Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/B913B634245C11EE9B70C15DC4F9AE02.roa
File: B913B634245C11EE9B70C15DC4F9AE02.roa (raw, json)
Hash identifier: MPmSmRS+apedyjtzZNEPrNRvHCRf4Fs/m4KMLyHHk3g=
Subject key identifier: E0:1E:B5:EB:AF:D5:F3:B9:3B:9F:10:88:6F:01:E8:C2:65:4E:6D:FD
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 0149
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/B913B634245C11EE9B70C15DC4F9AE02.roa
Signing time: Mon 17 Jul 2023 04:45:16 +0000
ROA not before: Mon 17 Jul 2023 04:45:16 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 151612
IP address blocks: 103.25.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 09:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Validity
Not Before: Jul 17 04:45:16 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64b4c75b-b8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:8a:73:84:13:6f:12:85:7d:8c:69:3e:1d:
13:10:d2:c1:91:23:1c:01:cd:03:84:15:55:2f:7a:
be:af:f2:3b:0d:f4:7b:3e:5c:42:57:e2:f9:97:15:
37:05:02:de:1f:86:0d:a7:bf:87:45:8b:d5:de:e8:
94:bd:9a:c6:c2:65:0a:72:bf:23:ed:93:36:93:1b:
9d:a0:6d:05:66:85:0f:2f:b1:fc:96:69:dc:ce:26:
2a:f3:e5:8b:0d:52:24:4b:bc:93:83:f3:bc:c6:f9:
83:ab:e8:4b:5c:a6:64:b5:61:04:36:7d:36:65:e6:
5a:6d:b8:f4:ed:7b:84:b8:b6:62:8b:ed:7f:cb:e5:
33:a7:08:82:f0:04:ed:04:1c:49:08:a1:c8:bf:5e:
ee:be:ca:5e:82:dc:8b:07:03:09:34:7c:d7:e2:e0:
bf:4e:7e:23:ba:49:db:15:15:d5:d5:fd:28:6d:f6:
2b:5e:e7:03:14:34:a4:b7:5b:46:1a:7b:9e:00:2f:
0f:d8:11:03:75:08:37:1a:04:45:f2:3f:9c:a4:11:
15:b2:4e:71:55:b2:86:24:43:55:c5:ae:fe:61:c7:
7f:00:42:1b:c5:82:01:01:24:d8:67:d2:33:8c:a4:
09:18:e7:67:2d:ab:7c:d9:0b:e4:85:5b:50:fc:92:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1E:B5:EB:AF:D5:F3:B9:3B:9F:10:88:6F:01:E8:C2:65:4E:6D:FD
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/B913B634245C11EE9B70C15DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.125.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d0:d8:af:27:11:b5:f3:74:ce:c5:e1:e2:c7:74:8f:6b:a3:
c7:10:bc:bf:ff:35:70:9f:90:38:4e:9a:c5:99:df:bc:50:93:
88:fc:d2:4e:96:6d:b4:71:03:06:37:84:b1:09:47:8c:07:60:
6e:5c:18:35:e1:18:1b:04:00:c9:eb:f0:1d:64:81:3b:bf:79:
c7:63:2f:47:69:ee:6c:b7:fd:aa:ea:0d:21:86:84:ae:73:2a:
3f:b9:00:5d:bd:a4:2f:d2:71:5b:0d:7d:04:59:e5:c0:4a:f0:
58:16:32:8b:6a:3b:9c:60:51:bc:26:3b:99:46:b3:d1:77:b3:
00:7b:d4:69:0e:5d:22:92:65:52:e1:28:b5:7d:c1:e6:d3:2b:
b3:4f:48:ce:2c:dd:44:12:07:ef:bf:06:2a:f3:1f:00:f8:b2:
90:70:80:65:72:54:d8:a1:f5:fb:c7:03:4c:7f:3b:ef:4a:c6:
4b:85:cd:33:47:32:4b:ab:62:c8:07:9d:62:70:8c:55:a7:8b:
8a:80:a9:41:2d:76:43:9b:a4:eb:e4:d1:aa:fe:6c:13:b8:a0:
fe:86:6c:69:17:a0:a0:5b:80:87:5e:73:cb:5c:26:32:2f:12:
de:65:a7:d8:41:f5:81:e1:4b:c8:be:7f:ec:b6:91:68:71:d0:
d4:5e:83:bf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZEQTgxMTAvBgNVBAUTKEJDMTM3QzI3NzdFNTFERTdCRDFBQ0U4MEQ4NjhGRDkz
QTFFQzdBNDMwHhcNMjMwNzE3MDQ0NTE2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI0Yzc1Yi1iOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhWKc4QTbxKFfYxpPh0TENLBkSMcAc0DhBVVL3q+r/I7DfR7PlxCV+L5lxU3
BQLeH4YNp7+HRYvV3uiUvZrGwmUKcr8j7ZM2kxudoG0FZoUPL7H8lmncziYq8+WL
DVIkS7yTg/O8xvmDq+hLXKZktWEENn02ZeZabbj07XuEuLZii+1/y+UzpwiC8ATt
BBxJCKHIv17uvspegtyLBwMJNHzX4uC/Tn4juknbFRXV1f0obfYrXucDFDSkt1tG
GnueAC8P2BEDdQg3GgRF8j+cpBEVsk5xVbKGJENVxa7+Ycd/AEIbxYIBASTYZ9Iz
jKQJGOdnLat82QvkhVtQ/JKBPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOAeteuv
1fO5O58QiG8B6MJlTm39MB8GA1UdIwQYMBaAFLwTfCd35R3nvRrOgNho/ZOh7HpD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkRBOC83NkVENDRFRTAx
RUIxMUVEOTlBMzFBMUZDNEY5QUUwMi92Qk44SjNmbEhlZTlHczZBMkdqOWs2SHNl
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZCTjhKM2ZsSGVlOUdzNkEyR2o5azZIc2VrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjZEQTgvNzZFRDQ0RUUwMUVCMTFFRDk5QTMxQTFGQzRGOUFFMDIvQjkxM0I2MzQy
NDVDMTFFRTlCNzBDMTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnGX0wDQYJKoZIhvcNAQELBQADggEBAGbQ2K8nEbXzdM7F
4eLHdI9ro8cQvL//NXCfkDhOmsWZ37xQk4j80k6WbbRxAwY3hLEJR4wHYG5cGDXh
GBsEAMnr8B1kgTu/ecdjL0dp7my3/arqDSGGhK5zKj+5AF29pC/ScVsNfQRZ5cBK
8FgWMotqO5xgUbwmO5lGs9F3swB71GkOXSKSZVLhKLV9webTK7NPSM4s3UQSB++/
BirzHwD4spBwgGVyVNih9fvHA0x/O+9KxkuFzTNHMkurYsgHnWJwjFWni4qAqUEt
dkObpOvk0ar+bBO4oP6GbGkXoKBbgIdec8tcJjIvEt5lp9hB9YHhS8i+f+y2kWhx
0NReg78=
-----END CERTIFICATE-----
Generated at Thu Jan 11 12:38:56 2024 by rpki-client on console-ams.rpki-client.org