Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/492F5DC4D96D11EFB34D0875C4F9AE02.roa
File: 492F5DC4D96D11EFB34D0875C4F9AE02.roa (raw, json)
Hash identifier: Z1c3cCFjJA+iN9yrh+Vyl/mDwO6D+dMRfK01Y6KbCh4=
Subject key identifier: 01:32:96:A0:89:66:04:EA:E7:21:FC:93:98:4B:C5:F3:4F:5A:02:98
Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial: DA
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/492F5DC4D96D11EFB34D0875C4F9AE02.roa
Signing time: Thu 23 Jan 2025 09:36:17 +0000
ROA not before: Thu 23 Jan 2025 09:36:17 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152462
IP address blocks: 157.15.134.0/24 maxlen: 24
157.15.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 12:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F
Validity
Not Before: Jan 23 09:36:17 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67920d90-f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:45:36:2e:fd:06:b8:cd:cc:3e:10:35:12:
69:3c:bb:fb:03:34:8d:28:86:6e:f0:d4:c3:08:17:
bf:de:b5:44:e6:2d:44:bc:59:94:cc:a2:1e:9e:c5:
c7:0e:12:45:c7:0c:55:d1:08:9d:fd:34:eb:9b:a4:
cd:3b:be:f8:db:3d:fa:1b:bc:a2:0d:a4:6e:55:71:
fb:2a:bb:7a:cd:1a:6c:cf:07:12:1c:5c:6b:dd:3b:
0f:17:8f:a6:08:b3:59:74:12:7f:d7:47:0b:c5:df:
ac:d4:c2:cd:58:10:ce:ec:ba:3b:71:93:33:2c:52:
f8:b9:77:c2:8d:5e:29:34:16:36:77:72:a8:52:0d:
56:aa:4c:77:d1:64:d3:39:08:ad:80:8b:5a:e5:a6:
58:40:40:b0:4c:49:9e:cc:a8:f3:8c:1b:a3:b9:7d:
ff:44:f7:84:32:54:d0:37:73:ac:7d:80:35:8e:08:
e8:d7:92:6a:7d:8d:b1:ca:79:e1:60:ac:db:d9:ef:
e2:15:72:79:6f:f3:db:a5:aa:b0:e9:be:60:99:88:
34:b9:ce:d9:e6:42:6b:d2:f2:fc:d1:26:1d:61:6f:
c0:90:41:a0:78:92:2a:f8:09:dc:4c:52:8d:ea:b9:
7c:0c:ed:9f:00:b6:03:e5:38:e2:fc:b3:52:6b:34:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:32:96:A0:89:66:04:EA:E7:21:FC:93:98:4B:C5:F3:4F:5A:02:98
X509v3 Authority Key Identifier:
keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/492F5DC4D96D11EFB34D0875C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.134.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:c7:b0:cd:1b:63:cf:f8:f3:fe:06:04:ae:4a:f3:db:19:49:
a0:1f:11:d2:11:7c:6a:44:47:f3:fb:d3:cf:d3:06:0c:b7:37:
55:32:b8:cb:5e:6e:5b:35:7b:0f:27:d5:fa:b6:d9:ca:df:4a:
12:b6:81:8b:86:b0:31:be:1d:ec:70:89:8c:6d:66:f9:83:1a:
3e:dc:54:af:97:8e:fd:78:75:b0:2a:2f:07:71:4c:57:df:0f:
e6:b9:78:e7:58:c1:c6:1f:dd:8c:44:d6:4a:4b:08:85:eb:c4:
5a:bb:9e:25:65:56:7a:23:0a:8e:ac:dd:73:c7:e0:ea:2c:0c:
5d:73:3d:d2:49:e9:b2:53:ba:17:35:23:7b:97:1f:9b:44:a1:
6e:a0:d2:b6:55:03:42:5f:f3:3e:cd:c8:f5:aa:f7:70:16:e3:
12:0d:a6:ba:f6:db:16:d3:2a:e5:b4:e5:11:08:cc:a9:47:df:
8b:73:5d:26:44:8a:4e:22:b6:97:20:0d:8b:1d:30:53:4e:d2:
ad:7b:47:63:0d:42:10:44:b3:b0:8b:91:c2:c0:0e:be:91:a9:
2d:14:7d:99:00:ff:6a:2b:53:af:37:ec:a8:7e:3d:4e:bb:81:
43:4e:60:07:1b:49:18:07:c3:ba:5c:02:0f:98:bd:08:45:68:
62:0c:b6:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx
NEFERkI4QjUwHhcNMjUwMTIzMDkzNjE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzkyMGQ5MC1mMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA21tFNi79BrjNzD4QNRJpPLv7AzSNKIZu8NTDCBe/3rVE5i1EvFmUzKIensXH
DhJFxwxV0Qid/TTrm6TNO7742z36G7yiDaRuVXH7Krt6zRpszwcSHFxr3TsPF4+m
CLNZdBJ/10cLxd+s1MLNWBDO7Lo7cZMzLFL4uXfCjV4pNBY2d3KoUg1Wqkx30WTT
OQitgIta5aZYQECwTEmezKjzjBujuX3/RPeEMlTQN3OsfYA1jgjo15JqfY2xynnh
YKzb2e/iFXJ5b/Pbpaqw6b5gmYg0uc7Z5kJr0vL80SYdYW/AkEGgeJIq+AncTFKN
6rl8DO2fALYD5Tji/LNSazTO/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAEylqCJ
ZgTq5yH8k5hLxfNPWgKYMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0
N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE2N0YvNEFBQjdCQ0FDNDdEMTFFRTlGQzdDODBGQzRGOUFFMDIvNDkyRjVEQzRE
OTZEMTFFRkIzNEQwODc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGdD4YwDQYJKoZIhvcNAQELBQADggEBAJ7HsM0bY8/48/4G
BK5K89sZSaAfEdIRfGpER/P708/TBgy3N1UyuMtebls1ew8n1fq22crfShK2gYuG
sDG+HexwiYxtZvmDGj7cVK+Xjv14dbAqLwdxTFffD+a5eOdYwcYf3YxE1kpLCIXr
xFq7niVlVnojCo6s3XPH4OosDF1zPdJJ6bJTuhc1I3uXH5tEoW6g0rZVA0Jf8z7N
yPWq93AW4xINprr22xbTKuW05REIzKlH34tzXSZEik4itpcgDYsdMFNO0q17R2MN
QhBEs7CLkcLADr6RqS0UfZkA/2orU6837Kh+PU67gUNOYAcbSRgHw7pcAg+YvQhF
aGIMtqo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:44:37 2025 by rpki-client