Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7CE3C06CDBD211EF80FBB936C4F9AE02.roa
File: 7CE3C06CDBD211EF80FBB936C4F9AE02.roa (raw, json)
Hash identifier: eQMW3P1maeWkcxZo2EFTYmU7QA2kZ+MXfDf+BW91IiY=
Subject key identifier: 96:A4:20:9F:13:81:4E:74:33:F3:21:22:07:7A:D0:B2:F4:C5:18:5E
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0C4F
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7CE3C06CDBD211EF80FBB936C4F9AE02.roa
Signing time: Wed 05 Feb 2025 17:12:30 +0000
ROA not before: Wed 05 Feb 2025 17:12:30 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 208485
IP address blocks: 14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 20:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Feb 5 17:12:30 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67a39bfd-4b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:6d:b0:a6:95:8a:f3:fd:9d:9e:0d:98:ac:
43:8a:80:84:d0:ca:65:e5:11:87:72:0f:38:e6:49:
76:36:fd:d8:10:26:f6:89:76:27:4e:ea:c6:72:c2:
6d:4e:4b:c4:5d:cb:c9:dd:d9:c2:3b:e5:90:82:d8:
b7:2b:a7:7a:56:fb:f4:01:48:15:18:c9:e9:55:9e:
20:0d:49:e6:a7:fe:ed:e8:86:aa:78:ca:3b:b0:63:
43:ff:a9:74:dc:d5:e0:a9:31:39:a6:5c:53:86:24:
36:43:79:97:54:b6:5d:af:89:92:1b:cc:2a:f4:43:
45:f3:a3:5b:7f:17:69:7d:88:33:f0:d1:f6:47:fe:
91:33:1e:99:5d:91:cf:be:58:81:40:72:24:b4:ab:
a4:26:c3:ff:4d:9e:93:3f:7a:f0:43:ca:d3:14:44:
43:10:4b:a6:77:0b:ea:1d:fd:d2:4f:20:4c:cf:7c:
31:d8:f1:be:4a:6b:44:69:46:17:7f:ba:04:dd:9d:
1d:d8:68:ae:1b:71:ad:6b:c5:ac:d2:ea:b6:f9:d9:
79:3a:e1:21:64:40:4c:e8:57:8a:79:ed:1a:95:c3:
7c:08:a1:96:f1:d2:c3:cf:5a:55:fe:a7:35:e0:fe:
8a:16:ad:58:b0:70:d0:76:2b:52:9f:97:3f:50:36:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:20:9F:13:81:4E:74:33:F3:21:22:07:7A:D0:B2:F4:C5:18:5E
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7CE3C06CDBD211EF80FBB936C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.138.0/23
14.192.143.0/24
14.192.158.0/24
43.247.123.0/24
103.20.133.0/24
103.20.135.0/24
111.92.157.0/24
Signature Algorithm: sha256WithRSAEncryption
84:71:c8:ab:89:a4:44:6e:1c:e0:05:e3:0d:0a:e9:ca:5b:2c:
8b:e8:e8:2a:5c:04:ae:fb:10:34:ef:e2:b4:1d:fe:4b:c2:31:
88:fb:0c:34:3c:4b:69:27:fa:0a:74:b2:2e:51:30:47:fd:5a:
21:ba:70:2c:00:c7:81:59:cf:7f:e7:96:39:61:8a:a3:81:73:
79:9d:b8:d4:7e:9b:de:84:ec:0a:50:30:64:80:e3:17:db:57:
a4:46:fc:58:47:b7:00:f2:6f:78:05:0f:47:de:8b:f4:6b:f1:
bc:12:44:1c:a1:e9:9a:d4:32:a1:13:d2:35:f4:b2:69:ef:54:
cf:e2:3c:92:33:14:d3:73:fb:9d:cd:82:a4:5c:cc:69:3f:d2:
9f:9a:f5:63:44:7e:70:b4:a3:fe:7f:f8:5d:37:0b:d6:60:9d:
e3:1c:6b:84:7a:93:cf:90:b8:2d:c9:f6:b3:13:8a:e1:d1:00:
5d:b9:41:51:6e:9a:59:ab:70:72:55:45:56:51:89:18:62:e8:
b7:83:bf:27:ee:69:89:6c:9c:15:3b:9f:a7:f7:e8:2d:bc:41:
28:fc:5e:c9:5a:e1:3f:c6:de:b3:27:e9:5b:1d:5c:7f:a5:0f:
c7:8f:32:3d:c5:1a:69:52:e6:d2:d6:e7:47:c0:e5:4d:6f:ae:
ad:ca:8a:ec
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjUwMjA1MTcxMjMwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2EzOWJmZC00Yjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuRtsKaVivP9nZ4NmKxDioCE0Mpl5RGHcg845kl2Nv3YECb2iXYnTurGcsJt
TkvEXcvJ3dnCO+WQgti3K6d6Vvv0AUgVGMnpVZ4gDUnmp/7t6IaqeMo7sGND/6l0
3NXgqTE5plxThiQ2Q3mXVLZdr4mSG8wq9ENF86NbfxdpfYgz8NH2R/6RMx6ZXZHP
vliBQHIktKukJsP/TZ6TP3rwQ8rTFERDEEumdwvqHf3STyBMz3wx2PG+SmtEaUYX
f7oE3Z0d2GiuG3Gta8Ws0uq2+dl5OuEhZEBM6FeKee0alcN8CKGW8dLDz1pV/qc1
4P6KFq1YsHDQditSn5c/UDYyQwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFJakIJ8T
gU50M/MhIgd60LL0xRheMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvN0NFM0MwNkNE
QkQyMTFFRjgwRkJCOTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E
NDAyMDAEAgABMCoDBAEOwIoDBAAOwI8DBAAOwJ4DBAAr93sDBABnFIUDBABnFIcD
BABvXJ0wDQYJKoZIhvcNAQELBQADggEBAIRxyKuJpERuHOAF4w0K6cpbLIvo6Cpc
BK77EDTv4rQd/kvCMYj7DDQ8S2kn+gp0si5RMEf9WiG6cCwAx4FZz3/nljlhiqOB
c3mduNR+m96E7ApQMGSA4xfbV6RG/FhHtwDyb3gFD0fei/Rr8bwSRByh6ZrUMqET
0jX0smnvVM/iPJIzFNNz+53NgqRczGk/0p+a9WNEfnC0o/5/+F03C9ZgneMca4R6
k8+QuC3J9rMTiuHRAF25QVFumlmrcHJVRVZRiRhi6LeDvyfuaYlsnBU7n6f36C28
QSj8Xsla4T/G3rMn6VsdXH+lD8ePMj3FGmlS5tLW50fA5U1vrq3Kiuw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:01 2025 by rpki-client