec:c0:3e:e2:f8:c6:08:89:f0:08:aa:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:D1:84:23:60:76:44:5B:D7:93:EF:D8:19:7C:3D:20:45:B7:3C
X509v3 Authority Key Identifier:
keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/8A725D3EFF1211EFB34CD362C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.0.0/22
IPv6:
2404:5840:1::-2404:5840:8:ffff:ffff:ffff:ffff:ffff
2404:5840:12::-2404:5840:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:c5:e3:54:50:de:1f:26:26:9d:2f:7e:3c:68:d5:3a:eb:a2:
26:b1:cd:f2:a1:73:66:69:d2:a9:6e:3a:cd:ac:35:d1:e8:99:
fa:d2:01:56:53:4d:f3:ae:76:69:3f:5d:9c:0c:b6:9c:94:47:
bb:b0:bc:2b:31:2f:be:dc:da:7f:1a:b4:40:9c:78:a9:f3:60:
d9:50:63:5b:37:e9:3b:d3:b5:a8:fe:88:16:85:7f:61:a0:f9:
8a:c2:b2:90:3e:4e:2e:e0:cc:dc:cf:39:a0:02:4d:d7:25:b6:
2b:9b:29:b9:44:42:83:8b:29:7c:0c:42:e1:93:17:35:35:85:
0d:78:48:e6:f9:09:24:9a:dd:2c:20:5a:e1:ba:01:af:69:74:
e5:42:a4:4c:fb:3e:2c:01:84:4a:81:ce:1d:8f:1c:c4:33:f2:
b4:10:0f:cc:72:d4:a4:38:cc:ad:e1:05:b9:f9:6e:08:4c:a5:
83:8e:fc:a4:a6:45:68:cf:1d:22:3b:af:cc:ec:ff:21:93:81:
5b:64:55:1f:0b:b0:4f:c2:2f:73:83:5f:9b:61:58:df:de:bb:
e9:cd:4f:bf:cf:b5:90:c8:a7:54:05:48:57:05:73:0f:bb:c7:
ca:44:99:18:b0:57:a6:c0:61:4f:f2:2d:aa:8b:8c:c3:c2:7b:
fd:00:d3:e9
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3
MURFRTY0MTAeFw0yNTAzMTIwNzIwNTdaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZDEzNWQ5LTA4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuBfRFeHmaAENPQCW997HFW0F3of4iXo89Ta17OiDuYHR0BINLSNZZLFXeoumG
WHhHJt97JZxH/CeuFOBnixpzpn8nQv2fLS1uyhYUtVidfj1DOPcBBMBU38lBqYcZ
TKENRDDQnHyDkSH/fdYHBMrRveKtB5Nh+y9ERzG98My+Fx+YIzqeU1c/OI7NNnrg
aZJktSN44wQwwFToOf1scUjgkZyRluk4lgOKsJePbCi7LOhHpfT7ZK6wz9HZehaR
2pjIQ7meXaa88M54kzWeTWjxzmi/ixfwXvenH8ieBBxPY9gphGhCKIyGP4sFjlSt
h4PsymjswD7i+MYIifAIqhdJAgMBAAGjggLFMIICwTAdBgNVHQ4EFgQU2STRhCNg
dkRb15Pv2Bl8PSBFtzwwHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx
MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzQ4OC83OTAzQUJCQ0ZGMTExMUVGQTE4RUI5NjBDNEY5QUUwMi84QTcyNUQzRUZG
MTIxMUVGQjM0Q0QzNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBPBggrBgEFBQcBBwEB/wRA
MD4wDAQCAAEwBgMEAmeGADAuBAIAAjAoMBIDBwAkBFhAAAEDBwAkBFhAAAgwEgMH
ASQEWEAAEgMHACQEWEAAFDANBgkqhkiG9w0BAQsFAAOCAQEAFMXjVFDeHyYmnS9+
PGjVOuuiJrHN8qFzZmnSqW46zaw10eiZ+tIBVlNN8652aT9dnAy2nJRHu7C8KzEv
vtzafxq0QJx4qfNg2VBjWzfpO9O1qP6IFoV/YaD5isKykD5OLuDM3M85oAJN1yW2
K5spuURCg4spfAxC4ZMXNTWFDXhI5vkJJJrdLCBa4boBr2l05UKkTPs+LAGESoHO
HY8cxDPytBAPzHLUpDjMreEFufluCEylg478pKZFaM8dIjuvzOz/IZOBW2RVHwuw
T8Ivc4Nfm2FY39676c1Pv8+1kMinVAVIVwVzD7vHykSZGLBXpsBhT/ItqouMw8J7
/QDT6Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:14:01 2025 by rpki-client