Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06FC9758FF5711EB978F823DC4F9AE02.roa
File: 06FC9758FF5711EB978F823DC4F9AE02.roa (raw, json)
Hash identifier: qSJtUmsqw/9pivCMJQ/LPHwsifqNSULPitLyVt+IHPo=
Subject key identifier: C0:E4:D6:2F:EB:5B:A8:12:00:4A:74:50:56:2D:14:90:A6:4D:AE:31
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B20
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06FC9758FF5711EB978F823DC4F9AE02.roa
Signing time: Thu 30 May 2024 16:05:53 +0000
ROA not before: Thu 30 May 2024 16:05:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136647
IP address blocks: 175.111.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 05:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35616 (0x8b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:05:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a3e1-acae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:f9:18:a0:aa:76:0e:b4:dc:b8:df:da:90:
bc:ac:82:cb:99:52:c0:16:a6:72:08:cd:d4:25:a8:
53:69:be:7f:16:e2:ea:8c:71:38:c3:ca:d0:37:fa:
6c:9b:99:a7:b9:78:c1:e8:2f:f8:6a:f0:90:13:37:
2e:9b:47:5a:0f:d1:2f:0b:2b:6b:0c:60:89:2d:51:
c7:78:90:a5:91:13:34:32:4a:b9:22:65:6a:c2:35:
f8:3d:ca:9f:4c:b0:2e:01:8a:c1:2e:0c:a1:7d:29:
90:d8:9d:ad:a9:fc:25:f0:c1:67:c6:73:88:1c:1a:
69:07:f4:84:eb:2a:3d:c4:64:af:e1:ae:19:7e:6a:
1e:a2:13:f7:bd:c6:ae:57:dd:18:2e:ca:2d:d8:c4:
cb:cf:c4:4a:5f:a1:a8:ca:db:16:34:4e:f1:f2:41:
9b:8b:6a:07:70:4a:63:4b:e7:4e:13:31:8d:d0:20:
28:ab:2a:3e:1a:cf:52:e3:97:04:99:b3:92:04:c1:
09:35:81:44:cc:b1:c6:47:aa:8b:b9:6d:8a:10:64:
da:bd:52:e6:b4:a6:e1:43:71:1c:6b:81:d3:8c:aa:
72:12:17:af:41:25:61:9f:9b:3c:ad:2c:0b:34:08:
be:11:c5:51:b2:31:d5:d1:ed:a2:18:67:4a:99:33:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:D6:2F:EB:5B:A8:12:00:4A:74:50:56:2D:14:90:A6:4D:AE:31
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06FC9758FF5711EB978F823DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:be:8e:c2:0f:bd:b4:62:2b:3a:be:9f:95:5e:9a:a1:a9:8c:
6b:b8:4d:1e:bf:ea:d2:dc:84:18:82:c3:33:89:f3:3e:8f:98:
59:2c:21:be:58:be:03:80:80:28:44:50:69:97:3b:9f:9c:5b:
69:fd:e7:1f:59:a0:34:15:59:9a:ee:98:f1:ab:5a:96:af:b0:
d0:41:b8:84:e0:a7:ac:55:d3:7d:78:41:8f:b2:bc:2d:fb:0c:
89:4b:7a:96:c2:e3:96:ca:41:06:64:79:27:2b:89:bc:bc:38:
59:10:ca:98:e0:0d:e8:51:dd:09:c3:08:75:c7:fb:d2:fe:56:
7a:a0:c5:60:b5:a3:ed:86:94:42:ca:81:1a:47:89:5c:b4:ed:
64:79:af:9a:46:61:5d:0d:76:ce:15:50:62:a5:74:d2:34:8f:
24:32:e9:3c:26:de:6c:17:64:36:fd:5e:98:6e:00:9f:0f:0e:
9c:92:96:d4:bd:03:26:c8:df:1d:db:e9:2e:de:16:93:83:54:
6f:b1:36:ec:40:96:8b:d3:8e:38:70:98:a6:35:fc:a0:f9:f9:
fe:f0:eb:75:8e:b4:df:fb:14:61:e9:f0:1b:58:18:77:81:5d:
2f:d8:91:70:f1:e2:64:68:01:f7:20:b6:f0:98:ba:ec:ff:65:
21:4a:ee:68
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIsgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDU1M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEzZTEtYWNhZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhu+RigqnYOtNy439qQvKyCy5lSwBamcgjN1CWoU2m+fxbi6oxxOMPK0Df6
bJuZp7l4wegv+GrwkBM3LptHWg/RLwsrawxgiS1Rx3iQpZETNDJKuSJlasI1+D3K
n0ywLgGKwS4MoX0pkNidran8JfDBZ8ZziBwaaQf0hOsqPcRkr+GuGX5qHqIT973G
rlfdGC7KLdjEy8/ESl+hqMrbFjRO8fJBm4tqB3BKY0vnThMxjdAgKKsqPhrPUuOX
BJmzkgTBCTWBRMyxxkeqi7ltihBk2r1S5rSm4UNxHGuB04yqchIXr0ElYZ+bPK0s
CzQIvhHFUbIx1dHtohhnSpkz/gUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTA5NYv
61uoEgBKdFBWLRSQpk2uMTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA2RkM5NzU4
RkY1NzExRUI5NzhGODIzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAr2+1MA0GCSqGSIb3DQEBCwUAA4IBAQCjvo7CD720Yis6
vp+VXpqhqYxruE0ev+rS3IQYgsMzifM+j5hZLCG+WL4DgIAoRFBplzufnFtp/ecf
WaA0FVma7pjxq1qWr7DQQbiE4KesVdN9eEGPsrwt+wyJS3qWwuOWykEGZHknK4m8
vDhZEMqY4A3oUd0Jwwh1x/vS/lZ6oMVgtaPthpRCyoEaR4lctO1kea+aRmFdDXbO
FVBipXTSNI8kMuk8Jt5sF2Q2/V6YbgCfDw6ckpbUvQMmyN8d2+ku3haTg1RvsTbs
QJaL0444cJimNfyg+fn+8Ot1jrTf+xRh6fAbWBh3gV0v2JFw8eJkaAH3ILbwmLrs
/2UhSu5o
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:29:58 2025 by rpki-client