Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1C4A530AF56411EFB29F7142C4F9AE02.roa
File: 1C4A530AF56411EFB29F7142C4F9AE02.roa (raw, json)
Hash identifier: hW1LidX8STt/XD3PrxUFbQvwa1z+qY8zAhgY2mYmgOA=
Subject key identifier: 6F:3C:F2:1A:3E:06:34:59:06:8F:11:75:9E:1D:8C:FF:C0:B3:A2:FE
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0393
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1C4A530AF56411EFB29F7142C4F9AE02.roa
Signing time: Wed 25 Jun 2025 08:51:18 +0000
ROA not before: Wed 25 Jun 2025 08:51:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 153371
IP address blocks: 202.155.129.0/24 maxlen: 24
202.155.130.0/24 maxlen: 24
202.155.140.0/24 maxlen: 24
218.33.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 10:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Jun 25 08:51:18 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=685bb885-4767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:30:31:8a:7e:a0:73:57:02:bc:af:2d:57:
7d:ff:3e:37:6b:e1:74:5a:aa:44:c3:b4:20:29:3d:
2d:2f:d5:19:02:6e:fc:37:a7:66:eb:a0:ba:2e:67:
9f:8d:59:29:8b:b4:66:b3:ee:d9:3e:d3:39:76:d3:
5d:5d:ef:95:42:af:12:23:af:24:88:67:b1:0b:d6:
59:32:c5:6e:28:0c:00:72:5d:f6:9a:fa:12:78:e5:
c0:dc:90:da:87:58:be:1b:bf:ad:f5:94:c5:39:9f:
2c:6d:7d:92:31:e6:e7:79:52:ea:f0:0d:ae:6a:24:
8c:26:a8:03:ff:30:41:3f:d3:f1:0e:d3:03:64:23:
e4:67:fe:eb:77:03:4d:ca:49:1e:b5:00:41:33:b9:
e7:e6:c1:c1:e1:9c:55:07:ff:79:6b:c4:c5:16:6b:
98:77:a3:f6:57:a8:b4:9d:71:5d:5e:05:25:3c:fc:
e3:3f:e9:2d:71:00:bb:e0:c5:ed:38:d3:23:df:cb:
ef:1b:b2:12:d5:b0:c7:61:21:63:a6:64:88:89:1c:
9b:c0:b3:49:6b:ee:63:b9:55:bb:55:cb:fd:5b:1c:
f4:42:e1:26:47:f5:82:92:0d:e2:56:24:44:ce:2d:
14:51:a9:9d:7d:14:56:62:20:f4:19:97:52:ca:72:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3C:F2:1A:3E:06:34:59:06:8F:11:75:9E:1D:8C:FF:C0:B3:A2:FE
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1C4A530AF56411EFB29F7142C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.129.0-202.155.130.255
202.155.140.0/24
218.33.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ee:93:43:7c:64:c3:c0:25:68:f8:e4:d7:02:de:67:a9:3e:
dd:d9:9f:86:23:6c:ec:a8:dd:7b:99:f3:11:a5:dc:74:9c:33:
9f:8a:cd:cb:43:d2:cf:c2:21:22:79:24:b7:c5:c0:ea:ba:29:
75:b7:bf:29:99:01:4e:ab:fa:59:9e:63:6f:fc:bb:8d:63:2e:
63:83:63:3a:59:78:5c:6b:80:f0:42:a9:21:85:a6:1c:b6:a8:
eb:17:49:42:15:8d:1d:de:35:5f:f9:15:f1:fc:77:e8:d8:cd:
ed:b8:16:d9:81:d4:a8:05:92:b9:9e:39:64:c7:ff:b4:13:d0:
92:20:7b:a7:f8:9b:db:fa:f5:16:99:81:69:a1:cf:cd:83:2f:
61:1a:c5:a0:37:33:19:f9:28:de:a6:e3:78:6f:8b:7d:4b:2a:
7a:bb:b4:9d:06:dd:09:33:61:29:cd:76:6c:b1:05:6f:31:6b:
67:19:ac:0d:b9:ec:bc:21:06:56:77:f4:a8:12:8a:3d:b8:9c:
e9:11:fd:bc:c8:c5:71:4f:21:29:4f:5a:92:7a:99:2b:e3:15:
10:fd:3e:ec:cc:2e:27:7e:0e:61:4d:3b:9e:54:5b:dd:7a:30:
d4:4e:6d:c7:6e:b4:6b:b4:bc:50:2a:b2:51:84:7e:cf:8c:d0:
6a:d6:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:48:53 2025 by rpki-client