Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CAE49650C0EE11EFBBA3AC31C4F9AE02.roa
File: CAE49650C0EE11EFBBA3AC31C4F9AE02.roa (raw, json)
Hash identifier: GO0zwa/p3Bz7wspJRIY6UdbW/+bHkYlhS4/vRsj4Jvg=
Subject key identifier: 03:50:CA:6E:CE:0B:51:3D:EF:D7:A3:D1:6A:BC:24:89:CE:A7:01:3F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C46
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CAE49650C0EE11EFBBA3AC31C4F9AE02.roa
Signing time: Mon 23 Dec 2024 05:28:51 +0000
ROA not before: Mon 23 Dec 2024 05:28:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139549
IP address blocks: 157.10.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 10:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7238 (0x1c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 23 05:28:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6768f513-eec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:b9:bb:4b:2c:91:37:4c:fc:2b:22:28:4b:
1f:24:aa:34:f5:fb:5a:36:93:d0:a0:06:39:ae:9f:
60:10:80:c4:0e:5c:69:9c:57:a2:e8:76:a1:b6:16:
64:3f:89:6e:12:68:53:00:d6:f7:c5:d8:52:49:ac:
43:4d:01:fd:02:00:9f:a1:46:8f:66:0b:9c:1e:ba:
df:a7:ea:8b:c4:97:b9:12:7b:a5:35:85:15:98:5b:
1b:89:32:4d:78:82:0b:ea:18:81:27:90:68:81:00:
c9:63:3f:50:2f:5c:fd:ff:7c:65:87:bd:51:b4:07:
90:45:a4:72:79:ce:bc:1c:dc:ae:f1:12:67:a2:64:
da:92:fc:0f:c1:e9:7c:0a:ac:4e:b4:73:09:ae:3e:
09:dd:fb:61:c7:11:ed:c7:86:d6:69:d3:13:81:6c:
4c:0f:58:21:14:83:30:b4:2f:17:ae:01:f2:18:e1:
13:ea:17:ff:9c:e5:dd:2a:aa:43:64:26:d3:40:48:
5d:42:44:28:61:92:b0:b0:43:dc:1e:59:cf:c5:fc:
8a:04:8c:56:5b:6c:91:37:57:ab:b6:8c:78:fc:65:
58:3c:07:ce:85:26:92:29:5e:46:39:23:f9:0d:1c:
89:e7:de:e6:93:4a:ec:6d:d2:e4:11:a5:1b:dc:31:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:50:CA:6E:CE:0B:51:3D:EF:D7:A3:D1:6A:BC:24:89:CE:A7:01:3F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CAE49650C0EE11EFBBA3AC31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.93.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b5:22:20:93:a3:eb:f3:e8:3f:c1:fb:d0:e7:82:30:74:b6:
99:11:fc:4d:cb:b7:0f:07:3a:3e:b1:68:20:e4:60:d2:0c:65:
87:72:8b:3c:a4:2d:c9:9b:cf:af:fe:54:3c:cd:c2:e2:b8:ab:
74:8a:b3:b8:64:3f:dd:e6:f4:a4:e0:d4:67:80:5a:4b:f1:8b:
9d:9c:ce:7e:59:70:1c:ea:72:ee:7b:db:97:f7:d4:67:22:48:
f4:8b:43:2b:dc:6b:90:9f:e5:6c:f7:71:0d:3e:19:d2:e4:8b:
a5:32:f8:c8:41:b1:45:e0:45:5a:a2:0d:93:71:2b:07:12:e7:
76:0d:bf:6d:8f:5f:bc:74:54:fe:c4:54:18:89:01:e0:bd:fb:
a9:c8:f5:8b:53:4c:3b:fb:ed:16:f3:7c:5f:ec:93:2b:b7:e7:
cd:5a:ab:6c:9c:84:5e:15:a7:5a:d4:e6:4b:47:4a:e8:d9:66:
dd:c7:a4:f9:ba:bc:1f:f9:e7:cd:46:be:9c:7b:2e:f5:31:3c:
d4:9e:99:62:06:14:84:9a:2e:a7:bc:5a:4c:32:b3:32:83:1c:
ef:65:c1:1f:dc:85:46:0e:16:f6:87:59:3c:9f:75:4d:d3:50:
5b:22:90:b1:eb:71:a6:e4:76:ef:49:7a:2b:be:d8:9b:17:bf:
5d:34:aa:ef
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQxMjIzMDUyODUxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY4ZjUxMy1lZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst25u0sskTdM/CsiKEsfJKo09ftaNpPQoAY5rp9gEIDEDlxpnFei6HahthZk
P4luEmhTANb3xdhSSaxDTQH9AgCfoUaPZgucHrrfp+qLxJe5EnulNYUVmFsbiTJN
eIIL6hiBJ5BogQDJYz9QL1z9/3xlh71RtAeQRaRyec68HNyu8RJnomTakvwPwel8
CqxOtHMJrj4J3fthxxHtx4bWadMTgWxMD1ghFIMwtC8XrgHyGOET6hf/nOXdKqpD
ZCbTQEhdQkQoYZKwsEPcHlnPxfyKBIxWW2yRN1ertox4/GVYPAfOhSaSKV5GOSP5
DRyJ597mk0rsbdLkEaUb3DFwjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFANQym7O
C1E979ej0Wq8JInOpwE/MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0FFNDk2NTBD
MEVFMTFFRkJCQTNBQzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACdCl0wDQYJKoZIhvcNAQELBQADggEBAL21IiCTo+vz6D/B
+9DngjB0tpkR/E3Ltw8HOj6xaCDkYNIMZYdyizykLcmbz6/+VDzNwuK4q3SKs7hk
P93m9KTg1GeAWkvxi52czn5ZcBzqcu5725f31GciSPSLQyvca5Cf5Wz3cQ0+GdLk
i6Uy+MhBsUXgRVqiDZNxKwcS53YNv22PX7x0VP7EVBiJAeC9+6nI9YtTTDv77Rbz
fF/skyu3581aq2ychF4Vp1rU5ktHSujZZt3HpPm6vB/5581Gvpx7LvUxPNSemWIG
FISaLqe8WkwyszKDHO9lwR/chUYOFvaHWTyfdU3TUFsikLHrcabkdu9Jeiu+2JsX
v100qu8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:20:58 2025 by rpki-client