Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/96C08AD8D59711EFAA02A50FC4F9AE02.roa
File: 96C08AD8D59711EFAA02A50FC4F9AE02.roa (raw, json)
Hash identifier: DWOfMQ/v3ftmn88T30b2Pz0DTV4NNQAA7kCX0Vdcttk=
Subject key identifier: 14:6F:62:1F:BB:F3:C8:98:15:A4:96:9A:7C:EB:85:3E:52:35:E0:68
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0C32
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/96C08AD8D59711EFAA02A50FC4F9AE02.roa
Signing time: Wed 29 Jan 2025 21:29:35 +0000
ROA not before: Wed 29 Jan 2025 21:29:35 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/24 maxlen: 24
111.92.129.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 29 Jan 2025 21:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3122 (0xc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jan 29 21:29:35 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=679a9dbf-7fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:ce:c2:05:82:83:3c:3b:fb:c7:12:0c:19:
ea:9d:b8:97:d5:59:94:60:83:68:29:e1:64:34:c5:
d5:d3:02:a8:5b:61:5e:ac:2a:96:bd:fe:61:3b:84:
7a:c0:b6:fc:db:c5:99:18:8c:f6:50:30:41:26:10:
7b:04:34:4a:a5:af:c1:79:ce:11:80:96:05:2f:4f:
c6:95:41:b4:c1:2a:33:a3:cd:96:0d:1a:4c:af:dd:
e0:89:33:3c:68:09:6a:2d:a7:38:18:f2:6a:53:96:
bc:33:48:dc:79:1a:d1:12:18:74:00:01:e2:93:b2:
42:76:23:c7:4f:0e:36:f2:62:9f:c7:10:ce:60:e0:
23:d0:b5:e1:f8:26:30:67:f3:01:96:31:29:d6:1e:
72:05:0b:e7:e8:a5:4a:c6:21:84:36:f8:de:93:56:
97:a4:98:98:fc:ba:0b:73:27:ea:23:26:26:82:69:
d6:33:13:f9:97:01:d9:fd:ae:b0:15:be:f6:02:dd:
ab:84:c2:f8:2f:ff:c7:78:81:25:05:a6:32:c7:89:
b5:5d:8a:d4:e3:05:55:f7:6a:bc:91:07:7f:c4:f3:
eb:d9:68:1e:fd:d7:86:6c:2b:63:69:fa:b5:bc:60:
cf:bb:55:2b:54:35:a5:8e:a8:8d:fd:61:80:d3:01:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:62:1F:BB:F3:C8:98:15:A4:96:9A:7C:EB:85:3E:52:35:E0:68
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/96C08AD8D59711EFAA02A50FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/23
14.192.131.0/24
14.192.133.0/24
14.192.136.0/23
14.192.143.0-14.192.151.255
14.192.155.0-14.192.159.255
43.247.120.0-43.247.122.255
103.20.132.0/24
103.20.134.0/23
111.92.128.0/23
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
27:f6:e7:de:bf:94:bc:ac:b1:16:71:2d:30:1d:58:a8:a0:ea:
3a:6d:49:70:b7:30:20:bd:e0:45:2b:88:87:37:9a:57:04:c5:
c3:c7:02:75:02:04:66:83:db:c2:8b:bb:16:f3:0f:e1:a3:00:
20:3b:78:1d:28:01:c2:6d:5b:af:65:e2:8c:c1:58:29:60:a4:
a9:2a:a6:69:37:19:6e:26:50:f3:ba:65:3d:90:2c:a8:b6:5e:
8b:a6:1b:9f:db:ec:28:37:9c:21:4f:ad:a3:8e:c3:7b:11:37:
86:dc:71:ac:dc:26:9a:9b:7e:6c:0f:d7:cc:0d:a7:d0:6f:04:
46:e2:a5:6d:93:6a:0a:b9:1e:4b:a7:61:f6:21:87:22:a5:3c:
e0:cf:10:83:d5:35:39:ec:db:40:5b:20:d4:e6:72:40:0b:3a:
92:ff:72:2f:ed:67:4f:1f:30:53:3c:1c:0a:eb:f7:97:fc:d0:
5e:d1:e8:6a:14:98:07:64:39:95:c6:b9:76:3c:d5:77:57:bc:
7d:92:68:38:4d:e4:83:58:e7:22:f6:97:e4:7d:4d:36:61:ec:
0f:fa:fa:a6:17:e0:e7:0e:97:1d:30:2a:50:16:a9:5b:0b:6f:
f9:99:3c:15:b2:cc:93:c7:3e:43:80:51:34:4a:04:89:b4:56:
96:98:84:8f
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjUwMTI5MjEyOTM1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzlhOWRiZi03ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rjOwgWCgzw7+8cSDBnqnbiX1VmUYINoKeFkNMXV0wKoW2FerCqWvf5hO4R6
wLb828WZGIz2UDBBJhB7BDRKpa/Bec4RgJYFL0/GlUG0wSozo82WDRpMr93giTM8
aAlqLac4GPJqU5a8M0jceRrREhh0AAHik7JCdiPHTw428mKfxxDOYOAj0LXh+CYw
Z/MBljEp1h5yBQvn6KVKxiGENvjek1aXpJiY/LoLcyfqIyYmgmnWMxP5lwHZ/a6w
Fb72At2rhML4L//HeIElBaYyx4m1XYrU4wVV92q8kQd/xPPr2Wge/deGbCtjafq1
vGDPu1UrVDWljqiN/WGA0wGDMwIDAQABo4IC8jCCAu4wHQYDVR0OBBYEFBRvYh+7
88iYFaSWmnzrhT5SNeBoMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOTZDMDhBRDhE
NTk3MTFFRkFBMDJBNTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfAYIKwYBBQUHAQcBAf8E
bTBrMFoEAgABMFQDBAEOwIADBAAOwIMDBAAOwIUDBAEOwIgwDAMEAA7AjwMEAw7A
kDAMAwQADsCbAwQFDsCAMAwDBAMr93gDBAAr93oDBABnFIQDBAFnFIYDBAFvXIAw
DQQCAAIwBwMFACQDeYAwDQYJKoZIhvcNAQELBQADggEBACf2596/lLyssRZxLTAd
WKig6jptSXC3MCC94EUriIc3mlcExcPHAnUCBGaD28KLuxbzD+GjACA7eB0oAcJt
W69l4ozBWClgpKkqpmk3GW4mUPO6ZT2QLKi2XoumG5/b7Cg3nCFPraOOw3sRN4bc
cazcJpqbfmwP18wNp9BvBEbipW2Tagq5HkunYfYhhyKlPODPEIPVNTns20BbINTm
ckALOpL/ci/tZ08fMFM8HArr95f80F7R6GoUmAdkOZXGuXY81XdXvH2SaDhN5INY
5yL2l+R9TTZh7A/6+qYX4OcOlx0wKlAWqVsLb/mZPBWyzJPHPkOAUTRKBIm0VpaY
hI8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:30 2025 by rpki-client