Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/4D2A990608D511F08DBB8F1DC4F9AE02.roa
File: 4D2A990608D511F08DBB8F1DC4F9AE02.roa (raw, json)
Hash identifier: PKZIP4ey6Fk8wD5GO8t+zI0In2iQZ51gqXe/OVIrows=
Subject key identifier: F2:29:F9:87:9E:BA:6E:73:6F:EC:03:3B:24:B9:33:64:15:64:F1:EB
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 21
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/4D2A990608D511F08DBB8F1DC4F9AE02.roa
Signing time: Mon 24 Mar 2025 17:27:46 +0000
ROA not before: Mon 24 Mar 2025 17:27:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215750
IP address blocks: 2401:f860::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 25 Mar 2025 15:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Mar 24 17:27:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e19612-0553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:c1:30:60:06:41:20:bf:76:32:b6:f1:0a:
da:3b:fe:68:08:c7:6e:8d:f1:fe:f2:43:68:39:ce:
83:4d:ed:52:ab:43:5f:f8:1f:6f:ab:02:a8:ae:e4:
ea:35:ca:cb:78:e2:0b:9b:91:c4:ec:63:03:36:25:
04:cd:e1:27:98:5c:09:2e:49:75:6f:98:75:50:39:
70:c5:4f:d2:b2:68:01:4c:e8:c8:18:a0:98:2e:d2:
80:2d:f8:ff:0d:0e:8b:d4:f0:ae:0e:bb:39:3b:38:
79:4f:79:f7:ba:b9:d7:94:0f:7a:76:6d:18:6b:96:
c8:08:2e:1b:67:2e:e8:46:59:52:9e:0f:42:49:e4:
46:20:c7:1b:fc:9a:78:64:f4:f4:c1:9b:05:36:85:
09:86:e0:eb:32:77:cf:10:e7:66:32:df:6c:48:69:
a4:00:27:ed:1b:65:dc:c5:5c:c4:b7:c2:07:9b:a0:
e4:cc:f8:5b:3a:cd:65:9e:81:6b:e3:e8:c4:4c:0a:
98:fb:e7:47:5f:97:36:c5:4c:18:83:1e:19:d3:28:
6a:87:77:dc:ed:54:a4:d8:47:66:98:4d:41:9b:a2:
c1:2c:1b:4d:6b:6e:48:ce:c7:a5:d9:a2:ee:37:c7:
da:f0:90:b4:41:45:19:36:56:74:c8:a8:34:b0:76:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:F9:87:9E:BA:6E:73:6F:EC:03:3B:24:B9:33:64:15:64:F1:EB
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/4D2A990608D511F08DBB8F1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:f860::/44
Signature Algorithm: sha256WithRSAEncryption
9b:d4:d8:23:83:e7:ea:96:9b:1f:66:e6:05:ba:29:08:df:ce:
28:e5:d4:55:3e:4c:77:56:3f:3c:9c:87:9b:b0:b6:af:21:94:
a2:1b:4e:5e:25:d9:8f:10:df:05:f6:e6:bf:86:73:bd:d1:3f:
5d:05:6f:7b:15:3c:75:b4:db:43:db:81:ac:f5:0c:3f:27:2f:
1c:f2:c1:72:a6:66:98:1f:0c:d9:0e:15:7d:9f:96:4a:f6:30:
9d:c0:72:3a:64:06:79:28:02:fb:fe:98:77:f8:51:d2:9f:41:
01:30:75:62:9a:19:a6:c9:72:42:c8:2d:fd:71:ae:36:0b:18:
ec:2d:be:76:f9:1a:a6:b2:f1:7e:e5:f8:0d:26:5e:58:00:23:
3f:be:2f:a8:d7:c2:e3:e8:55:5c:35:b8:e9:70:71:5e:73:71:
f8:94:b9:73:f1:a0:e1:5b:fe:b0:f8:b8:99:bc:a4:86:50:2d:
21:cd:74:55:d5:5a:4c:99:54:e3:82:70:4a:b7:ae:d8:b1:2f:
f2:29:f8:08:62:ef:cb:b9:fb:d1:a9:74:47:c9:d5:b8:69:db:
e3:c4:eb:11:fb:2c:63:43:8a:2a:49:e8:a7:df:27:45:6e:40:
97:c7:9a:c0:1d:38:63:ce:58:37:f9:a2:b1:de:82:d0:5a:8b:
68:d2:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:37:57 2025 by rpki-client