Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4C8C324A71311EF87672E32C4F9AE02.roa
File: E4C8C324A71311EF87672E32C4F9AE02.roa (raw, json)
Hash identifier: t4YwPdv491DVoFDP74i7IC1/xWM/Yb1V7KskC9NCfpk=
Subject key identifier: 02:3A:A1:D8:77:0A:C4:4A:EC:22:B4:1D:2C:03:98:0F:37:ED:FE:A7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9D77
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4C8C324A71311EF87672E32C4F9AE02.roa
Signing time: Wed 20 Nov 2024 07:48:56 +0000
ROA not before: Wed 20 Nov 2024 07:48:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137591
IP address blocks: 36.255.64.0/24 maxlen: 24
36.255.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 08:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40311 (0x9d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 20 07:48:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673d9467-592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:10:8d:15:2d:bc:98:f7:b7:22:ed:be:2a:
8f:d4:94:8a:73:20:41:91:ab:38:ea:e2:e9:09:d0:
b0:41:b2:cf:05:51:c1:c2:9b:f3:d7:6a:b5:44:44:
66:0f:f6:ed:5a:43:2f:6e:d5:2d:51:d0:ca:9b:53:
69:42:d8:71:57:87:9a:0e:64:cf:51:f7:9e:b8:df:
41:eb:d1:d6:54:81:2f:2d:17:77:01:6d:f3:46:f7:
d1:70:62:16:c5:c0:10:fa:46:93:c2:39:0f:17:d0:
f8:0a:5e:40:f4:5e:8f:ce:dd:3c:ac:92:b3:90:6c:
da:8d:38:9c:f0:7e:1d:2a:e4:37:e6:56:7d:7b:11:
71:48:d0:e4:89:02:c7:ca:d8:aa:a4:eb:38:43:f3:
7f:93:67:eb:4c:1f:2c:64:2a:58:3d:fb:5d:86:c0:
f7:7d:7b:04:b8:49:32:bf:9f:6a:56:c7:d1:83:76:
58:48:83:93:3d:c1:92:53:bd:4b:aa:39:0a:57:36:
15:f7:45:d8:a9:65:13:c7:e9:24:aa:80:e9:7e:63:
7f:e6:2d:1b:dd:0c:f2:04:c3:5b:af:da:f5:ad:e3:
b1:e9:77:f5:06:69:fd:fc:8a:74:cd:c8:35:d1:66:
71:99:61:58:65:32:10:79:fa:ce:c8:b2:2f:e2:50:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3A:A1:D8:77:0A:C4:4A:EC:22:B4:1D:2C:03:98:0F:37:ED:FE:A7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4C8C324A71311EF87672E32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.64.0/23
Signature Algorithm: sha256WithRSAEncryption
27:b2:ec:b6:ee:a2:50:7f:bc:59:6c:a0:8f:6e:7c:61:8f:57:
df:07:05:8a:dc:a7:98:d4:29:ef:90:91:96:4b:7d:f6:cc:1b:
16:a5:ef:cb:74:b7:27:56:34:28:cf:4f:21:02:94:99:63:42:
90:51:5f:4e:ed:23:63:c2:eb:dd:1b:10:3e:57:f8:8d:c0:1d:
58:ba:bd:c9:f5:19:24:ed:27:76:ff:b1:71:62:23:04:e1:71:
8e:bc:55:b3:d4:9f:6e:8d:41:51:ec:53:17:2c:a9:c3:45:86:
ac:d0:c2:3d:59:27:19:6b:57:13:bd:95:71:5f:28:ab:12:3f:
25:00:6d:88:78:28:d5:5d:0c:21:0b:79:7d:d7:4a:33:6e:53:
d5:0a:f8:c1:80:5f:d5:a3:28:01:46:78:69:18:a8:3b:4c:bf:
7d:03:3a:16:b0:fb:3b:30:17:c4:3d:02:36:5b:1c:09:9e:26:
ff:84:70:9b:82:5b:af:00:83:5a:8b:22:ee:9f:5e:d3:eb:12:
7b:dc:05:76:11:ba:db:9b:b1:7c:0e:75:78:2f:88:4a:59:03:
20:93:fe:b3:70:18:b0:af:ee:af:d0:2b:df:27:df:d2:72:bd:
16:d6:da:48:c0:78:57:c2:b6:93:ee:f7:0d:60:24:74:12:b9:
f7:4b:d7:fb
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAJ13MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTEyMDA3NDg1NloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjczZDk0NjctNTkyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5uEI0VLbyY97ci7b4qj9SUinMgQZGrOOri6QnQsEGyzwVRwcKb89dqtURE
Zg/27VpDL27VLVHQyptTaULYcVeHmg5kz1H3nrjfQevR1lSBLy0XdwFt80b30XBi
FsXAEPpGk8I5DxfQ+ApeQPRej87dPKySs5Bs2o04nPB+HSrkN+ZWfXsRcUjQ5IkC
x8rYqqTrOEPzf5Nn60wfLGQqWD37XYbA9317BLhJMr+falbH0YN2WEiDkz3BklO9
S6o5Clc2FfdF2KllE8fpJKqA6X5jf+YtG90M8gTDW6/a9a3jsel39QZp/fyKdM3I
NdFmcZlhWGUyEHn6zsiyL+JQW5ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBQCOqHY
dwrESuwitB0sA5gPN+3+pzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U0QzhDMzI0
QTcxMzExRUY4NzY3MkUzMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBJP9AMA0GCSqGSIb3DQEBCwUAA4IBAQAnsuy27qJQf7xZ
bKCPbnxhj1ffBwWK3KeY1CnvkJGWS332zBsWpe/LdLcnVjQoz08hApSZY0KQUV9O
7SNjwuvdGxA+V/iNwB1Yur3J9Rkk7Sd2/7FxYiME4XGOvFWz1J9ujUFR7FMXLKnD
RYas0MI9WScZa1cTvZVxXyirEj8lAG2IeCjVXQwhC3l910ozblPVCvjBgF/VoygB
RnhpGKg7TL99AzoWsPs7MBfEPQI2WxwJnib/hHCbgluvAINaiyLun17T6xJ73AV2
Ebrbm7F8DnV4L4hKWQMgk/6zcBiwr+6v0CvfJ9/Scr0W1tpIwHhXwraT7vcNYCR0
Ern3S9f7
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:42:25 2025 by rpki-client