Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A430F3B2A2F611EE8477DC13C4F9AE02.roa
File: A430F3B2A2F611EE8477DC13C4F9AE02.roa (raw, json)
Hash identifier: dNAUU8bYlRvysRjaJqH059HVU0LwG6QSMT4IH1iT/Q0=
Subject key identifier: 9E:B0:86:CE:F9:D4:2F:4C:05:69:B6:C4:72:31:A3:B1:65:37:30:CE
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 02EA
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A430F3B2A2F611EE8477DC13C4F9AE02.roa
Signing time: Fri 28 Jun 2024 11:08:11 +0000
ROA not before: Fri 28 Jun 2024 11:08:11 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 137451
IP address blocks: 43.255.117.0/24 maxlen: 24
103.49.61.0/24 maxlen: 24
103.235.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 14:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746 (0x2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Jun 28 11:08:11 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=667e999b-6c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:c4:22:e0:e8:ff:25:c5:be:73:db:df:0c:
39:63:1b:cf:ab:a5:81:20:9e:73:b1:20:76:17:a2:
83:c4:68:14:e1:5c:cf:84:01:35:b5:53:d0:f5:d3:
d0:1c:9a:e9:63:ee:ed:33:d2:1f:13:05:06:fb:9d:
9a:f6:6b:91:98:7c:a7:8f:1d:9f:fa:a2:b1:fb:90:
f5:ae:8d:b4:86:51:d4:50:13:a7:f5:15:5e:94:f7:
30:0c:56:f7:53:c2:62:8b:03:c1:91:9e:63:45:98:
f8:94:5d:b7:99:96:83:56:e7:0f:02:2c:95:04:c1:
4b:0e:99:af:ff:ae:90:56:10:38:ce:a3:9d:60:14:
bf:c2:d8:95:98:70:19:90:26:82:c3:02:be:5a:25:
d6:3a:07:af:97:d2:f6:6e:96:9d:25:d2:96:2f:5d:
f0:dc:84:e0:f2:7a:4b:7a:92:79:4b:0d:ee:ee:c7:
1f:ff:2c:02:37:6a:98:f8:c9:02:29:ae:61:64:8d:
ab:7e:83:79:af:52:40:85:64:f8:b6:63:2a:97:f4:
d9:e8:7b:49:93:0b:ad:57:f8:72:fc:4c:86:c1:13:
6d:b8:cd:25:3a:0b:d9:52:5d:e5:05:1b:c9:5e:7b:
b2:cc:70:8b:27:44:26:dd:8d:5e:60:d3:e5:62:c4:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:86:CE:F9:D4:2F:4C:05:69:B6:C4:72:31:A3:B1:65:37:30:CE
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A430F3B2A2F611EE8477DC13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.117.0/24
103.49.61.0/24
103.235.19.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3c:f9:98:cf:44:a1:d5:ca:76:1c:5f:fd:56:93:82:9a:6a:
1e:c4:63:5e:7e:6a:26:8a:05:76:0c:b7:d5:e8:3a:14:e8:97:
03:8a:e3:a7:5c:89:37:23:6e:d3:fc:f0:43:ac:e5:ec:f9:67:
e3:04:4d:8e:8c:98:f4:c1:3c:66:5f:bc:17:ac:12:9a:c2:92:
6e:c6:3e:8b:bf:b9:e6:aa:86:46:ae:5a:f5:01:a3:bd:a8:75:
c8:cd:a0:d5:58:e8:d0:81:83:33:69:e0:27:cd:f3:55:75:d6:
ed:1d:16:47:b7:6d:43:5c:c4:d9:db:b9:1b:3a:e3:83:84:49:
22:32:f7:cc:70:b5:92:06:7d:b2:99:44:a8:82:84:c0:6e:7a:
2b:a2:a3:38:40:66:fc:8e:13:20:d3:29:11:cd:b3:42:60:29:
a3:16:8d:12:7e:b8:a6:db:41:71:6e:6c:cc:66:17:0f:8a:58:
11:bb:58:28:08:ff:e4:de:10:4d:f9:ac:eb:ee:b0:c6:66:5e:
1e:94:eb:ef:97:d0:38:8f:f2:bd:6e:96:e3:0e:dd:4c:ba:48:
0b:5d:c8:67:04:e7:56:af:fd:5a:0e:25:b5:f1:10:9b:08:cd:
16:cc:35:6d:b3:1b:fc:81:34:8b:88:8b:51:1d:a0:5c:ff:7b:
8b:01:fe:5c
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjQwNjI4MTEwODExWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdlOTk5Yi02Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FTEIuDo/yXFvnPb3ww5YxvPq6WBIJ5zsSB2F6KDxGgU4VzPhAE1tVPQ9dPQ
HJrpY+7tM9IfEwUG+52a9muRmHynjx2f+qKx+5D1ro20hlHUUBOn9RVelPcwDFb3
U8JiiwPBkZ5jRZj4lF23mZaDVucPAiyVBMFLDpmv/66QVhA4zqOdYBS/wtiVmHAZ
kCaCwwK+WiXWOgevl9L2bpadJdKWL13w3ITg8npLepJ5Sw3u7scf/ywCN2qY+MkC
Ka5hZI2rfoN5r1JAhWT4tmMql/TZ6HtJkwutV/hy/EyGwRNtuM0lOgvZUl3lBRvJ
XnuyzHCLJ0Qm3Y1eYNPlYsQe5QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJ6whs75
1C9MBWm2xHIxo7FlNzDOMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvQTQzMEYzQjJB
MkY2MTFFRTg0NzdEQzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAAr/3UDBABnMT0DBABn6xMwDQYJKoZIhvcNAQELBQADggEB
AKo8+ZjPRKHVynYcX/1Wk4Kaah7EY15+aiaKBXYMt9XoOhTolwOK46dciTcjbtP8
8EOs5ez5Z+METY6MmPTBPGZfvBesEprCkm7GPou/ueaqhkauWvUBo72odcjNoNVY
6NCBgzNp4CfN81V11u0dFke3bUNcxNnbuRs644OESSIy98xwtZIGfbKZRKiChMBu
eiuiozhAZvyOEyDTKRHNs0JgKaMWjRJ+uKbbQXFubMxmFw+KWBG7WCgI/+TeEE35
rOvusMZmXh6U6++X0DiP8r1uluMO3Uy6SAtdyGcE51av/VoOJbXxEJsIzRbMNW2z
G/yBNIuIi1EdoFz/e4sB/lw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:19 2025 by rpki-client