Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/14635922E76611EF8C706647C4F9AE02.roa
File: 14635922E76611EF8C706647C4F9AE02.roa (raw, json)
Hash identifier: iQToxWx1B1W0S4P5FNwiCEltValywEXsAdjXFrndxNE=
Subject key identifier: A6:E7:6A:32:DE:F4:50:FE:FD:72:93:2D:66:5F:A2:EA:77:FE:B9:BA
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 34FC
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/14635922E76611EF8C706647C4F9AE02.roa
Signing time: Wed 26 Mar 2025 14:50:56 +0000
ROA not before: Wed 26 Mar 2025 14:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38174
IP address blocks: 120.29.234.0/23 maxlen: 24
120.29.239.0/24 maxlen: 24
123.242.244.0/22 maxlen: 24
123.242.252.0/23 maxlen: 24
123.242.254.0/23 maxlen: 24
202.60.60.0/23 maxlen: 23
202.60.60.0/24 maxlen: 24
202.60.61.0/24 maxlen: 24
202.60.62.0/23 maxlen: 24
202.61.10.0/23 maxlen: 23
202.61.10.0/24 maxlen: 24
202.61.11.0/24 maxlen: 24
203.189.180.0/22 maxlen: 22
203.189.180.0/24 maxlen: 24
203.189.181.0/24 maxlen: 24
203.189.182.0/24 maxlen: 24
203.189.183.0/24 maxlen: 24
203.191.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 09:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13564 (0x34fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770
Validity
Not Before: Mar 26 14:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e4144f-3ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:7b:fc:26:23:c7:fc:f2:6c:28:a1:c1:e0:
0a:1e:b3:70:11:a2:49:e2:d7:5b:95:39:a7:82:fb:
9f:7a:9f:0b:36:aa:3b:44:4c:cc:42:d7:2e:a3:bc:
58:21:df:33:2d:62:f3:ec:9d:1f:67:10:fb:59:ac:
ba:ee:ac:87:53:bb:cb:d4:a7:b1:b5:24:36:bf:61:
d3:36:d2:4b:bd:d0:52:d9:47:b9:5c:14:ff:f5:d7:
28:29:8e:dc:1c:82:b6:24:af:94:88:b0:07:51:f1:
ca:80:e6:ee:77:27:e4:f9:2a:e7:44:61:8e:fd:45:
89:44:5a:81:84:97:34:6e:10:7c:f8:a5:41:6b:2d:
64:d8:0d:d6:0b:6a:c3:00:4a:3d:3e:91:b5:e7:e5:
84:5d:83:c0:b4:ef:8d:0d:9e:2b:41:04:c6:d1:33:
d1:3a:db:1c:aa:c3:f6:2c:3d:b1:7e:05:fa:1a:3c:
c9:99:f0:5f:c1:5f:c7:b5:6f:f1:a8:b9:55:3c:c4:
60:53:d8:5f:8f:78:12:77:ea:b5:50:7b:cb:5d:80:
93:ef:79:2b:06:29:59:58:05:7f:90:06:59:6b:08:
bb:5a:66:38:05:8a:d7:39:7e:14:69:95:7f:a0:f7:
95:55:57:0b:83:cb:5f:3b:31:60:7d:ad:7b:b7:b0:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:6A:32:DE:F4:50:FE:FD:72:93:2D:66:5F:A2:EA:77:FE:B9:BA
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/14635922E76611EF8C706647C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.234.0/23
120.29.239.0/24
123.242.244.0/22
123.242.252.0/22
202.60.60.0/22
202.61.10.0/23
203.189.180.0/22
203.191.34.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:e5:6e:92:d6:68:86:d9:9c:89:9f:45:02:7b:5e:e8:81:de:
a9:a1:9f:c1:6e:96:c2:d3:47:19:1d:0a:5d:a6:a6:b1:4d:21:
f2:94:d9:f8:14:b0:69:8a:99:60:09:f5:4f:3f:42:bc:70:df:
80:e6:f1:cd:46:21:e8:ba:f4:9d:2b:f5:39:02:0a:43:b9:5c:
eb:4a:b8:52:d2:e7:35:a3:0b:63:df:b1:9d:2f:fd:15:a5:8c:
57:c0:4d:8b:df:c8:07:f2:85:a0:bd:e1:dd:44:a8:f8:c5:ea:
c1:08:2e:c1:9a:0b:94:b6:ee:79:01:50:a7:f3:8a:07:8e:ee:
ed:e4:2a:88:af:7c:ff:69:be:d6:6c:02:d6:8f:f7:a5:a3:9f:
d9:5d:46:c9:41:c1:42:2f:8d:35:ce:2d:df:c1:ef:c9:14:5e:
0b:31:48:65:8b:6d:73:d4:5a:e4:1f:c0:54:f9:db:f9:5c:9e:
ee:38:14:df:e3:75:03:2e:05:8c:9f:14:fa:34:f4:ea:0c:0a:
04:6e:46:6d:bf:06:58:47:7f:00:bb:e3:aa:66:d4:cf:d2:61:
7a:5c:30:8c:93:31:26:0c:dd:40:73:99:81:59:8b:65:2d:e0:
a8:c3:3d:bd:e2:3f:b0:73:f9:a0:b8:6c:f3:94:c3:da:6e:c8:
89:e7:1a:ba
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF
MzRDNDI4RkIwHhcNMjUwMzI2MTQ1MDU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U0MTQ0Zi0zY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs697/CYjx/zybCihweAKHrNwEaJJ4tdblTmngvufep8LNqo7REzMQtcuo7xY
Id8zLWLz7J0fZxD7Way67qyHU7vL1KextSQ2v2HTNtJLvdBS2Ue5XBT/9dcoKY7c
HIK2JK+UiLAHUfHKgObudyfk+SrnRGGO/UWJRFqBhJc0bhB8+KVBay1k2A3WC2rD
AEo9PpG15+WEXYPAtO+NDZ4rQQTG0TPROtscqsP2LD2xfgX6GjzJmfBfwV/HtW/x
qLlVPMRgU9hfj3gSd+q1UHvLXYCT73krBilZWAV/kAZZawi7WmY4BYrXOX4UaZV/
oPeVVVcLg8tfOzFgfa17t7BixwIDAQABo4ICvzCCArswHQYDVR0OBBYEFKbnajLe
9FD+/XKTLWZfoup3/rm6MB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE
OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMTQ2MzU5MjJF
NzY2MTFFRjhDNzA2NjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E
OjA4MDYEAgABMDADBAF4HeoDBAB4He8DBAJ78vQDBAJ78vwDBALKPDwDBAHKPQoD
BALLvbQDBAHLvyIwDQYJKoZIhvcNAQELBQADggEBAA3lbpLWaIbZnImfRQJ7XuiB
3qmhn8FulsLTRxkdCl2mprFNIfKU2fgUsGmKmWAJ9U8/Qrxw34Dm8c1GIei69J0r
9TkCCkO5XOtKuFLS5zWjC2PfsZ0v/RWljFfATYvfyAfyhaC94d1EqPjF6sEILsGa
C5S27nkBUKfzigeO7u3kKoivfP9pvtZsAtaP96Wjn9ldRslBwUIvjTXOLd/B78kU
XgsxSGWLbXPUWuQfwFT52/lcnu44FN/jdQMuBYyfFPo09OoMCgRuRm2/BlhHfwC7
46pm1M/SYXpcMIyTMSYM3UBzmYFZi2Ut4KjDPb3iP7Bz+aC4bPOUw9puyInnGro=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:42:49 2025 by rpki-client