Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9E60B12451BF11F08496463FC4F9AE02.roa
File: 9E60B12451BF11F08496463FC4F9AE02.roa (raw, json)
Hash identifier: G7alyc28UnPinuub9L7HxXgSKVSvMX+VK7VfHOkzhq8=
Subject key identifier: 55:AB:A0:57:55:AB:14:05:46:D0:A5:DF:16:C4:D7:F5:7F:A2:F8:EE
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 28BF
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9E60B12451BF11F08496463FC4F9AE02.roa
Signing time: Wed 25 Jun 2025 12:26:29 +0000
ROA not before: Wed 25 Jun 2025 12:26:29 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38051
IP address blocks: 43.250.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Oct 2025 13:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10431 (0x28bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Jun 25 12:26:29 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=685beaf4-e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:4e:9f:96:b6:d0:0e:1e:ed:9e:f8:97:58:
fb:dd:7b:4c:00:e1:c9:c0:67:a1:ec:bc:e1:f1:91:
65:ea:b3:ca:99:22:3a:d1:2f:a2:a8:16:93:89:d1:
ef:d6:f8:5a:9d:d2:45:07:66:bc:20:03:11:18:cd:
da:89:3f:23:bd:c9:5e:88:a6:ad:01:45:d2:ab:9a:
13:02:80:4e:98:af:08:fe:6f:86:83:b6:5c:c5:9f:
c9:47:66:99:34:94:15:40:d2:73:37:cb:39:ec:ef:
3a:0a:c1:00:d9:f4:c4:2e:92:d1:65:af:f7:e8:d0:
16:a1:06:14:7d:36:ac:2c:23:8a:b0:f5:c3:c5:34:
fa:4b:80:e8:bc:67:d5:83:88:b8:08:48:0d:7d:76:
86:49:90:4c:3e:ca:b2:66:4c:bb:9a:50:64:13:1c:
b7:b8:38:1c:18:37:0c:6d:0e:da:9b:bc:05:e5:09:
d9:c2:22:b3:92:a3:7a:dc:d1:c2:e8:1c:2e:71:81:
93:b0:f8:49:87:77:23:09:c7:f7:44:47:ef:8b:4e:
ef:20:e3:16:96:be:74:4d:a8:cc:e3:0d:f4:57:87:
b6:bb:d2:c2:3b:0f:2e:0f:17:9d:05:20:a0:a5:6d:
f4:95:9b:0d:4a:e8:fb:32:7a:7e:73:51:00:71:d5:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:A0:57:55:AB:14:05:46:D0:A5:DF:16:C4:D7:F5:7F:A2:F8:EE
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9E60B12451BF11F08496463FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.127.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:14:94:f5:cd:fe:cf:08:c4:2d:30:bf:11:f1:07:84:22:be:
f2:e4:40:d3:37:28:ce:ee:54:a5:23:27:af:3e:42:ab:44:ef:
db:dd:c4:42:c1:a2:13:8b:8e:86:c9:41:30:99:0f:cd:e3:f8:
0d:ed:1e:a4:1e:b3:bc:62:92:e9:45:ae:7a:42:70:75:5c:65:
3c:4b:ba:36:c5:fd:d4:d8:55:25:a5:40:13:b7:45:7b:b0:a4:
c4:de:ba:f0:fd:69:cf:5f:ce:dc:54:5e:16:ef:a2:6f:5a:cc:
0f:6c:3c:2c:59:07:7d:5d:e0:98:d9:f7:fb:15:0a:9e:c4:ad:
9c:f5:6b:23:45:7c:ef:be:02:b7:31:7c:64:55:1a:68:79:c5:
dd:42:0b:7b:c6:01:03:c6:d8:e3:80:08:49:d8:63:9f:bf:b2:
dc:8c:cd:62:c7:4d:5a:8f:af:c3:05:3f:14:de:f7:cc:27:f5:
73:52:ad:59:1d:96:65:64:2a:0f:30:f4:67:18:77:e4:cb:1e:
f1:3b:90:d5:f6:48:d4:ed:23:4f:5d:de:3a:34:c1:a8:19:6c:
6f:cd:6f:5b:ef:55:5a:af:61:d6:4a:54:1a:9f:8d:ef:53:ed:
2b:ec:8f:c9:2f:9a:fc:dd:61:94:ec:db:fa:4e:90:87:82:60:
25:43:38:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4
RTkzM0ZEQ0EwHhcNMjUwNjI1MTIyNjI5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODViZWFmNC1lMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA635On5a20A4e7Z74l1j73XtMAOHJwGeh7Lzh8ZFl6rPKmSI60S+iqBaTidHv
1vhandJFB2a8IAMRGM3aiT8jvcleiKatAUXSq5oTAoBOmK8I/m+Gg7ZcxZ/JR2aZ
NJQVQNJzN8s57O86CsEA2fTELpLRZa/36NAWoQYUfTasLCOKsPXDxTT6S4DovGfV
g4i4CEgNfXaGSZBMPsqyZky7mlBkExy3uDgcGDcMbQ7am7wF5QnZwiKzkqN63NHC
6BwucYGTsPhJh3cjCcf3REfvi07vIOMWlr50TajM4w30V4e2u9LCOw8uDxedBSCg
pW30lZsNSuj7Mnp+c1EAcdVTuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFWroFdV
qxQFRtCl3xbE1/V/ovjuMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG
OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvOUU2MEIxMjQ1
MUJGMTFGMDg0OTY0NjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr+n8wDQYJKoZIhvcNAQELBQADggEBAL0UlPXN/s8IxC0w
vxHxB4QivvLkQNM3KM7uVKUjJ68+QqtE79vdxELBohOLjobJQTCZD83j+A3tHqQe
s7xikulFrnpCcHVcZTxLujbF/dTYVSWlQBO3RXuwpMTeuvD9ac9fztxUXhbvom9a
zA9sPCxZB31d4JjZ9/sVCp7ErZz1ayNFfO++ArcxfGRVGmh5xd1CC3vGAQPG2OOA
CEnYY5+/styMzWLHTVqPr8MFPxTe98wn9XNSrVkdlmVkKg8w9GcYd+TLHvE7kNX2
SNTtI09d3jo0wagZbG/Nb1vvVVqvYdZKVBqfje9T7Svsj8kvmvzdYZTs2/pOkIeC
YCVDOK4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:33 2025 by rpki-client