Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/572E7B5AE46011EFB9C38649C4F9AE02.roa
File: 572E7B5AE46011EFB9C38649C4F9AE02.roa (raw, json)
Hash identifier: L6N2SDuy+2raVAi/f/+5MckAyj5p/3sN8K8+4O/GTUs=
Subject key identifier: 1B:A5:79:D3:37:7E:14:D0:3F:F6:C1:16:A5:D6:A9:35:69:6A:9F:0F
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 35C4
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/572E7B5AE46011EFB9C38649C4F9AE02.roa
Signing time: Thu 06 Feb 2025 07:59:50 +0000
ROA not before: Thu 06 Feb 2025 07:59:50 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 43260
IP address blocks: 116.90.100.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 11:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13764 (0x35c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E
Validity
Not Before: Feb 6 07:59:50 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67a46bf6-41f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:fa:fb:0e:f3:a9:cb:bf:45:bf:04:c8:fb:
cb:ce:a3:1e:6b:8a:b2:ef:31:33:03:88:6b:22:c5:
22:9e:dd:df:4b:a4:83:64:9f:95:7c:94:0e:59:ac:
e9:36:ad:4b:31:dd:78:6b:74:b6:32:48:7a:52:e3:
b3:d1:60:1f:65:18:ee:7a:20:44:9e:be:48:f5:f7:
0c:53:c3:df:45:cc:43:7d:cc:68:86:5c:6f:46:f8:
14:3d:d9:f6:25:f9:c2:6b:9c:a4:70:bd:32:8c:bf:
b1:59:57:f8:09:5c:c1:37:6a:08:35:43:a0:d9:9b:
5e:fe:17:86:68:f8:63:fb:a4:4a:aa:72:95:de:a9:
a6:ee:e6:a9:7a:ac:d2:ed:fd:d6:be:3f:1a:c7:b4:
e8:99:b6:f9:9d:08:70:c6:37:00:99:e1:d0:d5:25:
b3:aa:fc:5c:d7:0a:ad:2c:53:12:2d:d2:2a:9f:c8:
b8:1c:48:2f:5d:1e:f3:88:15:98:60:79:10:32:62:
c7:a2:df:a5:ad:ab:7c:47:83:7f:e6:da:64:d9:ee:
d7:04:88:d3:b6:7d:a2:4b:b3:4d:e6:ee:32:18:3b:
d1:f2:be:15:61:c9:c9:7e:aa:eb:08:49:aa:88:df:
32:3c:60:d8:1e:f9:2a:66:78:ea:99:82:d8:af:07:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:79:D3:37:7E:14:D0:3F:F6:C1:16:A5:D6:A9:35:69:6A:9F:0F
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/572E7B5AE46011EFB9C38649C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.100.0/24
116.90.115.0/24
Signature Algorithm: sha256WithRSAEncryption
83:14:8e:d5:a6:f7:16:56:9a:02:53:d1:67:a5:4a:60:62:37:
1d:2f:00:fe:65:fc:25:5b:57:6e:b2:a6:02:f4:ae:d0:78:b0:
f3:a0:f2:1b:86:0b:ef:6a:fb:cc:65:d2:95:e6:f6:d7:16:5d:
63:3b:ed:18:a0:4c:18:e3:9f:0e:9d:55:13:c9:ea:35:ff:00:
8e:18:97:23:3f:17:00:05:61:6f:0e:d4:98:3d:a4:e4:19:7b:
99:46:36:7c:41:18:16:12:29:6e:33:88:e5:f2:fe:dd:93:8b:
11:30:b3:f6:9e:c7:5a:db:c2:9e:f3:64:59:e9:c8:b8:74:11:
86:9c:e2:06:56:18:71:f2:61:a6:5f:77:cb:e3:f5:0f:0b:d6:
20:ce:3c:fd:56:6f:e2:7b:9d:6b:f9:2a:33:6f:84:82:e3:4a:
a3:f6:48:2f:cd:ba:95:50:80:e9:3e:39:7b:2d:dd:94:3f:39:
90:8d:0a:53:58:1f:5b:f1:a4:50:0a:95:81:23:1b:b9:d8:c3:
7e:d5:29:0a:36:df:8b:94:53:f0:0b:4c:30:52:58:6c:fa:c5:
fc:bf:57:65:c1:8a:3b:ee:70:13:c4:26:ac:d5:99:d1:d2:a2:
a3:ba:ee:ab:bb:c8:9c:46:76:de:88:fd:49:76:c8:a9:b2:1d:
e1:b9:1c:ae
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjUwMjA2MDc1OTUwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2E0NmJmNi00MWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPn6+w7zqcu/Rb8EyPvLzqMea4qy7zEzA4hrIsUint3fS6SDZJ+VfJQOWazp
Nq1LMd14a3S2Mkh6UuOz0WAfZRjueiBEnr5I9fcMU8PfRcxDfcxohlxvRvgUPdn2
JfnCa5ykcL0yjL+xWVf4CVzBN2oINUOg2Zte/heGaPhj+6RKqnKV3qmm7uapeqzS
7f3Wvj8ax7Tombb5nQhwxjcAmeHQ1SWzqvxc1wqtLFMSLdIqn8i4HEgvXR7ziBWY
YHkQMmLHot+lrat8R4N/5tpk2e7XBIjTtn2iS7NN5u4yGDvR8r4VYcnJfqrrCEmq
iN8yPGDYHvkqZnjqmYLYrwe9uQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBuledM3
fhTQP/bBFqXWqTVpap8PMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNTcyRTdCNUFF
NDYwMTFFRkI5QzM4NjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB0WmQDBAB0WnMwDQYJKoZIhvcNAQELBQADggEBAIMUjtWm
9xZWmgJT0WelSmBiNx0vAP5l/CVbV26ypgL0rtB4sPOg8huGC+9q+8xl0pXm9tcW
XWM77RigTBjjnw6dVRPJ6jX/AI4YlyM/FwAFYW8O1Jg9pOQZe5lGNnxBGBYSKW4z
iOXy/t2TixEws/aex1rbwp7zZFnpyLh0EYac4gZWGHHyYaZfd8vj9Q8L1iDOPP1W
b+J7nWv5KjNvhILjSqP2SC/NupVQgOk+OXst3ZQ/OZCNClNYH1vxpFAKlYEjG7nY
w37VKQo234uUU/ALTDBSWGz6xfy/V2XBijvucBPEJqzVmdHSoqO67qu7yJxGdt6I
/Ul2yKmyHeG5HK4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:38:07 2025 by rpki-client