Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/646703648A2411EF98CFF955C4F9AE02.roa
File: 646703648A2411EF98CFF955C4F9AE02.roa (raw, json)
Hash identifier: wTjZVM548Wrh9y0svyoOrwDzYCRd/yXq2seB9OWoYhQ=
Subject key identifier: 77:2D:84:1B:24:7C:1F:83:25:50:B1:6C:FA:44:B5:A7:DE:EC:6C:15
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1CB7
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/646703648A2411EF98CFF955C4F9AE02.roa
Signing time: Wed 13 Nov 2024 12:10:13 +0000
ROA not before: Wed 13 Nov 2024 12:10:13 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55154
IP address blocks: 111.119.165.0/24 maxlen: 24
115.42.68.0/24 maxlen: 24
115.42.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 23:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7351 (0x1cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A
Validity
Not Before: Nov 13 12:10:13 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67349724-0e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:15:60:55:1b:92:53:2a:0e:1a:75:83:34:
9b:f1:d9:33:2d:3b:ea:71:0f:7b:db:4f:cc:7b:09:
1c:fc:c3:8c:93:62:04:25:d1:41:93:c8:bf:b7:69:
99:e6:ef:db:83:5d:69:74:8c:4f:63:36:b3:7a:3a:
31:59:87:e5:14:c0:85:d7:24:c3:d2:7b:89:8d:02:
4f:a8:89:bc:35:d0:c1:a7:a6:ad:56:13:e6:de:fc:
2b:7a:86:94:6c:f3:6b:73:60:38:4d:fd:db:17:24:
84:72:e6:44:c4:ce:ac:4f:66:d0:50:31:70:80:ea:
33:7c:f9:bb:df:bc:67:68:73:62:9b:4e:58:16:93:
ba:d6:b8:23:53:52:5d:5d:e3:36:42:78:d8:de:5d:
55:62:a0:e7:5a:ce:eb:17:de:dd:76:78:67:7e:49:
df:a5:7d:23:a2:8d:68:f7:fa:34:2f:d4:87:ec:2e:
b9:26:01:14:62:75:b3:50:7e:c2:53:8c:8a:39:f2:
bb:e5:59:56:91:dd:e2:f3:26:f3:12:2f:cb:c7:40:
74:54:74:88:76:81:ca:a5:29:a2:62:4f:fb:51:ae:
36:f3:18:63:47:7d:16:a9:31:51:b8:c6:68:ce:f5:
24:34:18:82:1c:02:79:18:6e:0e:9e:6e:7e:32:67:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:84:1B:24:7C:1F:83:25:50:B1:6C:FA:44:B5:A7:DE:EC:6C:15
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/646703648A2411EF98CFF955C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.119.165.0/24
115.42.68.0/23
Signature Algorithm: sha256WithRSAEncryption
58:d7:53:d3:b9:54:2a:bf:e9:95:b0:39:94:99:09:fa:c2:c3:
fc:93:eb:de:ad:59:1e:a1:b2:b3:b7:56:fe:5b:bb:99:8f:d5:
ee:3f:a3:03:72:57:95:13:bc:f4:95:03:46:01:55:8f:3f:39:
c8:62:18:11:0b:6d:0d:9a:6f:bb:c0:d6:9b:8c:07:b0:43:3c:
12:e7:1e:96:1d:02:94:82:a6:8c:79:75:d1:32:5b:13:03:c3:
86:3c:9d:91:ed:3d:9b:7d:37:fa:25:ad:56:ae:c4:eb:61:37:
54:df:fd:45:d4:f1:9f:9d:13:16:19:da:44:d1:26:fd:67:ec:
66:36:5a:a7:c1:96:04:68:93:e2:55:3f:f5:c1:61:e8:cb:cb:
49:33:ca:ba:35:b3:c3:e6:26:ce:c8:02:23:32:93:10:ce:3c:
5b:a4:2a:59:c4:c7:05:e8:dc:dd:db:90:ae:d9:08:ca:17:5b:
0a:d0:5c:b0:d1:64:da:e1:6d:b3:af:8d:89:9f:08:ca:9f:bc:
b5:a1:34:35:50:2f:7f:25:07:df:39:92:59:0c:f1:a5:53:fe:
98:1b:12:08:73:70:b2:ee:46:11:96:f0:0c:eb:73:f1:cb:ac:
c1:68:78:7f:11:fc:2e:1e:9b:66:71:5a:ed:3f:0c:d9:8c:92:
87:d0:a8:92
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICHLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB
ODEzOTYwM0EwHhcNMjQxMTEzMTIxMDEzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM0OTcyNC0wZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdsVYFUbklMqDhp1gzSb8dkzLTvqcQ9720/Mewkc/MOMk2IEJdFBk8i/t2mZ
5u/bg11pdIxPYzazejoxWYflFMCF1yTD0nuJjQJPqIm8NdDBp6atVhPm3vwreoaU
bPNrc2A4Tf3bFySEcuZExM6sT2bQUDFwgOozfPm737xnaHNim05YFpO61rgjU1Jd
XeM2QnjY3l1VYqDnWs7rF97ddnhnfknfpX0joo1o9/o0L9SH7C65JgEUYnWzUH7C
U4yKOfK75VlWkd3i8ybzEi/Lx0B0VHSIdoHKpSmiYk/7Ua428xhjR30WqTFRuMZo
zvUkNBiCHAJ5GG4Onm5+MmcRJQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHcthBsk
fB+DJVCxbPpEtafe7GwVMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx
RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvNjQ2NzAzNjQ4
QTI0MTFFRjk4Q0ZGOTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABvd6UDBAFzKkQwDQYJKoZIhvcNAQELBQADggEBAFjXU9O5
VCq/6ZWwOZSZCfrCw/yT696tWR6hsrO3Vv5bu5mP1e4/owNyV5UTvPSVA0YBVY8/
OchiGBELbQ2ab7vA1puMB7BDPBLnHpYdApSCpox5ddEyWxMDw4Y8nZHtPZt9N/ol
rVauxOthN1Tf/UXU8Z+dExYZ2kTRJv1n7GY2WqfBlgRok+JVP/XBYejLy0kzyro1
s8PmJs7IAiMykxDOPFukKlnExwXo3N3bkK7ZCMoXWwrQXLDRZNrhbbOvjYmfCMqf
vLWhNDVQL38lB985klkM8aVT/pgbEghzcLLuRhGW8Azrc/HLrMFoeH8R/C4em2Zx
Wu0/DNmMkofQqJI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:57:10 2025 by rpki-client