Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/4DE56C729CFC11EEAB12747CC4F9AE02.roa
File: 4DE56C729CFC11EEAB12747CC4F9AE02.roa (raw, json)
Hash identifier: mZJ6JO7Hl3MJnH6Rj1rFISPIqcsRd3qN0GCShwIGWiQ=
Subject key identifier: 8E:27:2B:41:10:45:3A:01:F4:CE:0A:13:E9:24:0B:C5:7D:37:B6:CD
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: DE
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/4DE56C729CFC11EEAB12747CC4F9AE02.roa
Signing time: Tue 11 Feb 2025 04:57:51 +0000
ROA not before: Tue 11 Feb 2025 04:57:51 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 152163
IP address blocks: 36.50.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 10:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF
Validity
Not Before: Feb 11 04:57:51 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67aad8cf-c8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0a:03:08:b2:88:ee:d2:a0:7d:e2:5c:27:89:
a9:ad:cb:61:be:df:3e:02:a5:db:b6:a2:24:8b:87:
71:c0:13:76:f1:9b:b8:79:a3:05:32:23:86:9c:8d:
a2:6a:b5:8b:00:93:3b:bf:87:8d:09:94:68:00:c3:
fb:2e:f2:fd:06:1e:cd:99:80:90:fa:5e:7d:d2:dd:
ef:e6:08:62:2c:22:2c:cf:45:cb:72:e5:67:da:55:
af:fd:b7:71:8c:56:ad:2b:17:16:36:8f:f7:c6:76:
35:da:d6:c9:c3:b5:84:d2:98:94:9f:70:9f:2b:0c:
d3:ec:4a:87:33:4e:54:6b:64:ad:16:5a:0a:15:48:
96:14:49:9c:b3:02:cd:4d:9a:11:cb:5c:16:51:59:
5a:13:08:9d:af:bc:1d:ab:9e:8e:dc:5d:c8:46:d9:
b1:c3:5a:0b:19:07:91:ac:4c:8c:ee:ec:d6:14:e8:
dc:60:38:94:7d:7b:49:0b:8d:07:18:43:de:1b:fb:
d7:14:92:6c:f4:3f:02:ea:78:2e:c8:26:f1:58:9d:
54:05:85:ba:f1:75:32:9d:a2:06:d2:e1:b2:6c:f8:
35:9a:43:02:60:45:2a:e2:16:b7:44:c1:c2:90:0f:
86:d7:ae:b7:2a:fb:1f:96:73:94:14:6d:4f:84:3c:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:27:2B:41:10:45:3A:01:F4:CE:0A:13:E9:24:0B:C5:7D:37:B6:CD
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/4DE56C729CFC11EEAB12747CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.116.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:15:f6:e3:d6:0b:32:f8:b3:e6:e7:91:dd:8b:1f:03:0f:45:
7a:f0:38:2a:43:97:ee:09:a1:42:ff:d6:f5:86:e7:15:48:4b:
3b:9f:ad:ca:1b:56:d5:38:4f:80:48:d5:ef:78:7a:c0:86:e9:
bd:e2:6b:c7:72:04:fd:e8:12:d5:b5:f2:3b:de:ab:68:33:57:
54:0d:52:d1:bf:be:5a:ca:37:89:c7:4f:ea:27:02:93:e7:59:
d7:00:90:61:29:0f:67:52:6f:b9:6a:c5:97:cb:a7:f9:36:57:
d5:f7:57:84:8b:9d:61:a1:0d:f9:db:a9:44:fd:a6:41:81:7f:
56:d6:82:97:bb:ee:70:e6:b9:2e:4e:ed:bc:4a:b2:09:ee:36:
89:49:57:cb:0e:c7:30:35:60:22:af:b0:50:96:62:f1:e8:f2:
47:95:2d:c3:e8:6e:d3:b8:87:a4:84:0b:31:82:60:91:09:57:
9b:e5:b0:52:f8:c0:45:7e:1b:f4:e0:5c:95:3d:b1:87:e2:da:
2c:d7:68:4a:c7:e8:80:de:26:60:5a:d6:11:1f:45:72:b1:89:
af:b7:ff:91:49:67:6d:51:cd:5e:79:0f:a9:83:82:fc:5b:f1:
64:38:c4:33:64:1d:bb:cb:fa:da:f3:55:69:3a:58:0d:43:d6:
ae:56:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:27:22 2025 by rpki-client