Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/70B3C6E6363811F0B93EBA74C4F9AE02.roa
File: 70B3C6E6363811F0B93EBA74C4F9AE02.roa (raw, json)
Hash identifier: +eObNqMYmv6HF2uSadCLsIX149yp3gbBj2NLZpAFGHQ=
Subject key identifier: 8C:3B:F4:43:E9:2D:A8:29:0F:39:3A:41:45:E4:68:52:F3:AA:76:EA
Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial: 0C5A
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/70B3C6E6363811F0B93EBA74C4F9AE02.roa
Signing time: Wed 21 May 2025 14:05:52 +0000
ROA not before: Wed 21 May 2025 14:05:52 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139716
IP address blocks: 103.143.254.0/23 maxlen: 23
103.143.254.0/24 maxlen: 24
103.143.255.0/24 maxlen: 24
2001:df7:b080::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 19:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Validity
Not Before: May 21 14:05:52 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=682dddc0-934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:88:7a:b0:bf:c5:a1:87:dc:94:52:30:f1:
07:54:39:fc:05:ad:78:e5:26:e7:e4:9e:fa:c5:a9:
78:20:b4:d3:07:f8:b5:8b:6a:1e:59:c1:9a:c9:7f:
94:aa:0a:0b:89:4b:0f:84:63:52:87:dd:d6:45:7a:
0c:d3:7d:3d:ec:ca:29:4d:c4:2d:4a:92:a6:4c:6d:
71:2e:a6:1b:a8:76:69:9d:db:28:d2:d3:fa:ad:8d:
64:71:e7:a1:ec:fc:36:e5:0e:ef:f0:6b:c5:f1:c2:
99:69:e0:55:09:6c:68:78:fe:68:6f:93:f0:ac:6e:
46:10:be:be:c2:3a:22:46:0b:b8:a0:10:33:cb:5d:
3c:a7:15:47:ec:a7:14:00:a2:c4:fa:1b:70:6d:fc:
39:e3:5b:f3:25:5c:24:9f:7a:de:ed:fa:9f:58:7b:
3c:d0:9e:d0:e4:97:db:ed:90:16:f7:ee:2f:74:58:
79:15:1d:94:5b:63:f7:09:ce:7f:01:1c:f0:fc:e3:
10:dd:2a:ab:fb:cf:2b:9c:fb:42:ea:69:3f:cb:52:
dd:c6:5a:22:c7:6f:9c:17:61:6a:ad:96:44:5e:7f:
9b:88:4f:4f:f8:32:58:45:a9:43:02:d6:b8:7d:b0:
fd:0b:0f:f8:5c:be:9f:68:2c:98:28:d4:78:a8:4d:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:F4:43:E9:2D:A8:29:0F:39:3A:41:45:E4:68:52:F3:AA:76:EA
X509v3 Authority Key Identifier:
keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/70B3C6E6363811F0B93EBA74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.254.0/23
IPv6:
2001:df7:b080::/48
Signature Algorithm: sha256WithRSAEncryption
9c:1b:a3:c3:74:67:ae:4d:61:60:11:c2:18:2a:3d:26:c9:62:
d1:3e:a0:c3:9d:d7:79:8b:be:cb:cc:86:9b:28:63:62:6e:ad:
15:b6:a2:76:03:4e:c0:41:8e:83:a8:7e:da:f5:6e:d8:50:18:
e8:3a:3c:c3:ca:a8:8f:b2:0c:79:54:a8:73:52:ac:19:57:24:
d1:c9:a7:b3:b5:f6:09:88:7d:a4:6d:7f:3a:73:29:15:78:7b:
b9:c6:73:03:01:0f:36:35:69:6d:2f:f8:62:2a:99:a9:2f:06:
94:4c:ef:6e:da:11:b9:32:39:0b:95:36:a0:f5:3e:6e:2e:38:
54:08:a5:43:ee:d4:c0:42:51:11:2e:91:de:db:eb:ba:e4:04:
e0:b8:b0:91:f3:07:c6:8d:1b:dc:5e:0d:cc:9f:21:ea:35:af:
90:ac:3a:68:1d:16:e9:91:df:00:82:a1:89:25:96:79:f2:3d:
b0:ac:3e:d2:18:6e:94:f1:a4:2f:c8:4e:f4:ba:0c:37:4c:23:
ca:07:23:e1:6d:b6:00:6a:28:11:5b:1c:f6:5a:80:79:78:91:
a5:dc:d2:40:4c:b6:3f:af:c5:96:e2:6c:88:49:b1:6e:e9:02:
9c:93:a9:e5:6b:f1:7b:f6:c6:97:93:65:e2:82:a7:36:ed:4f:
68:09:dc:98
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG
ODlENjlDQzAwHhcNMjUwNTIxMTQwNTUyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJkZGRjMC05MzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA79mIerC/xaGH3JRSMPEHVDn8Ba145Sbn5J76xal4ILTTB/i1i2oeWcGayX+U
qgoLiUsPhGNSh93WRXoM03097MopTcQtSpKmTG1xLqYbqHZpndso0tP6rY1kceeh
7Pw25Q7v8GvF8cKZaeBVCWxoeP5ob5PwrG5GEL6+wjoiRgu4oBAzy108pxVH7KcU
AKLE+htwbfw541vzJVwkn3re7fqfWHs80J7Q5Jfb7ZAW9+4vdFh5FR2UW2P3Cc5/
ARzw/OMQ3Sqr+88rnPtC6mk/y1Ldxloix2+cF2FqrZZEXn+biE9P+DJYRalDAta4
fbD9Cw/4XL6faCyYKNR4qE2vcwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIw79EPp
LagpDzk6QUXkaFLzqnbqMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz
RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NURBNUEvNDRFNzcwQjIwM0VFMTFFQUJDQTFBMTZFQzRGOUFFMDIvNzBCM0M2RTYz
NjM4MTFGMEI5M0VCQTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnj/4wDwQCAAIwCQMHACABDfewgDANBgkqhkiG9w0BAQsF
AAOCAQEAnBujw3Rnrk1hYBHCGCo9Jsli0T6gw53XeYu+y8yGmyhjYm6tFbaidgNO
wEGOg6h+2vVu2FAY6Do8w8qoj7IMeVSoc1KsGVck0cmns7X2CYh9pG1/OnMpFXh7
ucZzAwEPNjVpbS/4YiqZqS8GlEzvbtoRuTI5C5U2oPU+bi44VAilQ+7UwEJRES6R
3tvruuQE4LiwkfMHxo0b3F4NzJ8h6jWvkKw6aB0W6ZHfAIKhiSWWefI9sKw+0hhu
lPGkL8hO9LoMN0wjygcj4W22AGooEVsc9lqAeXiRpdzSQEy2P6/FluJsiEmxbukC
nJOp5Wvxe/bGl5Nl4oKnNu1PaAncmA==
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:58:02 2025 by rpki-client