Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/1BE721B2012C11F0BE9F7948C4F9AE02.roa
File: 1BE721B2012C11F0BE9F7948C4F9AE02.roa (raw, json)
Hash identifier: zlYGD3kRms9/8u9Cl/LKr0a/hV9iPaMSYPKi8YKIucg=
Subject key identifier: 9D:EB:AE:DC:EC:3C:26:72:82:A9:CA:EC:2B:77:9D:88:2D:C3:9E:4A
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0AEC
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/1BE721B2012C11F0BE9F7948C4F9AE02.roa
Signing time: Fri 14 Mar 2025 23:29:01 +0000
ROA not before: Fri 14 Mar 2025 23:29:01 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.13.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 15 Mar 2025 06:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016
Validity
Not Before: Mar 14 23:29:01 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d4bbbc-3cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:a3:81:fc:73:aa:2d:4a:52:4b:b4:b6:17:
b0:17:1e:b3:63:ef:bd:60:a2:82:b3:b9:39:5b:c1:
0a:01:fa:d5:8f:a7:ae:94:a5:3c:5b:85:09:8f:63:
3e:c1:de:e5:d6:9d:f8:b9:0d:a3:80:dc:09:2a:e6:
b8:f3:d6:7a:bc:68:91:c2:4b:7b:14:35:ff:c7:07:
cf:d0:bc:bc:21:43:1d:8f:98:97:49:ad:af:d2:55:
c7:60:55:c4:31:5a:29:0e:ff:b5:c6:b9:79:d6:ff:
34:bc:f8:36:70:4e:1c:2e:03:1f:b5:da:c0:f6:46:
50:1a:d3:de:dd:f8:99:85:ca:25:ca:ea:b6:42:3a:
a1:36:b5:9e:ce:94:e9:a2:a9:74:84:ed:01:d1:0a:
f5:de:34:e9:5f:58:57:70:ec:07:15:37:6a:6f:b4:
ab:1a:44:95:bf:3c:2b:59:e5:b0:ef:52:6f:22:e4:
26:ca:50:1e:fb:1e:60:5d:69:26:9e:36:70:c0:0c:
e4:ce:e2:e2:1e:e1:89:a6:bd:e0:5e:39:ac:a3:a2:
84:20:b0:d5:ac:90:d7:39:51:75:0d:49:11:01:eb:
3a:42:f3:b9:4c:48:ae:16:ce:a6:4e:50:28:ac:f0:
0b:d6:cc:fb:4a:0d:81:87:d8:86:0c:93:d9:fc:10:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EB:AE:DC:EC:3C:26:72:82:A9:CA:EC:2B:77:9D:88:2D:C3:9E:4A
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/1BE721B2012C11F0BE9F7948C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.212.0/22
Signature Algorithm: sha256WithRSAEncryption
06:52:a7:83:f8:49:68:3f:b7:5a:5b:b9:14:23:54:e5:94:97:
c6:88:66:5d:ce:a4:39:e1:f5:0a:3b:c0:81:81:b5:b1:04:5f:
0e:4e:e0:f0:9f:05:f2:a8:16:83:5f:71:05:38:a5:69:0b:6d:
b9:a0:1d:53:d8:5d:ce:b9:f4:be:9c:c8:1c:71:b7:a4:3d:57:
95:e7:f8:e9:42:f3:b7:3c:03:6e:46:d8:ee:9c:08:f9:83:24:
62:20:bb:35:c3:33:32:33:fd:c0:c0:1d:c3:52:8b:c6:37:e9:
1a:16:e9:d6:24:ca:9c:fb:34:f3:14:ec:9a:9b:b3:9c:02:86:
81:6b:b1:65:c0:72:62:3a:f5:ff:81:e8:1f:b8:02:19:5b:d1:
6b:34:44:08:35:3a:de:25:08:d5:3b:80:eb:15:76:bd:54:18:
2e:8a:8e:ae:cb:e3:c7:cd:a1:6c:49:6c:76:c2:cd:6c:1e:72:
92:d6:0d:63:e0:d4:e0:82:f1:cc:d9:06:7f:e6:5e:03:67:e2:
5c:f9:10:36:a4:e5:e0:7d:80:2e:c4:0a:2d:d8:e7:44:d8:c3:
34:d7:24:0b:14:96:c2:2a:7c:a5:e1:89:df:c9:29:33:b1:d0:
d0:a1:ee:00:9f:07:7a:ad:5d:41:f5:16:fa:e2:f5:a8:20:05:
8c:03:3c:d3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3
OTExQkU1QjUwHhcNMjUwMzE0MjMyOTAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q0YmJiYy0zY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJOjgfxzqi1KUku0thewFx6zY++9YKKCs7k5W8EKAfrVj6eulKU8W4UJj2M+
wd7l1p34uQ2jgNwJKua489Z6vGiRwkt7FDX/xwfP0Ly8IUMdj5iXSa2v0lXHYFXE
MVopDv+1xrl51v80vPg2cE4cLgMftdrA9kZQGtPe3fiZhcolyuq2QjqhNrWezpTp
oql0hO0B0Qr13jTpX1hXcOwHFTdqb7SrGkSVvzwrWeWw71JvIuQmylAe+x5gXWkm
njZwwAzkzuLiHuGJpr3gXjmso6KEILDVrJDXOVF1DUkRAes6QvO5TEiuFs6mTlAo
rPAL1sz7Sg2Bh9iGDJPZ/BDqoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ3rrtzs
PCZygqnK7Ct3nYgtw55KMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx
NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUEwMTYvQzA2NzcyMjY0MTcxMTFFQUFBRDI2QTZDQzRGOUFFMDIvMUJFNzIxQjIw
MTJDMTFGMEJFOUY3OTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnDdQwDQYJKoZIhvcNAQELBQADggEBAAZSp4P4SWg/t1pb
uRQjVOWUl8aIZl3OpDnh9Qo7wIGBtbEEXw5O4PCfBfKoFoNfcQU4pWkLbbmgHVPY
Xc659L6cyBxxt6Q9V5Xn+OlC87c8A25G2O6cCPmDJGIguzXDMzIz/cDAHcNSi8Y3
6RoW6dYkypz7NPMU7Jqbs5wChoFrsWXAcmI69f+B6B+4Ahlb0Ws0RAg1Ot4lCNU7
gOsVdr1UGC6Kjq7L48fNoWxJbHbCzWwecpLWDWPg1OCC8czZBn/mXgNn4lz5EDak
5eB9gC7ECi3Y50TYwzTXJAsUlsIqfKXhid/JKTOx0NCh7gCfB3qtXUH1Fvri9agg
BYwDPNM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:23:46 2025 by rpki-client