Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/8E25D178F19211EF80C3B274C4F9AE02.roa
File: 8E25D178F19211EF80C3B274C4F9AE02.roa (raw, json)
Hash identifier: 8BIO/25CtWnE5zMYcQPwkVYcRQzIkER5wkMliV6bHU4=
Subject key identifier: 49:FC:D4:CF:21:7A:E9:A7:8D:EE:41:32:E2:B4:80:A8:E1:16:B6:27
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: A7
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/8E25D178F19211EF80C3B274C4F9AE02.roa
Signing time: Sun 23 Feb 2025 03:02:03 +0000
ROA not before: Sun 23 Feb 2025 03:02:03 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152474
IP address blocks: 103.40.166.0/23 maxlen: 23
103.40.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 07:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Feb 23 03:02:03 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67ba8faa-0cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:a6:46:81:42:5f:ea:00:07:89:2e:06:f0:
18:89:d8:11:cf:66:68:8f:08:65:f8:8d:b7:6d:26:
24:df:e8:bc:eb:0f:4e:6f:76:8b:ed:53:f1:f7:89:
a9:8c:42:dd:3f:c8:97:ba:7c:44:9a:aa:7a:ed:aa:
5e:01:61:3e:0d:6d:5d:b4:99:f5:b6:7f:46:72:09:
2a:ee:13:60:cd:5d:5d:4b:90:04:2d:c6:ec:7e:c3:
8d:09:d5:e3:a2:d5:8c:b3:e3:49:db:41:f0:79:c5:
46:1e:ae:7b:79:70:57:e8:61:ce:d3:23:ce:3d:f5:
33:f6:3a:39:a0:fe:62:5a:42:57:73:8c:d4:81:35:
a0:a1:33:30:de:a5:12:fa:3e:84:e2:a3:54:a5:38:
a7:f7:07:b1:e7:54:8a:16:e7:58:2c:4f:93:9b:9f:
9a:b0:76:2f:c4:15:fa:79:3d:75:71:85:98:d6:1a:
cb:ad:fd:7e:bb:7c:7a:99:5e:4a:c7:03:2c:fb:9e:
f9:ca:6b:91:57:67:12:a0:49:b7:50:9b:76:66:e9:
ae:6b:cc:f7:a4:a5:ed:13:d5:77:b5:88:75:64:5f:
4a:9f:de:97:8a:f9:99:66:c3:49:63:e0:93:60:6b:
3e:7e:5b:68:da:dd:a9:84:03:ab:ba:4e:a9:e2:83:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:D4:CF:21:7A:E9:A7:8D:EE:41:32:E2:B4:80:A8:E1:16:B6:27
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/8E25D178F19211EF80C3B274C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.166.0/23
Signature Algorithm: sha256WithRSAEncryption
89:d3:9c:73:8c:b3:a8:49:a9:40:27:92:97:70:ae:da:fb:5f:
42:31:7a:be:a1:7d:f1:d1:51:44:a6:f1:00:8a:d9:18:9f:70:
d9:5f:af:14:92:72:93:37:13:82:ef:ff:ac:04:23:1d:c2:6c:
4c:f9:52:8c:04:48:8e:39:c3:01:da:25:fe:c9:a6:9d:1f:c0:
b2:d3:ef:01:80:73:66:5a:a5:cd:a3:ca:c7:58:e1:5f:3b:1a:
35:75:c3:23:ce:ac:2a:62:5a:5e:c8:76:98:5c:2f:37:f4:1c:
18:ec:67:72:ab:81:ae:df:58:d4:5f:c7:fe:a7:e5:a3:cd:90:
3f:27:90:1d:9e:f1:cf:b0:c0:f5:04:45:17:39:e8:ba:c9:43:
c6:54:a7:76:3c:3c:ab:f3:6f:3a:89:aa:28:bf:4c:a3:bd:cc:
6f:be:52:fa:fc:cb:3b:c9:e4:77:26:5b:d9:b9:9c:38:f6:87:
88:a3:ee:28:31:6c:08:3c:da:99:f1:92:84:6b:a6:1d:82:43:
0c:23:25:49:71:ba:af:df:23:57:d1:c2:d6:55:77:f3:20:3d:
1d:97:d1:f9:01:69:a4:97:a2:ba:bd:2e:9c:37:f3:3e:b3:d3:
10:31:a1:4d:c2:1d:96:62:ed:72:47:6a:5a:04:d9:f6:75:54:
9b:65:bd:1d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0
NTE5NjdBRUMwHhcNMjUwMjIzMDMwMjAzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JhOGZhYS0wY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCCmRoFCX+oAB4kuBvAYidgRz2Zojwhl+I23bSYk3+i86w9Ob3aL7VPx94mp
jELdP8iXunxEmqp67apeAWE+DW1dtJn1tn9Gcgkq7hNgzV1dS5AELcbsfsONCdXj
otWMs+NJ20HwecVGHq57eXBX6GHO0yPOPfUz9jo5oP5iWkJXc4zUgTWgoTMw3qUS
+j6E4qNUpTin9wex51SKFudYLE+Tm5+asHYvxBX6eT11cYWY1hrLrf1+u3x6mV5K
xwMs+575ymuRV2cSoEm3UJt2Zumua8z3pKXtE9V3tYh1ZF9Kn96XivmZZsNJY+CT
YGs+flto2t2phAOruk6p4oMREwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEn81M8h
eumnje5BMuK0gKjhFrYnMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy
MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUIwMDIvRTI0RjgyMzQwMjJFMTFFRjg1NkY1MTMyQzRGOUFFMDIvOEUyNUQxNzhG
MTkyMTFFRjgwQzNCMjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnKKYwDQYJKoZIhvcNAQELBQADggEBAInTnHOMs6hJqUAn
kpdwrtr7X0Ixer6hffHRUUSm8QCK2RifcNlfrxSScpM3E4Lv/6wEIx3CbEz5UowE
SI45wwHaJf7Jpp0fwLLT7wGAc2Zapc2jysdY4V87GjV1wyPOrCpiWl7IdphcLzf0
HBjsZ3Krga7fWNRfx/6n5aPNkD8nkB2e8c+wwPUERRc56LrJQ8ZUp3Y8PKvzbzqJ
qii/TKO9zG++Uvr8yzvJ5HcmW9m5nDj2h4ij7igxbAg82pnxkoRrph2CQwwjJUlx
uq/fI1fRwtZVd/MgPR2X0fkBaaSXorq9Lpw38z6z0xAxoU3CHZZi7XJHaloE2fZ1
VJtlvR0=
-----END CERTIFICATE-----
Generated at Sat May 17 13:11:03 2025 by rpki-client