Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CA6D4C36180011EFA1B53D26C4F9AE02.roa
File: CA6D4C36180011EFA1B53D26C4F9AE02.roa (raw, json)
Hash identifier: xMVdOYan5SK0iFgCwgC2y5YK1WMw0dE7tIbJFi057/Q=
Subject key identifier: F5:F0:85:52:2A:40:72:35:FF:D6:59:CD:C3:41:DC:B3:5B:3C:3C:D6
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1265
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CA6D4C36180011EFA1B53D26C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:44 +0000
ROA not before: Fri 24 May 2024 22:32:44 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7922
IP address blocks: 175.110.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 03 Jul 2024 05:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 22:32:44 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6651158c-12bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:47:a2:b1:5b:95:46:64:c8:34:34:48:8e:
ad:1f:fb:00:dd:4b:cc:d4:b8:f3:6d:5f:13:6f:50:
31:6e:f0:41:78:75:26:c3:a5:47:40:52:38:4a:ca:
70:60:db:89:cf:0b:5b:6c:9e:72:34:c4:0c:47:d6:
36:67:6e:68:38:95:f0:0b:01:be:f6:ab:02:da:66:
9e:82:ff:b4:c6:20:b3:1b:d3:31:44:c0:3c:af:d8:
63:6d:f7:a4:2f:c5:1f:e4:c3:43:92:da:5c:41:85:
4f:02:21:13:8c:d2:24:65:2f:11:e9:43:25:c3:3f:
2f:ea:c4:1e:4d:49:d9:b4:26:97:9d:88:6b:14:55:
73:ce:47:13:fd:65:67:28:0c:cd:d3:2f:80:d5:0d:
55:6c:e0:43:60:bc:84:da:35:66:3f:82:07:72:0c:
23:c4:86:e9:29:07:64:fa:17:e8:17:f8:a7:46:94:
67:d6:e5:ad:8c:e8:ff:00:2d:d6:8d:e4:d6:af:f5:
c5:bb:80:87:09:37:d7:32:44:30:f2:8b:41:3a:e1:
e7:d8:a0:f6:c9:41:e7:b0:05:31:f5:11:03:3e:78:
a6:ef:cc:57:2d:4c:50:fd:4e:1f:ec:61:87:22:74:
a7:d3:a4:54:c5:16:fc:30:14:d3:c3:23:57:e1:24:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F0:85:52:2A:40:72:35:FF:D6:59:CD:C3:41:DC:B3:5B:3C:3C:D6
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CA6D4C36180011EFA1B53D26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:6c:a0:23:95:c1:95:7d:4c:60:44:f8:87:fd:14:7f:24:3b:
ee:96:2f:40:0f:32:c0:cb:36:e8:65:74:e5:5f:7a:82:cc:df:
88:dc:f0:bf:95:e3:9e:d6:69:ef:35:9d:64:16:79:26:69:4a:
08:24:53:22:5f:81:b8:0d:51:c1:13:df:e8:9b:8c:7f:71:37:
31:44:9a:e7:01:44:b2:bb:f5:1a:e1:fb:08:a6:05:dc:95:6f:
a2:fa:11:bc:d7:87:73:3c:81:0b:d6:13:7f:05:33:fb:94:e6:
40:a9:3e:9f:e1:c3:47:21:cb:77:d0:30:2f:b6:36:a2:83:18:
07:c5:91:e5:fd:c9:7b:85:b2:7f:dd:9b:c2:c4:78:d6:b3:e2:
a5:ef:67:46:db:c2:cd:73:67:e8:72:89:01:48:9b:5e:14:c2:
e3:06:02:2f:f4:bf:f7:77:d3:11:f1:2c:8d:35:66:04:5e:66:
fe:09:89:61:f1:88:8d:bf:f2:0e:12:f2:1f:2f:93:c7:84:73:
b6:29:87:13:0a:45:9f:75:e2:4f:ce:5c:3e:08:45:cd:f7:0e:
85:39:55:d1:ab:06:39:bf:0d:17:b0:71:b2:ea:ce:9d:d0:ac:
69:86:76:d4:98:7f:1f:f7:d6:11:d7:be:e7:44:eb:14:cd:4f:
6f:50:82:22
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwNTI0MjIzMjQ0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjUxMTU4Yy0xMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2qpHorFblUZkyDQ0SI6tH/sA3UvM1LjzbV8Tb1AxbvBBeHUmw6VHQFI4Sspw
YNuJzwtbbJ5yNMQMR9Y2Z25oOJXwCwG+9qsC2maegv+0xiCzG9MxRMA8r9hjbfek
L8Uf5MNDktpcQYVPAiETjNIkZS8R6UMlwz8v6sQeTUnZtCaXnYhrFFVzzkcT/WVn
KAzN0y+A1Q1VbOBDYLyE2jVmP4IHcgwjxIbpKQdk+hfoF/inRpRn1uWtjOj/AC3W
jeTWr/XFu4CHCTfXMkQw8otBOuHn2KD2yUHnsAUx9REDPnim78xXLUxQ/U4f7GGH
InSn06RUxRb8MBTTwyNX4SQoyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPXwhVIq
QHI1/9ZZzcNB3LNbPDzWMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQ0E2RDRDMzYx
ODAwMTFFRkExQjUzRDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKvblgwDQYJKoZIhvcNAQELBQADggEBAD9soCOVwZV9TGBE
+If9FH8kO+6WL0APMsDLNuhldOVfeoLM34jc8L+V457Wae81nWQWeSZpSggkUyJf
gbgNUcET3+ibjH9xNzFEmucBRLK79Rrh+wimBdyVb6L6EbzXh3M8gQvWE38FM/uU
5kCpPp/hw0chy3fQMC+2NqKDGAfFkeX9yXuFsn/dm8LEeNaz4qXvZ0bbws1zZ+hy
iQFIm14UwuMGAi/0v/d30xHxLI01ZgReZv4JiWHxiI2/8g4S8h8vk8eEc7YphxMK
RZ914k/OXD4IRc33DoU5VdGrBjm/DRewcbLqzp3QrGmGdtSYfx/31hHXvudE6xTN
T29QgiI=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:30 2025 by rpki-client