Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/36BB47B6D9A911EF89038F1AC4F9AE02.roa
File: 36BB47B6D9A911EF89038F1AC4F9AE02.roa (raw, json)
Hash identifier: OOF/b7AZN46iSW47VIOG3TgQEjgojDl66vynN/q29SI=
Subject key identifier: 60:B5:1B:EC:3D:2C:79:34:91:FE:B3:0D:E6:8D:49:4F:76:88:5D:1D
Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Certificate serial: 0C62
Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/36BB47B6D9A911EF89038F1AC4F9AE02.roa
Signing time: Thu 23 Jan 2025 16:43:46 +0000
ROA not before: Thu 23 Jan 2025 16:43:46 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150696
IP address blocks: 103.115.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3170 (0xc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4614
Validity
Not Before: Jan 23 16:43:46 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=679271c2-0c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:64:f6:0c:d0:e6:56:b8:c7:61:b9:3d:56:
e3:09:33:c0:99:3c:72:07:ae:55:d8:ee:39:af:10:
a8:95:36:9c:67:84:4b:f4:60:d7:78:da:ef:46:60:
16:f9:04:da:9f:0f:4c:4a:35:c4:60:ce:68:57:2b:
9e:71:9e:34:4f:bc:58:5b:72:a5:81:e6:15:f8:9c:
43:6a:32:67:43:95:8c:a2:19:c1:79:f3:49:6b:b6:
2f:2a:88:08:86:b0:03:4a:dc:bd:72:27:c8:f6:96:
5a:62:4c:cf:4b:1f:6a:a8:55:a1:9f:7e:28:58:8a:
59:86:5b:9c:36:6b:dc:02:d7:a6:03:5b:b0:33:25:
47:72:62:6b:c4:91:85:db:bc:33:95:c1:96:ed:ac:
f7:a7:fd:cf:f5:5e:77:08:e3:3e:d5:62:95:74:13:
04:61:c2:a6:75:86:03:74:a2:61:43:77:a8:aa:07:
e9:0a:74:f5:a5:69:ec:c0:8b:46:21:48:0e:21:a2:
af:d1:01:6b:a1:3c:26:24:2a:2c:b5:93:65:f1:00:
ba:c3:3f:b3:4c:55:e8:2c:1f:a8:2f:ce:ea:d4:47:
ad:c2:f9:7d:aa:3d:33:4e:23:b8:f3:a2:5a:59:88:
18:dd:54:2c:f5:00:f7:96:ce:ad:46:96:77:2a:e3:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B5:1B:EC:3D:2C:79:34:91:FE:B3:0D:E6:8D:49:4F:76:88:5D:1D
X509v3 Authority Key Identifier:
keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/36BB47B6D9A911EF89038F1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.159.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4e:32:67:db:76:a2:19:c7:3e:d6:65:a1:19:a0:fe:e1:14:
bd:0e:12:1c:37:d9:c6:79:07:8a:2b:f6:b3:59:d7:8d:1e:1b:
9b:25:47:ae:86:3e:f1:65:ef:91:7a:2f:a4:cb:a6:cb:fe:fd:
43:61:1c:62:f6:55:90:c7:67:dc:60:71:bd:fa:8f:cc:b7:5f:
0b:f9:c3:50:f9:da:f6:5b:dc:e6:d2:28:1f:99:86:b2:05:9f:
4e:35:c3:96:3d:96:bf:52:46:78:b6:fd:19:90:55:02:da:2a:
ff:a8:f5:f9:54:78:3a:b6:7c:1e:da:c5:64:89:30:05:df:10:
08:d9:4e:ac:57:55:51:e5:e2:b7:9a:b3:ba:8e:e6:6f:d4:11:
6e:41:ed:5f:1f:83:e6:96:f0:03:bf:85:73:02:df:d3:91:6b:
31:97:aa:ed:dd:07:77:e0:ff:49:97:66:2b:f3:0a:67:51:44:
a3:ea:de:aa:46:8c:dd:08:f0:da:02:93:db:01:7e:24:c2:4c:
60:3f:7d:b0:b5:ed:c6:fd:80:93:d5:93:cd:b2:d9:4b:6c:8b:
31:92:c1:2c:79:d9:e7:dc:9a:27:3f:57:68:17:bf:34:43:20:
12:a9:3a:d5:f2:f1:d3:e0:e1:e8:e0:ca:14:90:f0:7c:2f:a0:
d2:cd:b8:bb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG
NTlENzNBQTgwHhcNMjUwMTIzMTY0MzQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzkyNzFjMi0wYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4nxk9gzQ5la4x2G5PVbjCTPAmTxyB65V2O45rxColTacZ4RL9GDXeNrvRmAW
+QTanw9MSjXEYM5oVyuecZ40T7xYW3KlgeYV+JxDajJnQ5WMohnBefNJa7YvKogI
hrADSty9cifI9pZaYkzPSx9qqFWhn34oWIpZhlucNmvcAtemA1uwMyVHcmJrxJGF
27wzlcGW7az3p/3P9V53COM+1WKVdBMEYcKmdYYDdKJhQ3eoqgfpCnT1pWnswItG
IUgOIaKv0QFroTwmJCostZNl8QC6wz+zTFXoLB+oL87q1Eetwvl9qj0zTiO486Ja
WYgY3VQs9QD3ls6tRpZ3KuPJnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGC1G+w9
LHk0kf6zDeaNSU92iF0dMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0
RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzQ2MTQvMUM5NDg5OUFGNEYwMTFFOUFDMjAyQjFEQzRGOUFFMDIvMzZCQjQ3QjZE
OUE5MTFFRjg5MDM4RjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnc58wDQYJKoZIhvcNAQELBQADggEBAIROMmfbdqIZxz7W
ZaEZoP7hFL0OEhw32cZ5B4or9rNZ140eG5slR66GPvFl75F6L6TLpsv+/UNhHGL2
VZDHZ9xgcb36j8y3Xwv5w1D52vZb3ObSKB+ZhrIFn041w5Y9lr9SRni2/RmQVQLa
Kv+o9flUeDq2fB7axWSJMAXfEAjZTqxXVVHl4reas7qO5m/UEW5B7V8fg+aW8AO/
hXMC39ORazGXqu3dB3fg/0mXZivzCmdRRKPq3qpGjN0I8NoCk9sBfiTCTGA/fbC1
7cb9gJPVk82y2UtsizGSwSx52efcmic/V2gXvzRDIBKpOtXy8dPg4ejgyhSQ8Hwv
oNLNuLs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:07:48 2025 by rpki-client