Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/C2219930AED411EB92E7A470C4F9AE02.roa
File: C2219930AED411EB92E7A470C4F9AE02.roa (raw, json)
Hash identifier: f99oNJTMU1zGhqBGO4nYW75zk397Fa58POfhJKOSX2g=
Subject key identifier: 88:4B:EF:4B:CA:C6:5F:FF:A0:2A:69:0F:FD:21:FA:E8:F0:7F:BD:7A
Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Certificate serial: 0662
Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/C2219930AED411EB92E7A470C4F9AE02.roa
Signing time: Mon 01 Apr 2024 00:32:21 +0000
ROA not before: Mon 01 Apr 2024 00:32:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 396073
IP address blocks: 36.255.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 21:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1634 (0x662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Validity
Not Before: Apr 1 00:32:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660a0095-edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:41:31:27:b1:81:88:75:57:4a:5f:4e:68:
2b:42:d1:f5:30:1c:7b:3b:2d:fd:a9:63:8c:f4:4b:
c8:c6:c6:30:ec:66:65:6a:2c:99:d2:28:ce:e5:03:
3a:b7:33:76:e6:71:f0:f3:3c:20:08:23:5d:99:b7:
79:f7:91:c0:d1:18:31:ae:04:e1:5b:33:3f:22:93:
90:60:90:a3:43:56:5a:7b:a6:09:56:49:da:0f:54:
c8:69:66:ba:bf:c4:d9:56:d1:b6:64:b5:a4:a1:09:
32:2f:d6:3b:b8:5d:49:e6:7f:77:ed:b1:2c:3a:36:
d0:1c:59:28:3c:9a:4d:83:39:92:fa:aa:02:61:61:
b1:74:91:2d:9c:c1:f4:b5:c8:b2:f6:b6:5b:8f:54:
1f:aa:88:91:c4:f4:98:e3:4c:71:14:04:ba:21:1e:
5f:84:29:52:ee:4e:21:1b:39:e0:5d:ae:dc:95:fb:
24:c7:f6:fd:13:4a:cc:26:cd:b4:38:11:7a:96:73:
72:a5:16:b9:60:f3:bb:3d:54:79:d2:fa:c9:61:f2:
df:1a:21:59:e7:94:3e:b6:0d:5a:ff:af:ab:ec:83:
dd:01:f3:85:7a:d2:95:c2:16:b6:d7:4c:24:8b:14:
c9:55:a7:96:aa:10:08:b1:06:fe:77:63:2f:03:41:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4B:EF:4B:CA:C6:5F:FF:A0:2A:69:0F:FD:21:FA:E8:F0:7F:BD:7A
X509v3 Authority Key Identifier:
keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/C2219930AED411EB92E7A470C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b0:fe:a3:49:33:98:d1:d8:54:af:7d:23:a0:50:de:fc:55:
b9:d3:db:bb:6e:6f:7f:bf:39:5a:96:68:63:38:75:f7:45:da:
16:00:df:b2:1d:86:b7:3a:8c:5f:bd:87:47:78:7f:17:61:b1:
48:e7:3f:52:a7:02:83:95:30:a5:c7:02:92:91:99:5f:0b:d5:
91:88:92:09:21:3a:57:aa:a7:f8:46:6b:98:dc:31:73:e4:9c:
cb:f7:a6:87:71:f6:6e:82:db:73:1c:c7:94:9c:96:ed:cf:2d:
1f:54:62:a7:ad:70:bd:e1:26:b4:05:18:86:45:fb:1b:9d:4a:
52:44:ab:24:a6:d7:5b:59:43:06:72:76:c6:f3:46:be:22:77:
18:e0:7b:b1:bb:0f:20:8b:48:84:e6:7c:42:ca:1e:25:75:63:
a8:f2:d7:3a:92:d3:85:ab:f8:ad:b0:b8:87:9b:ae:b7:42:89:
ce:75:ea:13:54:eb:59:29:c9:72:bc:3d:d8:1e:e5:c6:ce:2d:
1a:a8:dd:9d:62:a4:a4:ae:17:d0:aa:9d:6f:d9:90:45:f0:d0:
0b:76:bc:d4:a3:05:ed:c1:93:ec:d8:40:ef:2e:5d:02:cd:19:
03:5d:8e:79:3c:d3:4e:19:5b:e9:f9:dc:60:28:50:a9:be:42:
ac:80:4f:56
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx
OTRCMTc2ODIwHhcNMjQwNDAxMDAzMjIxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBhMDA5NS1lZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0EdBMSexgYh1V0pfTmgrQtH1MBx7Oy39qWOM9EvIxsYw7GZlaiyZ0ijO5QM6
tzN25nHw8zwgCCNdmbd595HA0RgxrgThWzM/IpOQYJCjQ1Zae6YJVknaD1TIaWa6
v8TZVtG2ZLWkoQkyL9Y7uF1J5n937bEsOjbQHFkoPJpNgzmS+qoCYWGxdJEtnMH0
tciy9rZbj1QfqoiRxPSY40xxFAS6IR5fhClS7k4hGzngXa7clfskx/b9E0rMJs20
OBF6lnNypRa5YPO7PVR50vrJYfLfGiFZ55Q+tg1a/6+r7IPdAfOFetKVwha210wk
ixTJVaeWqhAIsQb+d2MvA0Eu3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIhL70vK
xl//oCppD/0h+ujwf716MB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw
RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzUxMDUvREQ3MjBCODYzMEYxMTFFQkEyMDE0MjREQzRGOUFFMDIvQzIyMTk5MzBB
RUQ0MTFFQjkyRTdBNDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAk/00wDQYJKoZIhvcNAQELBQADggEBAKiw/qNJM5jR2FSv
fSOgUN78VbnT27tub3+/OVqWaGM4dfdF2hYA37Idhrc6jF+9h0d4fxdhsUjnP1Kn
AoOVMKXHApKRmV8L1ZGIkgkhOleqp/hGa5jcMXPknMv3podx9m6C23Mcx5Sclu3P
LR9UYqetcL3hJrQFGIZF+xudSlJEqySm11tZQwZydsbzRr4idxjge7G7DyCLSITm
fELKHiV1Y6jy1zqS04Wr+K2wuIebrrdCic516hNU61kpyXK8Pdge5cbOLRqo3Z1i
pKSuF9CqnW/ZkEXw0At2vNSjBe3Bk+zYQO8uXQLNGQNdjnk8004ZW+n53GAoUKm+
QqyAT1Y=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:34:26 2025 by rpki-client