Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/2FEEF9460BA411F09C0DA13EC4F9AE02.roa
File: 2FEEF9460BA411F09C0DA13EC4F9AE02.roa (raw, json)
Hash identifier: nYQ3v1iu2XL5boe2h2z3J0bY4n0AsQbbrEjIQJNVO1Q=
Subject key identifier: 19:70:2F:FC:B1:6B:E4:C0:89:40:6F:24:5D:BA:D6:F0:72:62:44:52
Certificate issuer: /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial: 076A
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/2FEEF9460BA411F09C0DA13EC4F9AE02.roa
Signing time: Fri 28 Mar 2025 07:13:45 +0000
ROA not before: Fri 28 Mar 2025 07:13:45 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 213862
IP address blocks: 103.142.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 06:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Validity
Not Before: Mar 28 07:13:45 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67e64c29-7592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:68:ea:77:a3:c2:f3:b1:96:1c:f7:23:18:
40:6b:97:d5:53:47:b0:d7:f9:b0:c7:81:5f:bf:45:
63:06:3b:e7:da:bd:ac:53:d8:ac:c2:ae:56:d8:dc:
d5:59:d1:33:86:60:02:13:92:08:0d:f0:3d:4b:d7:
3c:31:36:20:34:88:f6:4f:21:73:2b:fe:09:0d:99:
b6:88:86:d3:79:5f:bd:80:63:69:d5:3d:5f:94:54:
27:a3:69:f7:75:21:96:65:b5:44:2a:29:5a:a8:06:
78:3a:e3:58:56:ad:6f:92:7e:8a:a2:b4:69:26:12:
18:e7:cb:41:63:70:2f:d6:29:d9:8a:c8:85:31:77:
0a:55:8a:8c:9a:82:77:06:6d:2b:45:22:0c:95:29:
a3:15:c4:4e:be:99:f3:04:e8:9a:c4:c1:d6:cf:b6:
a3:5c:5e:22:62:5c:55:93:59:86:65:17:51:c5:3b:
01:cd:32:9e:32:de:2d:d9:15:33:b9:80:ea:20:46:
1c:12:10:21:f1:ee:c3:fb:a7:af:c3:2b:7e:af:53:
5c:c8:fb:c4:c4:b1:20:6e:e9:64:4a:6f:87:5a:45:
94:51:39:e4:4c:6d:c6:2a:6b:32:1d:86:7a:b8:63:
0e:17:a0:40:a7:a0:16:0f:8e:17:6f:28:84:d2:64:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:2F:FC:B1:6B:E4:C0:89:40:6F:24:5D:BA:D6:F0:72:62:44:52
X509v3 Authority Key Identifier:
keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/2FEEF9460BA411F09C0DA13EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.174.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:73:d0:c3:62:e8:3f:b0:65:cf:84:24:37:aa:04:26:7e:61:
0c:d8:0e:d2:40:87:13:c9:71:28:e1:11:01:d4:f6:e6:c2:f0:
b7:6a:ca:7f:9d:f9:bb:82:01:80:6c:0d:03:7d:3c:e6:5c:34:
09:7c:2f:af:7b:e1:b1:bf:fd:7e:2e:85:12:61:44:29:d9:b0:
52:29:9f:15:43:ae:8f:c5:e2:84:9a:a8:ab:9f:d6:e7:db:db:
7e:44:76:41:3d:1d:c6:10:7f:61:64:ac:81:05:e1:d9:9f:f4:
ad:78:02:d1:fd:b5:0e:ee:54:e5:db:60:f0:d7:9a:24:06:00:
a8:5a:b0:da:31:62:26:58:ad:f6:05:11:1b:bc:2f:9b:b0:e8:
4a:dc:e8:09:8a:f8:46:7a:9a:37:b8:11:e1:2e:55:bb:d6:f4:
f7:5d:09:eb:de:7d:36:5a:22:5c:07:9a:cf:0e:8d:17:3a:22:
ad:5c:22:cf:24:6e:41:fd:f4:e1:0c:3b:7b:bf:a0:e3:84:10:
9e:9f:89:6f:ba:66:33:5f:02:df:6f:f2:3c:3e:4c:4c:19:88:
35:7b:e3:6a:de:d5:b5:e8:07:73:8e:49:fd:cb:48:d2:8e:4e:
fd:f2:59:70:05:ba:e5:41:69:f0:f1:56:b3:dd:52:7d:66:f6:
00:e1:fc:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4OTkxMTAvBgNVBAUTKDYyNUVENERCREYyNzQ2MzIyRjU1OTM4NTcyOEU4RThF
NUZGOEJBQzIwHhcNMjUwMzI4MDcxMzQ1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U2NGMyOS03NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWdo6nejwvOxlhz3IxhAa5fVU0ew1/mwx4Ffv0VjBjvn2r2sU9iswq5W2NzV
WdEzhmACE5IIDfA9S9c8MTYgNIj2TyFzK/4JDZm2iIbTeV+9gGNp1T1flFQno2n3
dSGWZbVEKilaqAZ4OuNYVq1vkn6KorRpJhIY58tBY3Av1inZisiFMXcKVYqMmoJ3
Bm0rRSIMlSmjFcROvpnzBOiaxMHWz7ajXF4iYlxVk1mGZRdRxTsBzTKeMt4t2RUz
uYDqIEYcEhAh8e7D+6evwyt+r1NcyPvExLEgbulkSm+HWkWUUTnkTG3GKmsyHYZ6
uGMOF6BAp6AWD44XbyiE0mT68QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBlwL/yx
a+TAiUBvJF261vByYkRSMB8GA1UdIwQYMBaAFGJe1NvfJ0YyL1WThXKOjo5f+LrC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg5OS9FRjIzMjZDNjE0
MTgxMUVCOTI4RjhGNjZDNEY5QUUwMi9ZbDdVMjk4blJqSXZWWk9GY282T2psXzR1
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lsN1UyOThuUmpJdlZaT0ZjbzZPamxfNHVzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQ4OTkvRUYyMzI2QzYxNDE4MTFFQjkyOEY4RjY2QzRGOUFFMDIvMkZFRUY5NDYw
QkE0MTFGMDlDMERBMTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnjq4wDQYJKoZIhvcNAQELBQADggEBANdz0MNi6D+wZc+E
JDeqBCZ+YQzYDtJAhxPJcSjhEQHU9ubC8Ldqyn+d+buCAYBsDQN9POZcNAl8L697
4bG//X4uhRJhRCnZsFIpnxVDro/F4oSaqKuf1ufb235EdkE9HcYQf2FkrIEF4dmf
9K14AtH9tQ7uVOXbYPDXmiQGAKhasNoxYiZYrfYFERu8L5uw6Erc6AmK+EZ6mje4
EeEuVbvW9PddCevefTZaIlwHms8OjRc6Iq1cIs8kbkH99OEMO3u/oOOEEJ6fiW+6
ZjNfAt9v8jw+TEwZiDV742re1bXoB3OOSf3LSNKOTv3yWXAFuuVBafDxVrPdUn1m
9gDh/JU=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:33:01 2025 by rpki-client