Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa
File: 42718A9815EE11EC972DE124C4F9AE02.roa (raw, json)
Hash identifier: HEIx05CTZqSmBrrkXQauSOruRpHqJpBEBMz2nP+byDw=
Subject key identifier: 74:39:46:B3:6F:6E:E1:A4:85:74:10:2E:C1:4A:0B:83:A6:89:19:5C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1252
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:27 +0000
ROA not before: Fri 24 May 2024 22:32:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 146993
IP address blocks: 43.226.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 05:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4690 (0x1252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 22:32:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6651157b-82fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:90:1d:71:79:da:27:b1:ec:fa:cc:02:cd:
50:4e:08:10:31:f0:bd:43:ef:40:a2:dc:81:93:af:
b8:af:ac:12:aa:45:df:2b:ff:59:61:a9:ab:ae:91:
1e:e2:50:97:a2:6d:2f:1d:e8:6b:e7:7a:14:71:0c:
a4:b2:bc:7e:c3:c2:2e:5f:f9:c4:dd:44:33:2f:c4:
f3:9b:d1:bc:d2:08:af:5c:08:cd:49:f5:20:7b:6e:
16:a4:b9:7c:6a:76:88:4c:7c:e7:c9:92:e3:33:25:
44:b2:bf:b1:e3:e5:d9:61:90:aa:f1:08:5a:a6:67:
30:c1:c7:54:00:51:55:e7:03:a6:b3:a7:0f:5b:11:
3e:ca:fc:d5:bd:35:f0:4f:cc:fc:8c:e8:f1:9d:b0:
97:9b:3e:f9:8f:a1:85:f7:16:67:09:a7:7d:ab:26:
c1:52:6b:b1:1a:d9:59:66:ac:db:2e:8f:e2:93:e5:
25:6b:eb:56:3c:69:95:ed:9a:d6:70:96:1d:4d:0d:
c6:1f:9e:84:9f:71:b5:11:73:ad:3f:8b:2e:90:6d:
6b:1e:8e:02:c1:5e:3b:5f:6d:71:56:1b:c7:01:8e:
b6:03:61:cd:39:9b:47:03:a3:6a:3d:12:99:3f:fb:
09:be:c4:6b:84:1a:01:56:50:19:9f:d2:d8:2d:85:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:39:46:B3:6F:6E:E1:A4:85:74:10:2E:C1:4A:0B:83:A6:89:19:5C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
Signature Algorithm: sha256WithRSAEncryption
21:dc:93:a5:57:35:4e:a2:51:5e:fd:e9:7e:ad:f0:c0:fd:93:
47:33:e3:cd:5b:a0:3e:3b:87:6f:fd:3f:14:3a:23:9d:fa:a3:
8c:7d:20:3d:ff:de:d0:15:55:84:79:d1:7f:ea:d9:ab:ca:c5:
38:7a:a3:95:51:84:f5:ad:cd:4e:1d:77:b1:9f:4d:d0:6c:a9:
51:f8:dd:a9:ec:a0:b4:ab:e2:25:83:8a:4c:51:32:7a:e3:81:
ed:16:1f:a6:a5:58:a0:30:ed:52:30:95:2c:46:dc:c6:85:82:
a2:17:0a:2c:26:76:6b:c3:0c:6d:3a:5b:42:5b:5f:24:3e:a7:
59:dd:8f:40:52:0d:ae:c6:87:91:f1:5a:0d:4b:36:d1:df:fd:
b2:4e:ef:6d:33:80:f0:2c:58:34:ed:bb:d6:4d:ed:cd:d8:42:
59:f4:3d:9a:03:2d:e4:eb:e3:fe:e1:f3:4b:6d:ee:ed:38:5b:
d9:72:1d:51:2a:c5:9d:a2:ec:a6:e3:07:20:fe:8a:09:02:60:
fb:04:47:9a:68:bb:14:87:fa:9e:5a:e3:e8:52:ac:18:35:23:
6e:3e:24:2d:0a:f7:c2:94:5a:c6:4a:37:3c:30:af:c9:70:7d:
56:3b:03:07:f3:8a:9d:71:6f:c0:35:2e:99:f0:aa:67:18:fc:
0a:e9:d3:4d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICElIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwNTI0MjIzMjI3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjUxMTU3Yi04MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwx+QHXF52iex7PrMAs1QTggQMfC9Q+9AotyBk6+4r6wSqkXfK/9ZYamrrpEe
4lCXom0vHehr53oUcQyksrx+w8IuX/nE3UQzL8Tzm9G80givXAjNSfUge24WpLl8
anaITHznyZLjMyVEsr+x4+XZYZCq8QhapmcwwcdUAFFV5wOms6cPWxE+yvzVvTXw
T8z8jOjxnbCXmz75j6GF9xZnCad9qybBUmuxGtlZZqzbLo/ik+Ula+tWPGmV7ZrW
cJYdTQ3GH56En3G1EXOtP4sukG1rHo4CwV47X21xVhvHAY62A2HNOZtHA6NqPRKZ
P/sJvsRrhBoBVlAZn9LYLYWjDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHQ5RrNv
buGkhXQQLsFKC4OmiRlcMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDI3MThBOTgx
NUVFMTFFQzk3MkRFMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAIr4uAwDQYJKoZIhvcNAQELBQADggEBACHck6VXNU6iUV79
6X6t8MD9k0cz481boD47h2/9PxQ6I536o4x9ID3/3tAVVYR50X/q2avKxTh6o5VR
hPWtzU4dd7GfTdBsqVH43ansoLSr4iWDikxRMnrjge0WH6alWKAw7VIwlSxG3MaF
gqIXCiwmdmvDDG06W0JbXyQ+p1ndj0BSDa7Gh5HxWg1LNtHf/bJO720zgPAsWDTt
u9ZN7c3YQln0PZoDLeTr4/7h80tt7u04W9lyHVEqxZ2i7KbjByD+igkCYPsER5po
uxSH+p5a4+hSrBg1I24+JC0K98KUWsZKNzwwr8lwfVY7Awfzip1xb8A1LpnwqmcY
/Arp000=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:30 2025 by rpki-client