Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/3B7D0C8651AD11F0A1FBBF86C4F9AE02.roa
File: 3B7D0C8651AD11F0A1FBBF86C4F9AE02.roa (raw, json)
Hash identifier: zmaRqKI3m5DAA80vQJ7lIB77iK/c+ntWmA2aIQYZTRc=
Subject key identifier: EA:62:39:02:97:56:C1:4B:62:0F:FB:0E:F6:A6:85:E9:E5:21:A0:F6
Certificate issuer: /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
Certificate serial: 02E4
Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/3B7D0C8651AD11F0A1FBBF86C4F9AE02.roa
Signing time: Wed 25 Jun 2025 10:14:52 +0000
ROA not before: Wed 25 Jun 2025 10:14:52 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.73.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 08:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
Validity
Not Before: Jun 25 10:14:52 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=685bcc1c-a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:9d:f0:6c:55:15:de:94:94:dd:ff:ee:a2:
47:9f:87:ff:01:8b:d3:28:9b:3e:a0:4d:9f:7f:62:
58:29:c7:e1:d6:c0:c1:42:60:12:9b:c4:af:b8:7c:
76:74:9d:40:9a:fe:da:17:0d:96:4e:d5:b5:22:d1:
3b:93:17:d4:e4:b3:34:ba:04:3a:56:2e:b4:6c:c9:
9b:3b:23:86:9a:f3:f3:84:86:9d:83:5c:06:12:5a:
7e:cf:f1:16:73:3e:d7:aa:41:af:b0:5d:11:15:1c:
09:18:ac:b6:4d:7f:53:40:e9:7f:24:f3:3a:8e:8d:
68:2e:e0:8b:b4:77:0e:2a:78:e1:c4:1b:ce:13:82:
22:0f:0d:c2:19:81:ae:47:40:24:5b:59:fb:15:1f:
e8:be:42:26:0e:7e:ce:7b:b0:df:32:78:1f:f7:51:
9e:11:f5:e4:48:e6:9e:cb:a6:37:32:ac:c2:86:cf:
e0:bd:c6:da:af:b0:2c:79:d8:cc:42:84:06:c1:8f:
b0:ba:a8:0d:2a:5f:ab:6e:ea:56:d5:ee:0a:78:48:
2d:ed:c9:cf:7f:ed:fc:60:5a:cc:a9:01:15:57:c5:
f6:52:73:26:41:23:dc:30:59:dc:9f:18:9e:a9:e3:
14:c8:e8:52:e7:54:9e:bb:8b:75:04:9e:2a:a3:41:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:39:02:97:56:C1:4B:62:0F:FB:0E:F6:A6:85:E9:E5:21:A0:F6
X509v3 Authority Key Identifier:
keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/3B7D0C8651AD11F0A1FBBF86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.73.4.0/24
Signature Algorithm: sha256WithRSAEncryption
37:84:0d:cc:07:15:a5:8a:14:ba:09:b2:ee:57:b4:f2:6b:01:
29:db:6f:3a:d3:5a:ba:2f:6e:8d:ad:3b:77:0d:3c:d9:87:34:
6f:6b:db:d5:a7:aa:28:78:25:6f:af:55:b2:fb:97:a3:cc:f0:
b0:a7:c1:eb:49:1f:2d:bd:79:3a:62:c9:af:9e:83:13:ff:fb:
bc:2d:9a:cd:dc:82:71:d5:c6:9a:5f:9e:1f:8f:b3:2c:84:5c:
dd:0f:dd:6a:eb:b3:1a:4c:a7:a9:76:0e:49:d8:22:74:df:a8:
a1:a4:6a:3a:b4:7f:c9:7e:d4:43:f6:59:82:08:df:d2:77:52:
05:33:72:76:6c:3c:5d:ef:d3:77:40:56:85:c0:9f:82:58:e7:
82:9b:a4:0c:88:a1:0f:45:0e:48:fd:79:a4:4e:80:cd:4e:09:
31:b0:9f:be:26:27:08:f2:1a:ab:ca:e9:c2:05:bf:35:50:17:
15:8a:88:2e:a6:fc:4e:a3:57:44:32:38:84:71:90:45:bb:c7:
92:5b:03:91:9b:87:34:28:00:5d:93:db:2d:f8:6c:2f:1b:4a:
21:8e:c1:b6:68:a9:4d:dc:0b:ec:2f:37:3f:eb:f9:4d:0f:d5:
32:c7:1a:21:38:ab:be:1c:e9:c3:aa:28:54:01:42:3e:67:16:
a5:90:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:27:53 2025 by rpki-client