Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/7442C764052111F09BD46D80C4F9AE02.roa
File: 7442C764052111F09BD46D80C4F9AE02.roa (raw, json)
Hash identifier: qLwnoJN5XxCKmdC4vICKMNPWkZQMG1msC8xYCCtQ3YA=
Subject key identifier: 33:C9:9A:2A:F2:97:E3:99:B3:B5:0A:AA:87:AB:31:02:58:A7:FA:3F
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 06
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/7442C764052111F09BD46D80C4F9AE02.roa
Signing time: Thu 20 Mar 2025 00:22:49 +0000
ROA not before: Thu 20 Mar 2025 00:22:49 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 4764
IP address blocks: 203.23.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 03:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84
Validity
Not Before: Mar 20 00:22:49 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67db5fd9-16c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:4b:30:7f:8f:51:f4:4c:5b:ed:de:f2:a7:
8a:8c:d9:83:44:a1:f3:58:61:52:47:2e:71:7f:2e:
21:d1:e5:3f:03:80:43:8c:32:2b:b1:94:11:cc:8b:
0f:75:f0:8c:59:38:29:24:b4:65:ed:ee:1f:f5:ab:
e0:9d:01:42:06:13:64:5a:45:f8:0f:ac:a0:aa:00:
3f:58:14:ce:c5:b7:7e:35:16:fd:99:0d:a8:c3:1e:
4a:80:88:a6:d9:65:93:88:0c:89:e6:78:fa:fc:84:
35:d8:cb:17:43:6a:91:e9:5d:25:2e:8f:be:f3:27:
3d:56:52:a8:cc:61:59:ec:fe:d4:5a:16:9c:eb:78:
59:f1:86:f3:2e:2d:9e:50:88:a7:f2:7b:a2:d8:a6:
1b:d3:01:6b:d6:7a:e4:38:38:15:29:75:d5:02:90:
a4:cc:47:60:94:80:cd:9b:d2:96:1e:2c:f9:8d:31:
4c:33:bd:08:77:cd:8e:c8:c8:18:37:6a:42:37:eb:
b0:f4:c2:dc:bc:c4:7c:c5:46:de:5d:04:1f:dd:ee:
1c:c6:70:92:82:8d:3d:86:98:98:32:ee:80:aa:85:
69:b4:0e:86:ca:73:83:8b:f5:50:f5:fa:06:6e:47:
41:d0:6a:16:a2:1c:46:5f:e8:e1:98:a8:91:d4:05:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:9A:2A:F2:97:E3:99:B3:B5:0A:AA:87:AB:31:02:58:A7:FA:3F
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/7442C764052111F09BD46D80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.23.57.0/24
Signature Algorithm: sha256WithRSAEncryption
49:43:df:3f:33:f3:63:04:a7:81:77:e3:8c:be:db:27:56:d0:
b1:f1:c5:79:03:46:cd:dc:1a:ca:1e:cb:01:31:f1:23:06:54:
97:15:db:c9:39:ac:64:f9:7d:46:95:d7:4f:37:f0:9a:03:32:
c1:b6:5e:81:0f:d0:b6:83:8b:bf:45:c5:b3:fc:71:e3:45:6b:
c7:67:f2:72:9c:ed:d4:ac:e9:fc:ea:a6:7b:2c:8b:47:f9:a1:
d3:23:da:9b:1b:8f:f8:5c:1a:ae:98:39:05:65:b1:5d:f8:bb:
b1:59:a9:b0:d7:b4:5b:3e:aa:8a:ef:3b:45:39:41:f0:3c:b4:
3e:0a:0e:b8:5b:a4:49:68:74:42:96:81:87:6b:5a:53:b6:99:
0a:ba:65:21:2a:94:10:f0:6d:96:2c:02:8f:5b:24:e4:8b:25:
f6:5e:a3:01:58:ec:0c:89:a9:b5:5c:c3:61:90:be:df:d1:09:
7b:ac:74:4f:e1:3d:ca:24:7d:c5:34:b5:6a:e4:54:18:c5:29:
d0:07:ae:f2:08:00:cb:6f:fc:c5:f9:7e:e9:49:95:90:68:9c:
2a:3d:d6:98:de:a0:65:3b:fe:42:58:f1:d1:7f:a9:93:87:95:
63:ab:02:e2:cb:7a:6b:80:ba:10:48:a7:f3:c4:dc:a7:8e:40:
a2:26:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:12:02 2025 by rpki-client