Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/6CC1DFC2E2E211EF80CA0777C4F9AE02.roa
File: 6CC1DFC2E2E211EF80CA0777C4F9AE02.roa (raw, json)
Hash identifier: 6ursF01iHsI9foXy3QfckrSmdkpqiOP7spSifg+64NM=
Subject key identifier: 2E:0E:36:A9:D7:20:83:72:28:15:73:7C:EE:0C:08:6B:84:9C:8E:DB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: EA
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/6CC1DFC2E2E211EF80CA0777C4F9AE02.roa
Signing time: Tue 04 Feb 2025 10:25:59 +0000
ROA not before: Tue 04 Feb 2025 10:25:59 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 838
IP address blocks: 43.231.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 08:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647
Validity
Not Before: Feb 4 10:25:59 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67a1eb36-f114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:19:62:6f:65:38:1a:32:02:18:09:9f:e1:
d7:29:42:22:45:99:b4:c1:9a:ad:f4:27:44:7a:da:
bb:7c:10:bd:a4:cb:17:e4:97:74:24:40:06:93:80:
df:22:be:f3:15:36:f7:0d:d6:09:74:00:d1:a2:a0:
f2:01:53:a2:1a:f1:c9:b5:fa:7d:a3:22:72:bb:63:
af:7e:d9:23:b3:9d:ac:f7:dd:5f:6d:c3:b0:5d:8a:
c6:75:ca:1c:ef:37:cb:27:1b:32:7b:d0:c2:bb:0b:
7d:1d:9f:43:aa:d0:89:2d:c9:dc:f2:6a:95:ef:82:
5d:02:fb:86:43:c3:57:4b:d7:79:c2:bb:8e:2c:b6:
40:89:6e:ef:7c:5a:cf:21:dc:9e:1b:ad:08:af:0d:
65:16:4c:f5:a9:25:4c:f3:07:32:f7:9c:01:1a:1c:
03:c7:0f:b7:d1:eb:52:71:33:8b:53:b5:17:23:63:
2a:dd:3f:b1:c2:67:11:77:0b:3a:f4:66:a5:d0:ac:
08:bc:91:b0:ad:33:95:ff:dd:89:d1:50:99:d5:47:
2d:dd:55:ea:b1:4f:fb:91:09:7d:93:58:8b:5d:4d:
97:1f:5b:4d:55:5d:6f:2f:a7:59:2b:63:95:c1:2a:
01:45:2d:7b:c6:78:87:c5:83:d7:dc:49:09:03:66:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:36:A9:D7:20:83:72:28:15:73:7C:EE:0C:08:6B:84:9C:8E:DB
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/6CC1DFC2E2E211EF80CA0777C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:da:31:b7:c2:eb:52:2b:5c:f5:66:02:74:62:70:30:fc:3c:
b8:93:3f:94:ae:d1:37:93:40:74:ec:a6:8b:a5:f7:5f:b3:32:
ad:70:e1:d0:a4:d7:c3:14:4a:56:7e:ac:0e:db:c3:04:d2:e7:
11:0d:8c:da:3e:29:ab:86:df:10:65:cd:e5:5c:1c:64:d9:f0:
61:59:9a:8d:f8:7a:81:99:9e:08:a1:52:83:3c:ff:2a:65:d2:
50:29:42:8d:79:b9:c3:b7:11:c4:e9:b6:ed:6d:dd:de:6f:b7:
27:fb:8b:1f:3f:b3:50:e4:ee:c5:32:8e:2c:8b:7c:66:a0:a2:
7e:56:57:07:c4:bc:27:e1:01:eb:03:47:f9:e3:1f:44:bd:73:
1f:0e:70:7c:13:11:62:1b:c7:61:d3:48:44:e1:89:db:53:8a:
ba:8c:2a:20:44:bb:fd:fa:08:9c:c5:38:51:40:ce:fd:39:17:
20:4b:92:c4:1f:ae:28:57:7a:0e:6b:ee:97:a9:15:8f:79:28:
99:8a:bf:16:05:91:06:9b:24:85:bf:cb:c2:c9:81:63:08:d8:
eb:7f:7e:5c:e3:45:49:6f:5e:3b:ee:fd:47:ab:fd:5c:5d:9f:
3d:b9:c1:07:e7:47:6f:1b:c2:65:df:d6:1e:2c:c7:5c:50:68:
21:80:d0:3c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw
MEQ3ODhCRkIwHhcNMjUwMjA0MTAyNTU5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ExZWIzNi1mMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2H8ZYm9lOBoyAhgJn+HXKUIiRZm0wZqt9CdEetq7fBC9pMsX5Jd0JEAGk4Df
Ir7zFTb3DdYJdADRoqDyAVOiGvHJtfp9oyJyu2Ovftkjs52s991fbcOwXYrGdcoc
7zfLJxsye9DCuwt9HZ9DqtCJLcnc8mqV74JdAvuGQ8NXS9d5wruOLLZAiW7vfFrP
IdyeG60Irw1lFkz1qSVM8wcy95wBGhwDxw+30etScTOLU7UXI2Mq3T+xwmcRdws6
9Gal0KwIvJGwrTOV/92J0VCZ1Uct3VXqsU/7kQl9k1iLXU2XH1tNVV1vL6dZK2OV
wSoBRS17xniHxYPX3EkJA2YolQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC4ONqnX
IINyKBVzfO4MCGuEnI7bMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz
NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvNkNDMURGQzJF
MkUyMTFFRjgwQ0EwNzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr588wDQYJKoZIhvcNAQELBQADggEBAGvaMbfC61IrXPVm
AnRicDD8PLiTP5Su0TeTQHTspoul91+zMq1w4dCk18MUSlZ+rA7bwwTS5xENjNo+
KauG3xBlzeVcHGTZ8GFZmo34eoGZngihUoM8/ypl0lApQo15ucO3EcTptu1t3d5v
tyf7ix8/s1Dk7sUyjiyLfGagon5WVwfEvCfhAesDR/njH0S9cx8OcHwTEWIbx2HT
SEThidtTirqMKiBEu/36CJzFOFFAzv05FyBLksQfrihXeg5r7pepFY95KJmKvxYF
kQabJIW/y8LJgWMI2Ot/flzjRUlvXjvu/Uer/Vxdnz25wQfnR28bwmXf1h4sx1xQ
aCGA0Dw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:45 2025 by rpki-client