Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/FC26DCB62EFB11F084432E86C4F9AE02.roa
File: FC26DCB62EFB11F084432E86C4F9AE02.roa (raw, json)
Hash identifier: O1lPcvHqvfTxpwOS7i6PaESvOBLe5K5hmyqbFhPlUzM=
Subject key identifier: 37:4B:03:A7:72:37:C5:D7:76:5C:52:17:EC:1F:DD:A6:F5:CB:B7:47
Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Certificate serial: 02
Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/FC26DCB62EFB11F084432E86C4F9AE02.roa
Signing time: Mon 12 May 2025 06:40:25 +0000
ROA not before: Mon 12 May 2025 06:40:25 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139785
IP address blocks: 103.40.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 07:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Validity
Not Before: May 12 06:40:25 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=682197d9-6be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:e6:db:54:f4:33:1a:ee:0d:a7:5f:8a:e4:
bc:0f:b0:38:03:b7:da:ab:cc:3a:e1:b1:d2:0f:cc:
b0:a8:9b:a1:ab:04:d0:0e:e8:c3:a5:3a:fa:21:20:
bf:09:0d:7f:1a:e6:2f:ac:1f:97:ec:42:1a:85:f4:
3d:31:f9:6c:59:12:6b:ba:ee:ac:3b:ce:ac:45:62:
59:01:ff:41:a5:bf:c7:fa:a9:79:e4:f5:c1:43:9a:
a9:5f:38:c3:84:84:a5:98:a1:8b:ae:fc:cb:a6:61:
43:32:94:b3:d6:95:d9:c4:a5:1a:bf:78:9d:80:d2:
77:4f:16:50:f9:fa:ce:37:48:01:af:7d:94:86:8a:
6a:a1:8c:f8:2d:8c:06:d2:54:89:fe:5c:a0:6a:0a:
36:64:7a:32:bf:b5:ee:02:8a:e1:a9:4a:04:34:4f:
c5:dc:93:92:ac:12:aa:90:13:2b:f2:1d:ee:c5:8b:
c3:54:b5:59:f7:91:cf:89:e9:f4:5e:f7:9d:e8:b5:
3b:e9:2a:17:14:77:d9:bc:01:30:8c:82:e0:15:fa:
fa:91:9c:d5:dc:17:54:fa:a0:ac:83:c2:d5:9e:45:
9e:1f:b6:08:b1:a4:4e:ef:89:e4:14:1c:e7:42:66:
97:49:46:c9:fa:10:b9:0f:27:8c:74:b1:9f:05:e9:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:03:A7:72:37:C5:D7:76:5C:52:17:EC:1F:DD:A6:F5:CB:B7:47
X509v3 Authority Key Identifier:
keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/FC26DCB62EFB11F084432E86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4e:5d:e0:8e:32:6c:08:c5:7b:be:23:7c:97:77:8d:b9:dd:
71:25:22:d9:c0:b0:9c:24:56:97:3a:25:cc:a7:cd:cb:19:8b:
78:4a:e3:11:af:a2:0f:3a:cf:f9:5e:fe:25:65:e3:f7:01:70:
9d:3f:8e:25:b4:08:c9:5d:5f:41:dd:f9:83:45:f3:6e:dc:65:
2f:5f:9e:b7:56:d2:eb:87:1d:3f:b7:50:79:1a:59:8e:df:11:
06:bc:0f:36:05:92:dc:ed:53:ee:5a:40:1d:98:64:96:26:37:
d1:b8:8c:aa:6e:16:38:d5:5b:d9:c6:b5:c5:25:a4:33:5b:a3:
ef:a2:4c:f1:26:aa:ea:0b:e2:79:84:7a:23:06:cb:97:02:8c:
5d:53:cb:e6:f1:bb:c2:c0:60:91:f8:bc:06:fe:35:63:b5:a2:
60:a5:aa:2a:0d:fa:14:55:99:bc:a3:6a:b3:1b:7a:16:dd:aa:
9b:61:44:5e:ad:bf:a4:bc:67:5b:da:15:1d:d5:8c:f2:5c:f6:
95:f2:bf:70:1d:74:2f:cf:32:bd:46:f2:b5:dd:14:db:17:3b:
85:8b:7e:e0:30:54:ae:fe:88:31:77:71:83:1a:bd:2e:ce:fc:
df:00:d9:25:ab:b3:06:09:ea:ae:a1:36:46:64:ba:3f:81:b9:
0c:1e:3b:0b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF
M0U5NUZFRTAeFw0yNTA1MTIwNjQwMjVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MjE5N2Q5LTZiZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4VebbVPQzGu4Np1+K5LwPsDgDt9qrzDrhsdIPzLCom6GrBNAO6MOlOvohIL8J
DX8a5i+sH5fsQhqF9D0x+WxZEmu67qw7zqxFYlkB/0Glv8f6qXnk9cFDmqlfOMOE
hKWYoYuu/MumYUMylLPWldnEpRq/eJ2A0ndPFlD5+s43SAGvfZSGimqhjPgtjAbS
VIn+XKBqCjZkejK/te4CiuGpSgQ0T8Xck5KsEqqQEyvyHe7Fi8NUtVn3kc+J6fRe
953otTvpKhcUd9m8ATCMguAV+vqRnNXcF1T6oKyDwtWeRZ4ftgixpE7vieQUHOdC
ZpdJRsn6ELkPJ4x0sZ8F6REtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUN0sDp3I3
xdd2XFIX7B/dpvXLt0cwHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG
QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkRCOC85ODIzMEIyQzJFRkIxMUYwOTBFMzYzODVDNEY5QUUwMi9GQzI2RENCNjJF
RkIxMUYwODQ0MzJFODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGco4DANBgkqhkiG9w0BAQsFAAOCAQEAjk5d4I4ybAjFe74j
fJd3jbndcSUi2cCwnCRWlzolzKfNyxmLeErjEa+iDzrP+V7+JWXj9wFwnT+OJbQI
yV1fQd35g0XzbtxlL1+et1bS64cdP7dQeRpZjt8RBrwPNgWS3O1T7lpAHZhkliY3
0biMqm4WONVb2ca1xSWkM1uj76JM8Saq6gvieYR6IwbLlwKMXVPL5vG7wsBgkfi8
Bv41Y7WiYKWqKg36FFWZvKNqsxt6Ft2qm2FEXq2/pLxnW9oVHdWM8lz2lfK/cB10
L88yvUbytd0U2xc7hYt+4DBUrv6IMXdxgxq9Ls783wDZJauzBgnqrqE2RmS6P4G5
DB47Cw==
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:11:39 2025 by rpki-client