Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa
File: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (raw, json)
Hash identifier: QhzfsX04nbXbH/w5lT0gqkjRJToli5EBXhl85GTgIi8=
Subject key identifier: 09:E8:86:E1:00:39:E9:3D:DB:EC:76:0A:33:F6:FF:B8:2A:18:DB:56
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 074E
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa
Signing time: Wed 14 May 2025 04:51:38 +0000
ROA not before: Wed 14 May 2025 04:51:38 +0000
ROA not after: Thu 28 Aug 2025 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.200.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 09:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: May 14 04:51:38 2025 GMT
Not After : Aug 28 00:00:00 2025 GMT
Subject: CN=6824215a-838d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:1e:66:3e:9e:2c:61:4a:3c:cf:5f:9d:5e:
77:86:f5:05:de:f1:d0:0f:69:45:9a:6d:ed:c3:b7:
4d:f4:aa:38:4e:60:44:fe:f1:35:de:73:c2:c8:20:
52:f6:98:8e:9f:4d:92:ef:fb:11:39:db:08:16:ba:
9c:d1:36:98:91:a6:42:3d:fc:8d:8b:2d:6e:a1:c6:
e1:23:96:28:2c:4c:ba:ad:3a:eb:55:66:7c:9d:75:
7a:ac:b4:df:91:f6:02:f9:d9:de:00:97:1d:03:1d:
2b:a8:1b:1b:23:a3:ab:e3:76:2a:ae:c0:c3:53:1e:
02:73:bb:75:01:8f:ef:cf:75:d8:9d:a9:00:2f:0d:
5b:4b:8a:fd:05:60:bd:15:af:c8:a8:f1:bb:89:2b:
7c:54:98:78:5d:35:ca:3d:9e:b1:30:9b:ba:d5:8f:
4f:f1:44:82:69:a3:9b:92:dc:29:d1:49:de:a8:3c:
51:11:18:8f:c3:6a:f9:7e:cc:42:e3:c4:69:bf:29:
d3:c1:9a:a7:83:1a:ef:ab:3c:bd:5a:9d:40:37:da:
ea:40:d6:62:c7:1b:73:79:fb:72:ba:e6:1a:d3:71:
69:bb:b1:4c:df:40:b2:b4:67:7a:b8:ae:cf:43:a6:
d8:2f:99:eb:b0:ba:57:5b:0a:74:2f:b0:75:31:d4:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:86:E1:00:39:E9:3D:DB:EC:76:0A:33:F6:FF:B8:2A:18:DB:56
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:ef:a1:e3:bb:20:28:ee:57:88:7e:c1:d8:39:dc:66:46:d0:
da:65:2f:97:75:37:09:7d:12:1c:fc:0f:66:8b:6f:7a:3b:fd:
28:dd:c8:98:77:0f:27:6f:d5:c0:81:8a:32:20:3b:23:89:cd:
bf:be:48:f9:99:4a:37:21:b9:8f:31:55:c2:11:43:51:f8:df:
c0:74:1f:c1:15:1c:01:0c:88:d9:8f:b9:d1:f3:6c:b2:b8:d4:
6c:00:f5:b2:92:bf:f6:70:e3:9c:16:1f:7b:5f:c1:99:71:2d:
f4:43:8a:26:6a:c4:09:8b:fa:de:ad:d4:0d:d5:3d:2e:af:0d:
6a:62:7f:99:65:26:df:00:62:1e:72:62:a5:14:63:15:9c:6e:
8c:a5:5e:95:fd:d3:ef:51:d6:09:24:ae:87:ef:4f:58:d2:90:
be:52:d7:1c:2e:cb:79:a2:43:56:24:5c:af:b2:3d:10:d5:5f:
3f:2a:8f:ea:c2:49:56:6e:08:ee:8e:36:c0:af:3e:09:02:f1:
05:b9:25:5b:44:6d:f5:4a:50:2e:7c:70:eb:d8:0c:f0:28:5c:
46:dd:7c:8a:d2:3b:87:08:eb:06:60:93:25:5b:ad:3f:27:13:
f9:5b:6a:9d:ab:22:a7:1b:92:35:00:a8:08:84:9e:2b:95:bc:
b8:7e:14:4e
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx
MjM5MDMzNzkwHhcNMjUwNTE0MDQ1MTM4WhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI0MjE1YS04MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxeMeZj6eLGFKPM9fnV53hvUF3vHQD2lFmm3tw7dN9Ko4TmBE/vE13nPCyCBS
9piOn02S7/sROdsIFrqc0TaYkaZCPfyNiy1uocbhI5YoLEy6rTrrVWZ8nXV6rLTf
kfYC+dneAJcdAx0rqBsbI6Or43YqrsDDUx4Cc7t1AY/vz3XYnakALw1bS4r9BWC9
Fa/IqPG7iSt8VJh4XTXKPZ6xMJu61Y9P8USCaaObktwp0UneqDxRERiPw2r5fsxC
48RpvynTwZqngxrvqzy9Wp1AN9rqQNZixxtzeftyuuYa03Fpu7FM30CytGd6uK7P
Q6bYL5nrsLpXWwp0L7B1MdQ8eQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFAnohuEA
Oek92+x2CjP2/7gqGNtWMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5
MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvQkYwNzBBQjZD
MUJDMTFFRUJBQjdGMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E
MzAxMC8EAgABMCkDAwAbawMEAzHJGAMEBTH5wAMEAmcIJAMEBHOg0AMEAbacBgME
AbacFDANBgkqhkiG9w0BAQsFAAOCAQEAqu+h47sgKO5XiH7B2DncZkbQ2mUvl3U3
CX0SHPwPZotvejv9KN3ImHcPJ2/VwIGKMiA7I4nNv75I+ZlKNyG5jzFVwhFDUfjf
wHQfwRUcAQyI2Y+50fNssrjUbAD1spK/9nDjnBYfe1/BmXEt9EOKJmrECYv63q3U
DdU9Lq8NamJ/mWUm3wBiHnJipRRjFZxujKVelf3T71HWCSSuh+9PWNKQvlLXHC7L
eaJDViRcr7I9ENVfPyqP6sJJVm4I7o42wK8+CQLxBbklW0Rt9UpQLnxw69gM8Chc
Rt18itI7hwjrBmCTJVutPycT+VtqnasipxuSNQCoCISeK5W8uH4UTg==
-----END CERTIFICATE-----
Generated at Wed May 14 16:26:35 2025 by rpki-client