Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/6F941D3EBC9811EF9844125DC4F9AE02.roa
File: 6F941D3EBC9811EF9844125DC4F9AE02.roa (raw, json)
Hash identifier: ENXnMYT8XtQnMwCWiA/PbN5axNsLbgUkQUWBwm8VvCk=
Subject key identifier: 0C:1F:4E:BE:39:E0:5C:C9:AB:B8:09:27:BB:83:4B:43:DC:43:00:1F
Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Certificate serial: 0498
Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/6F941D3EBC9811EF9844125DC4F9AE02.roa
Signing time: Tue 17 Dec 2024 17:00:36 +0000
ROA not before: Tue 17 Dec 2024 17:00:36 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 54702
IP address blocks: 103.173.84.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 17:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Validity
Not Before: Dec 17 17:00:36 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6761ae34-033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:3b:f6:f7:dd:bd:39:0e:9e:36:ca:44:37:
c3:f7:63:7e:01:45:93:f1:00:9f:e8:fe:cd:ba:6f:
9d:50:64:63:da:cd:fc:85:a7:c5:06:84:b4:a0:2d:
42:f1:eb:67:08:3b:bb:aa:04:b1:ca:11:cd:3a:55:
e7:4b:46:63:56:8b:14:1c:02:3a:7b:79:a7:ad:e0:
b7:c9:e3:3b:72:d8:67:dd:6f:47:94:7a:16:dd:23:
42:ae:ad:ff:81:f8:8f:ac:f1:a2:1a:fc:c9:bc:a6:
7b:4a:c4:b6:28:ec:ca:b5:0d:77:b2:7a:57:53:01:
db:81:65:85:48:ca:6e:82:12:d9:6e:1b:1a:1f:25:
80:ff:74:69:0e:8d:d6:1b:6c:6c:9c:0b:35:69:c8:
d6:45:79:6a:1e:89:44:8a:1a:89:d6:38:92:d9:d9:
c7:02:4c:c0:43:8e:6e:1b:c5:16:b5:9f:22:f2:91:
55:1e:7c:49:55:56:b5:f0:b0:01:71:fd:09:73:4c:
ce:82:3a:4e:85:f8:ca:ee:2f:70:31:73:cd:5f:9e:
07:a8:d9:ff:21:29:35:8d:72:ec:68:e8:a2:23:be:
80:c3:4c:02:00:bf:81:1d:b0:8c:1b:91:fc:63:94:
1a:80:05:40:34:06:db:ed:8b:d4:6b:1b:a3:71:18:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:4E:BE:39:E0:5C:C9:AB:B8:09:27:BB:83:4B:43:DC:43:00:1F
X509v3 Authority Key Identifier:
keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/6F941D3EBC9811EF9844125DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.84.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:46:55:23:21:1a:ab:27:e8:7b:5b:cc:00:2f:c4:0f:33:99:
f7:23:e7:fa:9d:2d:07:69:cd:ca:5e:66:28:7b:4b:df:a5:f0:
f7:66:c6:c5:0d:60:b9:0c:fd:20:65:ae:80:64:30:f7:6a:ac:
17:eb:18:34:74:6a:41:2c:0e:7c:98:2e:5b:ae:6b:85:aa:3f:
ad:fc:9e:97:ae:a1:1c:0f:79:d7:e0:67:31:94:e5:7e:f5:c6:
69:fe:00:6a:d5:79:63:b0:19:ec:cb:a9:39:87:d5:98:b8:67:
7f:49:0a:d3:f5:36:82:ea:f9:c2:4f:17:c4:a2:60:df:5d:9c:
78:21:07:98:2f:d9:a7:e0:72:12:88:95:8a:43:25:64:81:e2:
0e:be:e2:d5:db:34:bf:a7:50:16:b9:a1:4b:b9:aa:a4:4b:5a:
20:63:10:f4:8b:01:e5:89:ad:cc:b4:6a:2c:29:8f:18:bf:c0:
d9:59:73:87:45:d6:3f:e4:3f:54:f4:f7:ed:b2:4d:d2:b7:80:
4c:8d:99:27:a1:89:6c:52:9d:94:21:57:af:11:b8:3e:64:86:
30:60:1e:d7:93:c3:96:15:bc:1b:eb:4d:20:fb:2b:fe:12:25:
37:6f:0e:eb:02:be:7f:7c:d4:89:f1:a8:af:69:ce:1d:3b:48:
0b:80:4d:83
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1
NURCMzFDRTgwHhcNMjQxMjE3MTcwMDM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzYxYWUzNC0wMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/M79vfdvTkOnjbKRDfD92N+AUWT8QCf6P7Num+dUGRj2s38hafFBoS0oC1C
8etnCDu7qgSxyhHNOlXnS0ZjVosUHAI6e3mnreC3yeM7cthn3W9HlHoW3SNCrq3/
gfiPrPGiGvzJvKZ7SsS2KOzKtQ13snpXUwHbgWWFSMpughLZbhsaHyWA/3RpDo3W
G2xsnAs1acjWRXlqHolEihqJ1jiS2dnHAkzAQ45uG8UWtZ8i8pFVHnxJVVa18LAB
cf0Jc0zOgjpOhfjK7i9wMXPNX54HqNn/ISk1jXLsaOiiI76Aw0wCAL+BHbCMG5H8
Y5QagAVANAbb7YvUaxujcRiIKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAwfTr45
4FzJq7gJJ7uDS0PcQwAfMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB
ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRERkEvODQ1OTg0Q0UxQTg1MTFFQ0E3NkFFQTNBQzRGOUFFMDIvNkY5NDFEM0VC
Qzk4MTFFRjk4NDQxMjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrVQwDQYJKoZIhvcNAQELBQADggEBAFpGVSMhGqsn6Htb
zAAvxA8zmfcj5/qdLQdpzcpeZih7S9+l8PdmxsUNYLkM/SBlroBkMPdqrBfrGDR0
akEsDnyYLluua4WqP638npeuoRwPedfgZzGU5X71xmn+AGrVeWOwGezLqTmH1Zi4
Z39JCtP1NoLq+cJPF8SiYN9dnHghB5gv2afgchKIlYpDJWSB4g6+4tXbNL+nUBa5
oUu5qqRLWiBjEPSLAeWJrcy0aiwpjxi/wNlZc4dF1j/kP1T09+2yTdK3gEyNmSeh
iWxSnZQhV68RuD5khjBgHteTw5YVvBvrTSD7K/4SJTdvDusCvn981InxqK9pzh07
SAuATYM=
-----END CERTIFICATE-----
Generated at Sun May 11 19:56:24 2025 by rpki-client