Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/84C61BB8C90811EFB48E3332C4F9AE02.roa
File: 84C61BB8C90811EFB48E3332C4F9AE02.roa (raw, json)
Hash identifier: fJv0idSOqw/OSr0+PHG4V0KrMDT7KOw18FgMjluz5r4=
Subject key identifier: 0B:9B:76:10:A4:6D:71:62:AB:02:41:95:43:D6:DF:B4:5D:C5:5B:9A
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 015B
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/84C61BB8C90811EFB48E3332C4F9AE02.roa
Signing time: Fri 03 Jan 2025 02:46:44 +0000
ROA not before: Fri 03 Jan 2025 02:46:44 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 131275
IP address blocks: 103.176.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 15:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Validity
Not Before: Jan 3 02:46:44 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67774f94-60c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:6f:d8:22:f8:bf:c0:ed:52:ed:a3:5e:03:
f6:2f:69:30:71:dc:67:77:07:ff:5b:e3:9a:3d:3e:
76:2c:e5:ec:aa:24:04:83:04:00:a6:85:34:99:e0:
1f:3d:d2:08:e8:f2:07:67:4e:82:df:83:d0:44:b8:
f1:a9:ea:f3:64:d1:36:19:5c:95:56:d6:a1:a6:1d:
54:34:b7:5f:29:01:ce:91:24:e1:0b:5d:a1:93:42:
f6:3e:9d:20:c8:cb:35:a9:87:93:e1:aa:98:2c:b5:
9f:96:3d:5e:92:f0:dd:af:f0:d4:70:27:6a:5c:0b:
66:ca:96:80:23:2c:06:28:14:e7:6b:ad:9d:15:43:
c8:79:f7:7e:c4:c6:f5:a5:34:54:54:11:ea:1f:77:
59:2c:f2:9e:ae:e0:0f:57:64:95:94:6b:6b:08:ec:
f8:7b:a6:bf:56:cc:f7:db:67:1d:c4:69:a3:a8:9e:
b5:5d:e1:b8:50:36:ab:b4:c9:dd:96:e1:b7:64:14:
11:36:e3:2b:ee:94:e8:95:8b:e6:78:c5:98:a0:8b:
ae:13:d2:12:d5:8f:25:15:d5:fe:34:50:52:df:88:
2d:b8:df:f2:e6:0f:03:1b:87:e6:16:77:61:ad:71:
b8:39:c2:6d:3b:c3:22:7f:28:b1:d2:e4:e0:60:13:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9B:76:10:A4:6D:71:62:AB:02:41:95:43:D6:DF:B4:5D:C5:5B:9A
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/84C61BB8C90811EFB48E3332C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.247.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d0:ab:8f:44:5c:ac:da:fd:95:c6:da:23:ee:08:bb:c0:68:
f4:31:f6:ad:4c:d3:e7:9b:99:c3:4a:cb:72:3d:57:e1:22:9d:
ef:32:36:e7:e4:b5:06:92:5e:17:fa:e3:26:5b:ff:92:bf:68:
02:57:da:69:58:55:a3:72:0e:b1:b0:41:9d:6a:16:e1:15:73:
34:c0:64:17:7a:5d:03:25:c1:30:04:ee:09:da:8a:a7:e5:4e:
79:41:a8:1f:78:35:be:1c:18:9c:43:3e:ef:68:28:ea:d3:c4:
9c:e3:ae:8b:54:90:37:c6:cf:dc:71:12:6c:93:05:75:c0:ec:
c4:c0:f0:29:8b:2d:14:55:71:b8:0e:97:52:24:d3:30:64:0f:
92:ab:bf:b8:f4:d4:2c:cd:31:e3:70:5f:0f:df:e3:a6:fd:46:
bd:6b:15:45:93:3c:ba:b1:23:1c:28:2f:fc:fd:fa:76:d3:46:
9c:e1:b7:57:ca:46:a1:59:4d:7a:9a:d5:6e:eb:07:c7:4a:d1:
bc:3c:20:a3:ce:9f:ec:27:1d:19:10:3e:4c:6f:70:01:41:d6:
4c:e0:35:2b:9b:cc:76:43:56:50:a7:3b:91:cc:9a:ff:85:1e:
b9:2c:01:6e:18:d0:ae:87:24:f0:c7:3b:f8:5a:c8:02:63:3c:
7d:cd:ea:c0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG
MjE0MDdDODEwHhcNMjUwMTAzMDI0NjQ0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc3NGY5NC02MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RBv2CL4v8DtUu2jXgP2L2kwcdxndwf/W+OaPT52LOXsqiQEgwQApoU0meAf
PdII6PIHZ06C34PQRLjxqerzZNE2GVyVVtahph1UNLdfKQHOkSThC12hk0L2Pp0g
yMs1qYeT4aqYLLWflj1ekvDdr/DUcCdqXAtmypaAIywGKBTna62dFUPIefd+xMb1
pTRUVBHqH3dZLPKeruAPV2SVlGtrCOz4e6a/Vsz322cdxGmjqJ61XeG4UDartMnd
luG3ZBQRNuMr7pTolYvmeMWYoIuuE9IS1Y8lFdX+NFBS34gtuN/y5g8DG4fmFndh
rXG4OcJtO8Mifyix0uTgYBOoKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAubdhCk
bXFiqwJBlUPW37RdxVuaMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2
N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNCMkUvMEY1NUM2OTZENjdEMTFFRDg2RDMzNzUwQzRGOUFFMDIvODRDNjFCQjhD
OTA4MTFFRkI0OEUzMzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsPcwDQYJKoZIhvcNAQELBQADggEBAJDQq49EXKza/ZXG
2iPuCLvAaPQx9q1M0+ebmcNKy3I9V+Eine8yNufktQaSXhf64yZb/5K/aAJX2mlY
VaNyDrGwQZ1qFuEVczTAZBd6XQMlwTAE7gnaiqflTnlBqB94Nb4cGJxDPu9oKOrT
xJzjrotUkDfGz9xxEmyTBXXA7MTA8CmLLRRVcbgOl1Ik0zBkD5Krv7j01CzNMeNw
Xw/f46b9Rr1rFUWTPLqxIxwoL/z9+nbTRpzht1fKRqFZTXqa1W7rB8dK0bw8IKPO
n+wnHRkQPkxvcAFB1kzgNSubzHZDVlCnO5HMmv+FHrksAW4Y0K6HJPDHO/hayAJj
PH3N6sA=
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:12:10 2025 by rpki-client