Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0424E2A2391811F0BD320332C4F9AE02.roa
File: 0424E2A2391811F0BD320332C4F9AE02.roa (raw, json)
Hash identifier: 3gLUj8duXZr1fAsGq8Q98uLnFAI+cAF7wiBd3NIkWDU=
Subject key identifier: 07:22:73:3A:67:A1:CC:89:0F:7A:F4:16:6D:A5:DA:71:92:C9:0A:95
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 0231
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0424E2A2391811F0BD320332C4F9AE02.roa
Signing time: Sun 25 May 2025 03:26:16 +0000
ROA not before: Sun 25 May 2025 03:26:16 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 138868
IP address blocks: 202.155.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 10:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: May 25 03:26:16 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=68328dd8-5c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:50:ff:9a:bd:64:c3:ed:eb:97:51:d5:11:
ad:f5:75:6d:79:21:49:02:3b:e9:ff:ef:67:99:9f:
c2:6e:1e:71:20:ea:16:c4:ae:0f:ec:03:76:cf:a7:
97:e6:85:46:e3:10:0e:a2:a3:eb:50:df:dc:0c:14:
52:6e:8d:25:39:6c:bd:de:35:70:a4:2d:76:af:b8:
31:6f:14:9d:0e:50:8b:72:f6:fe:92:67:e1:54:0e:
94:5b:d5:33:55:71:15:12:bb:52:a9:52:5f:62:13:
9b:84:ff:76:5f:ac:a5:28:66:85:60:63:20:09:fd:
5d:37:c6:c7:13:64:62:5d:ba:97:7a:c8:53:c0:d1:
96:1f:91:ef:81:29:9d:1d:47:6b:03:3c:ba:3f:75:
80:e9:76:ef:ac:c0:3d:dd:3a:7a:fd:36:88:7b:29:
11:d2:f5:cd:14:c3:63:f9:22:4d:ca:5f:bb:3c:5c:
7f:72:45:58:ea:11:67:47:44:66:fb:23:84:b6:7c:
14:0b:3d:bf:b7:f4:7d:58:87:9f:57:e3:6c:60:2d:
21:c7:49:de:19:07:7d:45:65:52:b4:be:48:3b:51:
74:46:fa:75:b9:1d:73:77:87:8d:96:be:40:06:33:
62:09:52:9b:09:66:e5:c9:7a:3b:74:3c:5c:05:b5:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:73:3A:67:A1:CC:89:0F:7A:F4:16:6D:A5:DA:71:92:C9:0A:95
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0424E2A2391811F0BD320332C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.116.0/22
Signature Algorithm: sha256WithRSAEncryption
59:04:0e:9b:82:e6:29:fe:a9:46:be:43:4a:d4:d9:e1:9c:c2:
12:44:3d:ab:ee:3e:48:52:27:ad:3d:1e:6f:c8:f6:8b:8e:23:
61:98:aa:35:a7:07:04:9c:57:fb:27:c7:44:56:2c:c9:ef:de:
58:f9:14:1f:e8:ca:29:ce:9c:d4:81:14:0e:84:94:c5:ff:91:
1c:4d:b5:4e:a9:41:7a:43:e4:b0:5a:0f:45:f0:81:13:d8:7a:
55:b1:5a:85:73:e4:0f:c8:3f:4e:1c:69:d5:9e:df:c6:7a:1b:
dc:77:38:e3:19:b7:59:5e:eb:d9:96:fe:4b:91:d9:3e:64:d0:
51:19:92:15:67:74:d8:c1:4e:57:8b:5a:ab:a0:fc:6c:43:81:
45:13:9a:c0:1c:70:ce:d5:ff:df:c9:73:8f:b2:6c:e9:8c:65:
54:96:0f:cd:35:a9:28:7b:3c:16:d1:78:67:0e:02:f1:fd:3a:
f3:22:69:5d:c6:c6:2a:9e:52:de:16:49:46:e8:e6:40:da:b0:
2c:cc:a1:d2:b8:fd:cd:e0:fb:b5:0e:6a:95:1f:be:c9:02:d7:
0c:28:98:c3:df:aa:6b:85:6d:ea:56:bb:87:42:bb:42:83:dc:
eb:c8:bb:e9:c6:e2:bc:66:ad:a4:f3:17:dd:e0:b6:11:bf:50:
46:4e:67:21
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjUwNTI1MDMyNjE2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODMyOGRkOC01YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApa9Q/5q9ZMPt65dR1RGt9XVteSFJAjvp/+9nmZ/Cbh5xIOoWxK4P7AN2z6eX
5oVG4xAOoqPrUN/cDBRSbo0lOWy93jVwpC12r7gxbxSdDlCLcvb+kmfhVA6UW9Uz
VXEVErtSqVJfYhObhP92X6ylKGaFYGMgCf1dN8bHE2RiXbqXeshTwNGWH5HvgSmd
HUdrAzy6P3WA6XbvrMA93Tp6/TaIeykR0vXNFMNj+SJNyl+7PFx/ckVY6hFnR0Rm
+yOEtnwUCz2/t/R9WIefV+NsYC0hx0neGQd9RWVStL5IO1F0Rvp1uR1zd4eNlr5A
BjNiCVKbCWblyXo7dDxcBbWDiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAciczpn
ocyJD3r0Fm2l2nGSyQqVMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvMDQyNEUyQTIz
OTE4MTFGMEJEMzIwMzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALKm3QwDQYJKoZIhvcNAQELBQADggEBAFkEDpuC5in+qUa+
Q0rU2eGcwhJEPavuPkhSJ609Hm/I9ouOI2GYqjWnBwScV/snx0RWLMnv3lj5FB/o
yinOnNSBFA6ElMX/kRxNtU6pQXpD5LBaD0XwgRPYelWxWoVz5A/IP04cadWe38Z6
G9x3OOMZt1le69mW/kuR2T5k0FEZkhVndNjBTleLWqug/GxDgUUTmsAccM7V/9/J
c4+ybOmMZVSWD801qSh7PBbReGcOAvH9OvMiaV3GxiqeUt4WSUbo5kDasCzModK4
/c3g+7UOapUfvskC1wwomMPfqmuFbepWu4dCu0KD3OvIu+nG4rxmraTzF93gthG/
UEZOZyE=
-----END CERTIFICATE-----
Generated at Tue Jul 22 05:11:54 2025 by rpki-client