Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/E10D7D267F5811EEBC62AB76C4F9AE02.roa
File: E10D7D267F5811EEBC62AB76C4F9AE02.roa (raw, json)
Hash identifier: S55Pe65xALCTt89iHWX08iMTExs029PQu78/mAOHLhs=
Subject key identifier: B0:3E:3E:2D:EE:63:40:16:52:2B:79:B4:77:C4:A6:80:33:1A:09:EC
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 0113
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/E10D7D267F5811EEBC62AB76C4F9AE02.roa
Signing time: Thu 02 Jan 2025 01:11:57 +0000
ROA not before: Thu 02 Jan 2025 01:11:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 151633
IP address blocks: 45.249.226.0/24 maxlen: 28
2401:e560::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 06:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C
Validity
Not Before: Jan 2 01:11:57 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6775e7dd-3f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:9e:1b:9d:91:b4:9a:dd:e9:e1:fb:25:03:
7e:a2:46:e3:d6:9b:b3:15:94:76:00:ce:84:f4:ed:
40:bb:d0:83:5b:10:77:fc:ca:a0:a5:be:07:85:fc:
f6:36:d9:6a:f7:f0:ed:c3:fa:1d:12:3e:3f:c0:5a:
06:54:df:88:8d:1e:35:17:8a:eb:9b:bf:c6:4c:f0:
30:da:09:32:8c:83:51:08:6e:ca:06:16:ac:d6:03:
c1:d1:5f:90:6e:0e:74:1a:3a:21:c3:d9:f9:09:67:
7c:d7:ea:be:c4:cf:39:82:34:45:1a:eb:86:e7:8f:
47:be:28:bc:9a:e8:e2:10:87:59:67:e2:4e:1e:f5:
a8:5f:83:f6:93:37:6f:ae:d2:24:b4:b2:b9:eb:a4:
1f:5c:f9:a7:d2:5b:ce:a8:01:ee:07:31:69:7d:60:
48:22:b7:c7:ff:19:60:35:62:1d:d0:07:42:7b:48:
a2:30:b9:ba:1e:88:cc:32:e2:29:a1:68:8c:85:83:
f5:eb:fd:be:33:01:57:3c:95:1f:0a:a2:ad:f5:24:
15:20:e4:f8:a7:1c:43:03:2f:c5:91:d9:25:f8:7e:
44:de:37:23:70:f4:11:fe:b1:86:1f:97:5d:98:ee:
6f:5a:05:a2:3e:a1:57:57:a9:f6:ac:a6:85:3d:aa:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3E:3E:2D:EE:63:40:16:52:2B:79:B4:77:C4:A6:80:33:1A:09:EC
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/E10D7D267F5811EEBC62AB76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.226.0/24
IPv6:
2401:e560::/32
Signature Algorithm: sha256WithRSAEncryption
7c:60:ad:e1:b9:21:48:6f:59:c1:fd:bf:81:68:0f:79:9d:ec:
80:78:23:0c:f0:d3:da:f6:dd:42:b3:07:65:7e:71:61:9a:ec:
66:7e:2d:1c:6e:db:55:d0:7f:b5:20:c4:21:71:e9:4d:3c:1e:
b3:be:4c:e0:8c:fa:7f:2a:77:21:c3:17:02:6f:f3:23:79:01:
7a:12:7a:fc:78:53:82:c4:6a:d9:93:a0:18:47:c2:a7:8d:2b:
23:ed:d3:09:a2:d9:94:62:06:a5:cb:6b:c5:55:b6:6f:0b:22:
a8:da:96:03:12:d8:e4:42:c2:47:d5:b9:fd:bf:9b:f1:72:03:
a7:84:82:2f:65:d9:c8:38:24:b0:c4:41:90:b9:24:49:88:d5:
72:02:8f:be:2a:58:68:f1:42:f7:ef:3e:6d:13:0e:2b:78:70:
30:7f:23:b4:04:5b:ee:26:19:5e:51:b7:2e:fd:e9:b2:23:d4:
5e:06:a5:57:f6:a8:7d:0c:72:43:ca:bc:c8:58:06:61:31:4f:
a6:85:d7:f8:dc:ef:f2:c1:91:7d:82:40:e1:41:7a:d2:06:e1:
e0:28:ba:55:fd:61:91:f5:37:43:3e:f2:9e:b9:92:1a:8d:64:
e3:92:e4:c7:b9:41:0d:b8:cb:a4:b7:ea:91:c9:5e:83:b9:f1:
bb:af:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:15 2025 by rpki-client