Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/917AE3784A8811F0B824E27EC4F9AE02.roa
File: 917AE3784A8811F0B824E27EC4F9AE02.roa (raw, json)
Hash identifier: UbSf4KUcku452ogJrDfH12QHJxIKc60iPEHrbfoRNgM=
Subject key identifier: AF:CD:53:23:B4:9B:13:B7:5C:56:49:76:FB:14:9A:E2:D2:95:93:7F
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 34D2
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/917AE3784A8811F0B824E27EC4F9AE02.roa
Signing time: Mon 16 Jun 2025 08:04:47 +0000
ROA not before: Mon 16 Jun 2025 08:04:47 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 5650
IP address blocks: 122.8.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 17 Jul 2025 03:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13522 (0x34d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Jun 16 08:04:47 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=684fd01e-239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:73:d9:49:33:9a:ff:0e:ef:bc:58:c7:a6:
09:09:85:d4:3d:65:fb:8c:03:23:08:7e:3b:c7:6a:
0e:33:38:61:73:9e:40:b3:1a:c4:2a:5d:0b:1d:5d:
9a:1c:45:89:5e:2c:50:d3:ce:2d:f4:7d:b3:9a:c9:
ad:3d:cc:2e:b7:84:eb:15:ff:9d:df:4d:22:47:17:
9d:ae:ed:25:e6:fb:c9:15:99:34:bf:0a:a1:d0:df:
b5:1c:83:82:82:68:c5:a7:28:e1:d0:a8:7d:89:04:
5e:a5:f6:0d:e4:ca:bf:95:d0:35:b6:49:c5:23:13:
e1:af:25:e7:29:22:2f:7e:e3:d0:ca:a4:21:4c:b6:
b0:4d:12:80:e3:97:f5:5f:aa:87:99:3a:59:a9:cb:
68:fb:af:0e:65:55:e9:61:dd:25:7c:fa:8c:9e:d9:
7b:54:96:9b:d6:27:96:94:ff:74:f8:a8:85:32:dd:
be:bc:5e:c7:9b:82:b4:a2:5e:b5:6c:7a:81:30:24:
90:e3:36:b5:d8:26:c0:a3:3e:40:35:36:02:50:65:
71:b2:39:ed:2a:5e:cf:f9:ee:c7:7c:b9:be:24:87:
e2:8c:f7:3b:f5:d3:1b:e0:c3:7b:fc:65:2d:13:44:
2c:91:fc:88:6c:de:ee:5c:b1:9e:db:e8:76:7e:a1:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:53:23:B4:9B:13:B7:5C:56:49:76:FB:14:9A:E2:D2:95:93:7F
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/917AE3784A8811F0B824E27EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.76.0/22
Signature Algorithm: sha256WithRSAEncryption
60:60:55:90:33:c4:4b:40:35:9a:50:e5:66:e7:c9:78:48:5f:
85:e4:a5:5c:3a:83:3c:10:98:72:6c:33:04:b7:6a:2d:8a:9e:
f4:84:02:54:8f:68:66:48:8f:3e:7d:a3:7c:cf:f4:be:05:23:
b5:57:b9:7b:57:41:e8:91:c1:b1:79:1f:61:37:2e:0c:ef:d5:
50:3b:29:b6:ac:ff:de:61:59:51:66:2e:65:af:e5:54:c7:c1:
7a:2d:d9:f6:72:1c:91:d4:64:57:69:ed:b7:12:28:85:cd:3a:
41:af:8a:88:12:1b:7d:5e:69:e0:ce:c2:db:d4:59:08:61:15:
5d:c3:8d:39:26:4e:cb:49:bb:d7:79:b0:1d:78:e2:6d:40:51:
02:24:d0:a6:87:8d:89:b3:5b:65:c1:f5:fd:37:97:c9:e3:39:
48:86:52:ab:43:c4:26:86:15:e8:f7:54:c6:ce:44:a0:14:1e:
6a:50:2b:30:f1:ea:93:9e:bc:b9:0d:98:f3:74:ef:46:be:45:
48:38:01:54:7e:11:6c:63:d0:a7:43:42:8c:28:df:2a:7d:a6:
fe:ad:0c:60:71:e0:b1:6b:9c:b3:85:10:26:f0:1b:99:e9:56:
2b:e5:15:eb:c1:38:6e:86:b3:23:0a:0b:54:66:a3:16:d2:0a:
3d:43:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:54:28 2025 by rpki-client