Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/0978AE0E51A611F0A7D71536C4F9AE02.roa
File: 0978AE0E51A611F0A7D71536C4F9AE02.roa (raw, json)
Hash identifier: 6pzPchu7TnoQidgI/r1zUd5q4H7AkIRdvp4XNfHg8Ks=
Subject key identifier: F5:28:51:C8:2C:3E:19:02:8A:A6:56:28:5E:1B:2D:F4:F7:50:89:38
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 3624
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/0978AE0E51A611F0A7D71536C4F9AE02.roa
Signing time: Wed 25 Jun 2025 09:23:21 +0000
ROA not before: Wed 25 Jun 2025 09:23:21 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 18161
IP address blocks: 115.249.200.0/22 maxlen: 22
220.227.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 05:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13860 (0x3624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Jun 25 09:23:21 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=685bc009-906d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:e5:d4:a8:93:48:71:42:a3:5f:50:7d:e6:
14:c0:bf:c1:2b:29:3a:fc:b2:66:b8:94:db:d4:07:
ed:a8:91:a5:5f:05:f4:ec:a5:26:52:1e:2e:36:8d:
65:7e:dc:e2:a3:15:a8:54:84:ae:44:09:44:7b:04:
02:f2:90:d9:4b:4d:07:8c:12:56:4b:d9:22:5d:32:
f7:78:de:73:82:aa:33:cc:35:9b:4f:e6:e9:a0:d0:
be:74:80:5d:c1:a2:92:ae:b0:0d:c9:65:dc:31:f5:
9b:8c:15:fc:b4:9d:b5:cb:1e:20:4b:65:be:70:1f:
c8:de:6a:f0:ed:a4:c9:c0:c2:10:ba:c2:62:a9:b0:
d1:31:c3:b6:46:e7:26:c1:ec:4e:6c:88:bf:03:f1:
02:c3:71:90:97:96:0d:e9:d6:03:d1:be:c4:b0:fb:
41:d0:1c:98:db:b4:0a:dd:c8:07:1a:21:cd:c4:f4:
d8:30:92:2a:3d:26:8c:61:a5:e1:6c:70:e3:c6:42:
d1:b6:55:63:98:88:e3:1a:d1:a8:0b:ad:69:00:6d:
f4:2f:cf:cd:48:1f:f7:e2:1e:42:23:10:61:80:34:
5d:74:c8:2c:17:dc:f7:9b:92:a3:f9:0a:da:31:9a:
4c:64:16:1b:94:7f:00:15:9c:e5:d7:96:1d:94:9a:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:51:C8:2C:3E:19:02:8A:A6:56:28:5E:1B:2D:F4:F7:50:89:38
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/0978AE0E51A611F0A7D71536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.249.200.0/22
220.227.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:62:5f:6b:06:99:89:72:5f:c2:bf:94:a9:7c:5b:8a:54:77:
a5:7d:c2:2a:3d:48:67:07:60:e9:7a:67:5a:45:93:a2:9e:29:
6d:b0:b1:f9:b0:c2:a6:9d:a6:88:dd:2b:26:2d:ac:f3:7d:81:
ac:42:93:ee:d8:19:ef:7d:6c:74:92:9e:c3:b0:84:e4:37:cb:
2b:5c:a7:fc:1d:f9:89:a6:0b:c2:84:14:51:b1:a7:4a:d2:d5:
44:0d:c8:2b:a2:10:e2:80:cf:7b:46:e5:b5:7e:7a:e5:94:75:
f4:7b:f8:db:a9:0b:14:ae:f2:f9:52:a7:cd:3a:36:3f:dc:51:
8d:8b:f0:e4:b1:81:e0:9c:aa:97:bd:bb:6f:1f:21:87:36:78:
4e:bc:11:a6:73:81:4f:49:67:64:de:a7:3c:04:48:70:54:27:
95:55:22:21:2c:ef:41:bb:15:7b:ca:f3:1a:8a:ad:7d:bf:45:
85:44:58:24:a2:24:89:11:06:44:10:10:b1:fe:ed:2d:4d:ca:
22:37:24:d9:bb:cf:70:9a:e7:dc:12:39:dc:2d:9f:34:95:33:
7e:68:18:b6:e5:dd:60:aa:04:18:ed:67:98:65:c4:d6:3d:03:
54:26:88:f8:bb:7a:15:c3:03:3e:15:c5:ec:61:fd:f6:53:72:
92:aa:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:35:07 2025 by rpki-client