Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/BB6FA5203B2311F08BB9DA15C4F9AE02.roa
File: BB6FA5203B2311F08BB9DA15C4F9AE02.roa (raw, json)
Hash identifier: xUXnhF1fK5klbCUjKO1S0vc451ZTC12z2cOQUqNqiMc=
Subject key identifier: 93:7F:61:74:E3:B3:9A:30:11:BD:FA:F4:4E:C4:B1:4A:3E:F4:6E:02
Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial: 0166
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/BB6FA5203B2311F08BB9DA15C4F9AE02.roa
Signing time: Tue 27 May 2025 17:55:10 +0000
ROA not before: Tue 27 May 2025 17:55:10 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140045
IP address blocks: 103.244.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 20:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Validity
Not Before: May 27 17:55:10 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6835fc7e-0f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:31:30:16:3e:71:8d:b0:5a:ca:0a:14:ad:
a8:0b:65:2e:5b:26:af:a1:d9:fa:0a:d2:3a:bd:4d:
96:45:39:73:3f:45:bb:c9:3f:b2:0a:fb:7a:b6:49:
db:9a:8a:09:42:52:63:19:24:72:a8:a9:7e:50:fd:
c0:e0:ec:0f:e3:d0:6e:6e:c3:2c:c9:1f:42:53:94:
7d:b8:6f:eb:da:2e:9c:75:a2:d4:bc:46:3f:a8:dc:
e4:da:cb:3b:ad:45:bb:32:1e:4d:67:2e:e3:4f:83:
e6:6c:c3:2a:4b:f7:46:db:d3:db:0b:56:51:0f:62:
5e:89:73:ea:68:ab:5f:25:0e:19:5e:a6:d8:95:e6:
87:bf:f8:ba:b2:45:80:da:b1:e6:a4:d8:f3:74:93:
85:f9:00:de:c9:1d:d6:5c:ad:6a:78:63:2c:47:06:
c4:87:01:ba:dd:c3:82:7b:4e:73:52:1c:d6:f6:dd:
33:65:25:32:29:e9:58:ee:3d:17:1f:1a:97:f6:a0:
c6:40:5b:81:9a:f2:26:e4:89:a3:a7:1f:1d:94:84:
96:e3:fd:a5:e7:b2:1e:67:03:1f:2f:16:f5:94:f8:
2d:f9:1e:bf:93:9d:08:16:23:b0:a5:2f:1e:c2:36:
33:e1:f1:a3:33:91:c6:7d:88:90:90:88:6c:8e:1c:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7F:61:74:E3:B3:9A:30:11:BD:FA:F4:4E:C4:B1:4A:3E:F4:6E:02
X509v3 Authority Key Identifier:
keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/BB6FA5203B2311F08BB9DA15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b8:c6:92:4e:84:ca:32:06:b8:d4:54:07:db:be:57:92:82:
ce:b7:fe:4f:86:ba:f4:54:6b:1a:76:63:c5:fc:b2:a8:e0:c4:
12:06:17:1f:da:24:40:72:fc:92:74:c4:2b:be:bf:3f:70:48:
0c:69:b1:8a:f6:74:3e:58:f3:b3:bb:88:51:99:a5:fe:3f:75:
62:75:e6:7c:7f:57:af:67:a2:a3:e6:90:a7:07:59:9b:c9:8a:
11:92:e4:1e:b7:b1:4a:68:33:e5:e5:39:50:b6:99:85:b1:2c:
5f:14:16:44:53:2b:83:91:82:5f:8b:a0:0f:bc:90:2c:3f:1a:
9a:38:36:31:16:89:2e:5b:8f:40:9b:79:58:0e:a2:fd:f8:88:
4d:c6:df:98:d4:86:58:c2:05:bd:23:10:18:84:f7:da:21:90:
6b:b6:19:dd:24:b5:52:10:c0:c3:78:fe:96:9b:f1:54:da:70:
0a:11:b9:89:51:89:20:48:bd:a6:18:53:52:1c:cb:34:8e:5b:
95:9b:3d:fe:ae:4f:40:67:be:19:49:ee:8d:62:fd:6e:c0:b9:
3c:77:ee:01:55:8c:31:05:df:59:a9:d5:ba:7e:99:f4:14:98:
8a:ed:0d:ab:61:2a:8a:0d:db:4c:d0:d6:19:59:16:17:a1:52:
c7:5a:16:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG
MDMzRDQ1QzQwHhcNMjUwNTI3MTc1NTEwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM1ZmM3ZS0wZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZwxMBY+cY2wWsoKFK2oC2UuWyavodn6CtI6vU2WRTlzP0W7yT+yCvt6tknb
mooJQlJjGSRyqKl+UP3A4OwP49BubsMsyR9CU5R9uG/r2i6cdaLUvEY/qNzk2ss7
rUW7Mh5NZy7jT4PmbMMqS/dG29PbC1ZRD2JeiXPqaKtfJQ4ZXqbYleaHv/i6skWA
2rHmpNjzdJOF+QDeyR3WXK1qeGMsRwbEhwG63cOCe05zUhzW9t0zZSUyKelY7j0X
HxqX9qDGQFuBmvIm5Imjpx8dlISW4/2l57IeZwMfLxb1lPgt+R6/k50IFiOwpS8e
wjYz4fGjM5HGfYiQkIhsjhxh1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJN/YXTj
s5owEb369E7EsUo+9G4CMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE
NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNGMjYvNzAzQTAyNTQyRDU1MTFFRTg5QUEyMDA5QzRGOUFFMDIvQkI2RkE1MjAz
QjIzMTFGMDhCQjlEQTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn9F0wDQYJKoZIhvcNAQELBQADggEBAGq4xpJOhMoyBrjU
VAfbvleSgs63/k+GuvRUaxp2Y8X8sqjgxBIGFx/aJEBy/JJ0xCu+vz9wSAxpsYr2
dD5Y87O7iFGZpf4/dWJ15nx/V69noqPmkKcHWZvJihGS5B63sUpoM+XlOVC2mYWx
LF8UFkRTK4ORgl+LoA+8kCw/Gpo4NjEWiS5bj0CbeVgOov34iE3G35jUhljCBb0j
EBiE99ohkGu2Gd0ktVIQwMN4/pab8VTacAoRuYlRiSBIvaYYU1IcyzSOW5WbPf6u
T0BnvhlJ7o1i/W7AuTx37gFVjDEF31mp1bp+mfQUmIrtDathKooN20zQ1hlZFheh
UsdaFlE=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:09:38 2025 by rpki-client