Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/E2DAE5C43A1B11F0B465B925C4F9AE02.roa
File: E2DAE5C43A1B11F0B465B925C4F9AE02.roa (raw, json)
Hash identifier: 3VwHhcW0tgf9QFeLK0smdfafbrUDssb89F2DPrIlk70=
Subject key identifier: 0A:11:9B:0E:17:5A:24:C5:34:ED:81:FF:1E:93:EF:19:B7:78:B8:27
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 083E
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/E2DAE5C43A1B11F0B465B925C4F9AE02.roa
Signing time: Mon 26 May 2025 10:26:29 +0000
ROA not before: Mon 26 May 2025 10:26:29 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 132335
IP address blocks: 103.72.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 06:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: May 26 10:26:29 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=683441d5-8736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:cd:54:ce:ca:16:7e:04:00:7b:c1:64:82:
e2:2d:19:64:48:b7:cc:eb:34:b9:f3:29:3e:9a:b7:
14:75:d3:05:64:bd:b8:4c:d4:43:49:d9:1a:41:9b:
28:57:ed:7e:a6:77:98:d1:17:3a:40:c6:d9:ef:7d:
89:47:43:db:b7:8e:d5:25:bf:c4:03:ff:19:4a:90:
23:f5:99:68:9d:b9:2e:86:93:0e:45:96:1e:ed:36:
9e:84:68:8a:60:16:9f:d5:02:43:3c:9d:e3:5d:f1:
34:17:9d:4b:14:59:10:a9:a8:1c:bb:7d:79:b6:e4:
51:e3:b3:f9:7a:23:9e:05:77:0c:b3:84:07:6e:77:
1b:b4:b1:3f:04:a0:a2:30:de:3a:ac:88:ed:90:d4:
41:f8:cd:fb:b1:bc:a9:75:ee:d6:5e:82:00:90:71:
0a:ce:7a:bc:20:98:03:d8:24:9b:11:a8:d3:bd:d2:
ad:57:e3:cf:27:22:f0:88:16:cd:df:15:bf:fc:ec:
0a:82:0d:13:a0:7d:0d:34:8a:60:20:e3:70:e3:93:
42:6a:06:7b:f5:6e:8f:f8:b8:0b:5d:8f:5e:68:cf:
b4:ae:5a:b8:43:93:88:26:36:5f:22:0b:0e:b2:e6:
96:eb:e0:d5:bc:b9:6f:a8:9d:b6:cf:8b:2a:2f:3a:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:11:9B:0E:17:5A:24:C5:34:ED:81:FF:1E:93:EF:19:B7:78:B8:27
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/E2DAE5C43A1B11F0B465B925C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.101.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5d:5c:12:cf:2b:89:16:20:f6:7e:40:69:e3:36:98:85:ad:
44:7c:8c:0e:ba:99:49:a6:d3:a0:b3:af:81:31:8d:f1:da:5e:
a2:ee:32:0e:6b:3c:51:4c:57:f1:90:c9:80:a5:92:4a:d2:70:
ab:03:6c:f8:55:22:66:6d:0f:f8:b8:76:a3:d1:8c:7d:f4:64:
93:20:66:42:1c:24:f2:41:1f:1e:8a:a7:49:41:8b:4e:59:46:
3a:ca:b9:c4:fb:56:62:6e:b9:a6:1c:54:6f:9e:83:c2:aa:a3:
51:78:91:52:26:f9:02:9f:e7:5c:d3:bc:b9:fb:0d:b9:34:47:
c4:fc:d5:f7:9e:de:78:5c:c6:c7:06:56:da:bb:4a:be:8d:3e:
c6:4a:a5:67:88:e4:fb:80:d2:29:99:8c:14:af:6a:66:9d:05:
66:34:fe:a7:90:cb:e4:22:d8:8f:e2:df:33:96:4c:ac:b5:05:
6b:2c:dd:d8:ba:2a:f7:f3:70:11:1e:3d:c5:16:33:f6:9d:79:
ec:35:8c:c6:02:d0:49:36:b1:fe:03:01:0b:91:bc:ad:f3:41:
9f:83:1a:bd:71:f0:d6:f8:1f:d4:ca:64:16:1f:c3:22:84:0a:
cb:55:e6:75:7b:c6:6d:4e:f3:49:23:91:d2:35:f1:97:bf:90:
68:65:13:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVGREYxMTAvBgNVBAUTKEU4QzIxQjAzQjY1MDgzQjIxQkZBMzc1MjZEMTJCMzQx
RjI0OUNDOEIwHhcNMjUwNTI2MTAyNjI5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM0NDFkNS04NzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6DNVM7KFn4EAHvBZILiLRlkSLfM6zS58yk+mrcUddMFZL24TNRDSdkaQZso
V+1+pneY0Rc6QMbZ732JR0Pbt47VJb/EA/8ZSpAj9ZlonbkuhpMORZYe7TaehGiK
YBaf1QJDPJ3jXfE0F51LFFkQqagcu315tuRR47P5eiOeBXcMs4QHbncbtLE/BKCi
MN46rIjtkNRB+M37sbypde7WXoIAkHEKznq8IJgD2CSbEajTvdKtV+PPJyLwiBbN
3xW//OwKgg0ToH0NNIpgIONw45NCagZ79W6P+LgLXY9eaM+0rlq4Q5OIJjZfIgsO
suaW6+DVvLlvqJ22z4sqLzoZwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAoRmw4X
WiTFNO2B/x6T7xm3eLgnMB8GA1UdIwQYMBaAFOjCGwO2UIOyG/o3Um0Ss0HyScyL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUZERi8wQkREN0VBMkU5
MEMxMUVBOTY1QzJBMkZDNEY5QUUwMi82TUliQTdaUWc3SWItamRTYlJLelFmSkp6
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZNSWJBN1pRZzdJYi1qZFNiUkt6UWZKSnpJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUVGREYvMEJERDdFQTJFOTBDMTFFQTk2NUMyQTJGQzRGOUFFMDIvRTJEQUU1QzQz
QTFCMTFGMEI0NjVCOTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnSGUwDQYJKoZIhvcNAQELBQADggEBAJhdXBLPK4kWIPZ+
QGnjNpiFrUR8jA66mUmm06Czr4ExjfHaXqLuMg5rPFFMV/GQyYClkkrScKsDbPhV
ImZtD/i4dqPRjH30ZJMgZkIcJPJBHx6Kp0lBi05ZRjrKucT7VmJuuaYcVG+eg8Kq
o1F4kVIm+QKf51zTvLn7Dbk0R8T81fee3nhcxscGVtq7Sr6NPsZKpWeI5PuA0imZ
jBSvamadBWY0/qeQy+Qi2I/i3zOWTKy1BWss3di6KvfzcBEePcUWM/adeew1jMYC
0Ek2sf4DAQuRvK3zQZ+DGr1x8Nb4H9TKZBYfwyKECstV5nV7xm1O80kjkdI18Ze/
kGhlE8I=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:00 2025 by rpki-client