Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/33329986FD2211EFA419DA72C4F9AE02.roa
File: 33329986FD2211EFA419DA72C4F9AE02.roa (raw, json)
Hash identifier: lhRcnUbLpunNzulKeFHxPCXQYdT2lO1/Om7LrwMCb5Q=
Subject key identifier: FF:A6:78:3C:33:B5:97:44:71:A1:62:9C:74:F9:63:56:38:6F:47:FC
Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial: BA
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/33329986FD2211EFA419DA72C4F9AE02.roa
Signing time: Sun 09 Mar 2025 20:08:00 +0000
ROA not before: Sun 09 Mar 2025 20:08:00 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 202.50.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Validity
Not Before: Mar 9 20:08:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=67cdf520-9aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:03:bc:bf:96:59:70:ee:e2:07:d1:2b:9b:
d6:63:56:3e:e6:bb:b2:db:5c:2a:44:ab:06:08:27:
a1:21:7c:f8:9f:0d:c2:4c:b7:20:a1:61:b5:eb:b5:
d4:36:86:cf:61:e3:1d:63:ba:8a:02:7d:07:a6:63:
f7:53:1b:10:c2:e7:75:39:c5:9c:99:21:1b:52:f6:
16:79:ac:46:c7:ec:b2:52:9b:6d:fc:ca:08:f4:d5:
11:13:d7:28:07:bb:cd:c9:7c:e1:af:80:5b:5b:2e:
8e:9b:55:14:6e:05:fb:da:79:de:70:91:5f:3e:6f:
21:20:b1:33:3a:54:20:a9:27:e0:e5:b3:27:04:de:
66:d0:27:52:e7:a6:fa:65:46:21:31:79:df:1f:47:
ad:f2:7f:20:fb:20:90:7c:73:11:c9:33:8f:7c:6e:
52:fd:5e:c5:48:6b:09:6a:e6:a9:00:5a:2e:40:77:
99:c9:2a:24:3c:cf:dd:cb:e3:50:a1:b4:d8:93:8c:
3d:df:7e:35:04:f6:4c:c9:93:51:36:8c:5a:c9:37:
d4:ef:7b:30:f3:85:73:8a:80:df:e0:62:28:19:5f:
98:37:8f:da:93:e5:45:52:f5:91:aa:fc:09:93:fb:
a0:a8:32:e7:e0:20:87:9b:51:65:a8:37:08:ca:22:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:78:3C:33:B5:97:44:71:A1:62:9C:74:F9:63:56:38:6F:47:FC
X509v3 Authority Key Identifier:
keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/33329986FD2211EFA419DA72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.50.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:87:3b:c1:bf:e2:f2:f1:90:88:85:54:10:4c:2b:37:38:cd:
26:7b:02:5a:b5:10:81:09:35:60:16:31:51:98:1b:53:7a:cd:
3d:52:12:35:b2:1f:45:3a:fc:78:95:98:f9:03:c1:1e:8b:35:
f8:80:f3:10:81:35:64:a1:58:30:aa:61:9a:9e:4c:b9:c9:a1:
48:93:43:d8:65:fc:a2:8c:67:c4:73:34:d3:78:4b:dc:db:bb:
81:8a:dc:56:62:ed:3a:31:93:9f:d6:a8:39:70:2f:19:5a:24:
bb:22:f9:88:5a:ca:45:9c:27:66:49:82:b5:a1:29:51:11:f6:
23:fa:98:39:af:8a:0e:44:ba:e8:62:84:99:bf:1b:1b:40:41:
6b:c5:a2:a1:0d:cf:bc:0f:1a:ac:59:8e:1a:e9:f3:f2:de:b9:
ef:f9:aa:f1:e8:5d:89:8a:16:7e:93:9c:26:75:a0:66:54:f7:
5b:bf:b6:4b:98:3d:b6:38:2e:26:bd:1b:d5:19:1e:20:6b:5b:
97:3e:34:09:53:14:29:9e:59:26:b0:cf:fc:41:e2:9e:44:63:
68:ba:2a:45:a9:59:26:ed:a6:90:40:0b:d2:44:ab:ea:fa:e6:
94:3b:84:40:7d:a5:fc:8a:67:a4:00:03:b0:de:f1:44:6c:36:
95:e5:84:53
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND
NkJEQkQzMjIwHhcNMjUwMzA5MjAwODAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NkZjUyMC05YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9gDvL+WWXDu4gfRK5vWY1Y+5ruy21wqRKsGCCehIXz4nw3CTLcgoWG167XU
NobPYeMdY7qKAn0HpmP3UxsQwud1OcWcmSEbUvYWeaxGx+yyUptt/MoI9NURE9co
B7vNyXzhr4BbWy6Om1UUbgX72nnecJFfPm8hILEzOlQgqSfg5bMnBN5m0CdS56b6
ZUYhMXnfH0et8n8g+yCQfHMRyTOPfG5S/V7FSGsJauapAFouQHeZySokPM/dy+NQ
obTYk4w93341BPZMyZNRNoxayTfU73sw84VzioDf4GIoGV+YN4/ak+VFUvWRqvwJ
k/ugqDLn4CCHm1FlqDcIyiJKdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP+meDwz
tZdEcaFinHT5Y1Y4b0f8MB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2
QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjgwQzIvRkU0OEFCRjQwNkIyMTFFRkJDRTAzNDVDQzRGOUFFMDIvMzMzMjk5ODZG
RDIyMTFFRkE0MTlEQTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKMnEwDQYJKoZIhvcNAQELBQADggEBAF+HO8G/4vLxkIiF
VBBMKzc4zSZ7Alq1EIEJNWAWMVGYG1N6zT1SEjWyH0U6/HiVmPkDwR6LNfiA8xCB
NWShWDCqYZqeTLnJoUiTQ9hl/KKMZ8RzNNN4S9zbu4GK3FZi7Toxk5/WqDlwLxla
JLsi+YhaykWcJ2ZJgrWhKVER9iP6mDmvig5EuuhihJm/GxtAQWvFoqENz7wPGqxZ
jhrp8/Leue/5qvHoXYmKFn6TnCZ1oGZU91u/tkuYPbY4Lia9G9UZHiBrW5c+NAlT
FCmeWSawz/xB4p5EY2i6KkWpWSbtppBAC9JEq+r65pQ7hEB9pfyKZ6QAA7De8URs
NpXlhFM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:45:33 2025 by rpki-client