Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B03298A1C0111EFA6330123C4F9AE02.roa
File: 8B03298A1C0111EFA6330123C4F9AE02.roa (raw, json)
Hash identifier: QUhC+B7MzcoE6PEYf1lom2eZmlHGzJuFLRgjwbv2hl4=
Subject key identifier: FC:90:FC:BC:CE:D2:CB:91:8E:76:89:D9:5D:6D:58:DC:B4:3A:A2:F9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A787
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B03298A1C0111EFA6330123C4F9AE02.roa
Signing time: Mon 24 Feb 2025 12:16:23 +0000
ROA not before: Mon 24 Feb 2025 12:16:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140113
IP address blocks: 103.66.80.0/22 maxlen: 22
103.151.16.0/23 maxlen: 24
103.162.158.0/23 maxlen: 24
163.61.66.0/24 maxlen: 24
163.61.67.0/24 maxlen: 24
2400:3ce0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Apr 2025 05:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42887 (0xa787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 24 12:16:23 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67bc6317-c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:36:d2:40:05:13:7c:9e:1e:31:ba:40:2c:
fe:bb:3a:af:50:5a:5e:2e:40:3b:40:78:55:e4:eb:
29:dd:5a:c1:8f:63:3d:f3:02:1d:72:3d:83:4f:f9:
98:42:2c:c3:70:24:99:8c:62:6d:fb:19:c9:55:ed:
fd:10:26:f0:1c:21:8d:f3:e4:2c:4a:78:07:3f:01:
d9:4a:0b:a2:2c:d4:55:c2:b4:11:da:c9:2b:6d:c7:
fe:64:9a:48:e9:9a:1a:4a:00:2a:69:8f:b6:03:52:
5a:01:03:a8:ff:f1:61:70:6b:bd:67:73:ca:c6:9e:
97:26:db:7a:f0:74:65:64:6a:1c:30:52:63:c0:57:
62:44:63:d6:68:7f:68:34:24:df:37:72:30:5b:8e:
8f:e0:4d:21:e6:30:23:41:7c:db:88:c8:e1:cb:bb:
4c:2f:41:19:37:18:ab:d0:5f:72:77:53:af:84:95:
0b:c7:e0:0b:fd:45:1c:55:f9:56:10:99:e1:c8:84:
76:a2:5d:76:41:36:e0:fb:2d:c9:02:be:91:e1:f6:
42:c4:a6:e3:79:20:2f:b3:60:72:91:83:92:b2:bc:
b7:32:f9:1a:2d:f8:fc:b6:f2:8b:b2:5b:47:d6:dc:
57:3c:28:ce:7d:be:1c:43:de:d0:5b:73:2e:96:07:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:FC:BC:CE:D2:CB:91:8E:76:89:D9:5D:6D:58:DC:B4:3A:A2:F9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B03298A1C0111EFA6330123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.80.0/22
103.151.16.0/23
103.162.158.0/23
163.61.66.0/23
IPv6:
2400:3ce0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:b1:5d:9c:22:e8:9e:af:c7:3a:4e:c0:e0:74:9e:94:8b:f9:
25:a5:51:d6:ac:ea:d5:0d:68:e9:9a:b4:6f:6b:76:68:60:07:
09:42:ef:c5:92:25:5f:32:04:94:8d:ff:9b:6c:22:a2:ff:be:
3e:79:5b:62:23:c8:8e:0f:0a:a0:91:48:d0:5e:21:18:74:64:
dd:5e:d3:09:0d:e6:35:aa:ec:6e:46:ac:d0:e1:f4:99:1f:01:
15:b9:c6:8c:70:3e:dc:4b:43:d9:81:39:d9:87:a9:5a:02:77:
15:17:eb:3c:af:83:72:80:7e:1a:6f:d5:16:4b:c6:a4:4c:aa:
9e:54:0a:73:4c:f5:59:a7:93:d9:60:89:67:e5:9e:08:35:d4:
5d:27:c5:d8:28:b5:84:b5:e2:49:c9:89:43:b3:e9:cf:20:ca:
cc:b1:2e:dd:11:73:4d:56:32:9e:53:98:48:78:92:2e:75:73:
f7:b9:1c:65:57:9c:15:8d:b5:42:46:ef:a9:a0:b9:c3:53:07:
ab:6a:de:16:35:7c:0a:28:f0:dc:f4:8b:87:10:47:46:88:25:
05:8c:e2:65:7f:f1:46:1e:a5:5a:9b:3a:a8:df:b9:3d:e2:71:
53:a8:9c:41:2c:f4:b8:f2:f0:f5:22:92:fe:df:2f:6c:bc:a8:
67:c9:cc:df
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAKeHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDIyNDEyMTYyM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdiYzYzMTctYzU5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfRNtJABRN8nh4xukAs/rs6r1BaXi5AO0B4VeTrKd1awY9jPfMCHXI9g0/5
mEIsw3AkmYxibfsZyVXt/RAm8BwhjfPkLEp4Bz8B2UoLoizUVcK0EdrJK23H/mSa
SOmaGkoAKmmPtgNSWgEDqP/xYXBrvWdzysaelybbevB0ZWRqHDBSY8BXYkRj1mh/
aDQk3zdyMFuOj+BNIeYwI0F824jI4cu7TC9BGTcYq9BfcndTr4SVC8fgC/1FHFX5
VhCZ4ciEdqJddkE24PstyQK+keH2QsSm43kgL7NgcpGDkrK8tzL5Gi34/Lbyi7Jb
R9bcVzwozn2+HEPe0FtzLpYHWaMCAwEAAaOCArYwggKyMB0GA1UdDgQWBBT8kPy8
ztLLkY52idldbVjctDqi+TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhCMDMyOThB
MUMwMTExRUZBNjMzMDEyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEAGCCsGAQUFBwEHAQH/
BDEwLzAeBAIAATAYAwQCZ0JQAwQBZ5cQAwQBZ6KeAwQBoz1CMA0EAgACMAcDBQAk
ADzgMA0GCSqGSIb3DQEBCwUAA4IBAQA9sV2cIuier8c6TsDgdJ6Ui/klpVHWrOrV
DWjpmrRva3ZoYAcJQu/FkiVfMgSUjf+bbCKi/74+eVtiI8iODwqgkUjQXiEYdGTd
XtMJDeY1quxuRqzQ4fSZHwEVucaMcD7cS0PZgTnZh6laAncVF+s8r4NygH4ab9UW
S8akTKqeVApzTPVZp5PZYIln5Z4INdRdJ8XYKLWEteJJyYlDs+nPIMrMsS7dEXNN
VjKeU5hIeJIudXP3uRxlV5wVjbVCRu+poLnDUwerat4WNXwKKPDc9IuHEEdGiCUF
jOJlf/FGHqVamzqo37k94nFTqJxBLPS48vD1IpL+3y9svKhnyczf
-----END CERTIFICATE-----
Generated at Thu May 15 18:35:19 2025 by rpki-client