Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/78E0D98ED9A011EF884E920FC4F9AE02.roa
File: 78E0D98ED9A011EF884E920FC4F9AE02.roa (raw, json)
Hash identifier: l61Gu0iCht7zm33iPp37tZezKtH2DQumG9wwtQ760Hg=
Subject key identifier: F2:2B:06:EA:DE:78:35:4D:C1:62:6D:3D:C4:61:BC:C8:9A:81:2A:5C
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 35B8
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/78E0D98ED9A011EF884E920FC4F9AE02.roa
Signing time: Thu 23 Jan 2025 15:41:12 +0000
ROA not before: Thu 23 Jan 2025 15:41:12 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 329007
IP address blocks: 116.90.100.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 08:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13752 (0x35b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E
Validity
Not Before: Jan 23 15:41:12 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67926318-2b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:64:03:57:62:92:fc:d0:68:64:5f:3a:df:
a4:de:7b:c3:5a:12:a3:b7:f0:d7:cd:49:cf:75:d9:
f2:42:3a:35:cb:5e:d5:60:db:14:87:82:38:62:9f:
55:5c:9a:ab:9f:20:2c:80:6c:91:f7:10:50:31:ab:
19:8d:62:3e:7a:1a:5d:b2:03:ef:00:c7:f4:8b:56:
a9:3d:08:b1:39:0f:23:a8:ae:87:bf:2c:4b:eb:ad:
b8:8e:be:f7:33:d9:f6:ce:c3:c9:14:42:22:d8:e7:
00:50:31:87:45:77:4c:54:22:05:9a:c9:db:e7:b2:
28:b5:35:99:50:ea:2c:ef:70:08:1e:8c:eb:9c:4d:
c0:c6:fe:2b:53:b8:f3:ff:64:ee:46:ed:8f:af:10:
89:aa:c0:2c:5c:b6:6d:25:8c:54:37:f8:f8:b0:8f:
67:1a:6e:cf:f6:2e:d5:47:1e:20:99:95:13:64:91:
ea:57:5e:85:b9:aa:e2:af:2e:40:70:90:28:65:42:
ef:b7:a5:3b:1a:60:e0:d8:c2:8b:7e:58:64:9f:09:
e8:1a:09:0c:7f:81:c3:7f:fd:b1:b7:ac:e8:d6:f1:
41:73:e8:26:ed:62:63:95:b7:1f:49:db:82:e2:67:
3d:cc:03:10:5e:ed:90:7d:f3:d0:b4:8a:cd:66:49:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:06:EA:DE:78:35:4D:C1:62:6D:3D:C4:61:BC:C8:9A:81:2A:5C
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/78E0D98ED9A011EF884E920FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.100.0/24
116.90.115.0/24
Signature Algorithm: sha256WithRSAEncryption
21:14:2e:c9:2b:ee:b7:4f:47:cb:eb:16:13:6c:b6:40:55:7c:
d5:4c:f4:43:20:9c:8b:65:38:5a:2e:8a:83:74:cb:c1:d7:5d:
99:35:a3:ac:d6:3e:9a:d5:6a:f5:70:3f:3c:eb:51:17:09:b0:
e6:f6:f4:94:ae:b0:b6:38:76:84:89:9f:0b:5c:c9:c5:af:7d:
c3:86:96:77:b2:42:3d:91:8d:86:90:8e:d0:68:a7:95:14:bb:
4f:1d:d1:3b:8e:70:b5:15:a3:e1:f2:b2:df:75:0d:af:49:d3:
51:26:d0:8c:b2:1b:e8:bd:9c:20:01:7b:44:e8:14:aa:cc:0b:
1b:c1:0f:57:71:26:bd:9b:99:9b:e9:24:f6:5d:e1:a1:e6:4c:
ed:41:5b:47:af:8e:18:85:1b:88:60:cb:14:ca:0f:75:09:e3:
3e:96:34:27:96:8c:7d:db:32:42:93:4c:28:b4:fb:8a:55:07:
d8:94:ba:03:e1:3b:4a:3e:d2:85:d1:af:e4:16:a1:3e:13:01:
e7:e7:99:ad:fd:6a:6b:1d:5b:ee:1d:1c:97:82:da:c4:61:13:
f6:37:82:7e:94:8a:8a:74:8e:cf:50:6f:03:9e:26:e7:ec:ab:
40:e4:8d:cb:67:f5:0a:da:99:ed:b8:bf:97:58:35:fc:60:18:
13:b2:48:9c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjUwMTIzMTU0MTEyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzkyNjMxOC0yYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytVkA1dikvzQaGRfOt+k3nvDWhKjt/DXzUnPddnyQjo1y17VYNsUh4I4Yp9V
XJqrnyAsgGyR9xBQMasZjWI+ehpdsgPvAMf0i1apPQixOQ8jqK6HvyxL6624jr73
M9n2zsPJFEIi2OcAUDGHRXdMVCIFmsnb57IotTWZUOos73AIHozrnE3Axv4rU7jz
/2TuRu2PrxCJqsAsXLZtJYxUN/j4sI9nGm7P9i7VRx4gmZUTZJHqV16Fuariry5A
cJAoZULvt6U7GmDg2MKLflhknwnoGgkMf4HDf/2xt6zo1vFBc+gm7WJjlbcfSduC
4mc9zAMQXu2QffPQtIrNZknqoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPIrBure
eDVNwWJtPcRhvMiagSpcMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNzhFMEQ5OEVE
OUEwMTFFRjg4NEU5MjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB0WmQDBAB0WnMwDQYJKoZIhvcNAQELBQADggEBACEULskr
7rdPR8vrFhNstkBVfNVM9EMgnItlOFouioN0y8HXXZk1o6zWPprVavVwPzzrURcJ
sOb29JSusLY4doSJnwtcycWvfcOGlneyQj2RjYaQjtBop5UUu08d0TuOcLUVo+Hy
st91Da9J01Em0IyyG+i9nCABe0ToFKrMCxvBD1dxJr2bmZvpJPZd4aHmTO1BW0ev
jhiFG4hgyxTKD3UJ4z6WNCeWjH3bMkKTTCi0+4pVB9iUugPhO0o+0oXRr+QWoT4T
Aefnma39amsdW+4dHJeC2sRhE/Y3gn6Uiop0js9QbwOeJufsq0Dkjctn9Qrame24
v5dYNfxgGBOySJw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 17:00:20 2025 by rpki-client