Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/C613052CD98411EF9DDE2983C4F9AE02.roa
File: C613052CD98411EF9DDE2983C4F9AE02.roa (raw, json)
Hash identifier: PADfzzjTjKZPhrGMew3kkUQiFcW/Y7PnI80q/xNgjio=
Subject key identifier: 95:68:61:E9:53:E7:7B:03:F8:44:CE:F3:A5:74:B8:BF:96:CD:54:D9
Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial: E4
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/C613052CD98411EF9DDE2983C4F9AE02.roa
Signing time: Wed 29 Jan 2025 05:28:19 +0000
ROA not before: Wed 29 Jan 2025 05:28:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152462
IP address blocks: 157.15.134.0/24 maxlen: 24
157.15.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 10:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F
Validity
Not Before: Jan 29 05:28:19 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6799bc72-2faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:91:91:c5:47:5c:43:c9:02:75:d6:a1:96:
bd:23:b5:5a:cd:65:3f:51:68:f1:63:43:c5:37:52:
ca:f1:6f:3c:92:db:50:5a:03:f5:5a:a4:cb:26:28:
50:df:34:5b:76:2e:dc:d3:2d:f4:74:a7:de:78:36:
f3:a9:08:08:cb:81:87:e0:0d:93:80:28:99:a6:f7:
d1:35:56:fc:98:1e:d6:ed:57:35:03:6d:6d:25:63:
a2:48:6b:c0:72:8f:d2:0c:27:1e:00:20:5a:61:a7:
2b:02:c4:e6:b3:c6:da:18:3e:f0:60:4e:d0:18:df:
76:e9:47:d6:c8:75:7f:1a:77:dc:88:b5:62:9f:7d:
48:40:37:83:8a:03:20:e3:f8:5f:70:63:76:20:bf:
2c:ed:0a:64:de:aa:d6:91:61:87:22:38:98:6e:09:
bc:c0:25:85:45:9a:be:26:2e:4e:d0:68:f3:f4:50:
c7:ef:35:a1:9f:23:88:75:bd:4b:24:00:2e:37:e4:
2c:28:f7:7f:43:ad:39:5e:d1:4a:c1:a1:2b:19:91:
4b:c8:a9:af:0d:ea:14:7d:0a:59:4f:29:51:54:39:
3f:27:9a:33:bc:82:6e:1d:33:79:14:8e:64:57:7b:
c1:22:05:a5:4a:71:7e:2c:76:8a:0e:2a:f4:b7:fb:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:61:E9:53:E7:7B:03:F8:44:CE:F3:A5:74:B8:BF:96:CD:54:D9
X509v3 Authority Key Identifier:
keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/C613052CD98411EF9DDE2983C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.134.0/23
Signature Algorithm: sha256WithRSAEncryption
37:99:08:16:bf:03:df:40:f9:60:13:b8:8a:fc:32:65:ef:fc:
70:97:72:54:8b:f8:8a:14:a1:a4:fe:fe:55:00:dc:ac:59:d7:
c2:89:36:ef:5f:f8:84:f6:59:9c:2c:1c:66:62:7d:2c:18:92:
d7:da:36:bf:c6:d6:19:5f:2e:48:99:d8:1d:34:f4:9c:28:05:
b0:e9:9c:8c:a5:c3:30:eb:a0:1b:0e:1e:e7:d8:f2:21:1f:8f:
82:2f:5f:26:7f:77:59:12:a2:1c:6f:f3:0d:29:a2:07:74:cc:
81:b7:38:4f:39:6d:27:88:e3:31:13:cb:0e:19:68:3e:c7:d4:
0a:8e:be:78:d0:d2:d6:34:68:15:5d:6d:0e:9c:23:55:7e:3d:
f1:28:e5:a4:e1:53:0d:59:6c:7d:28:cf:bd:11:af:4e:c1:ad:
21:8c:06:8c:f4:71:b0:78:4e:b7:a0:de:33:d1:1f:72:30:01:
55:16:bb:0b:07:45:4d:8e:ed:ee:0e:83:b0:fd:e4:37:db:9d:
b9:92:c8:66:8a:ab:dd:cc:13:78:fe:6a:82:9d:43:37:16:41:
15:77:59:fd:55:91:3d:66:7a:84:48:27:6f:b0:ae:60:09:f3:
15:a1:3f:3a:7b:05:d4:b3:e6:60:a7:fa:e5:44:29:c4:2e:55:
76:20:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:20 2025 by rpki-client