Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/057B6160354111F0B98A6C36C4F9AE02.roa
File: 057B6160354111F0B98A6C36C4F9AE02.roa (raw, json)
Hash identifier: vQUTLMT7WeV7bFE/HYBB+sABbz5C0/oQcxiVWVKqb8Y=
Subject key identifier: 4C:33:1F:1D:14:06:0F:DC:B8:39:30:4E:D8:83:E3:3C:D7:14:92:8C
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 2723
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/057B6160354111F0B98A6C36C4F9AE02.roa
Signing time: Thu 22 May 2025 15:52:23 +0000
ROA not before: Thu 22 May 2025 15:52:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 17970
IP address blocks: 43.255.216.0/22 maxlen: 22
61.9.0.0/17 maxlen: 17
61.9.0.0/19 maxlen: 19
61.9.32.0/19 maxlen: 19
61.9.80.0/21 maxlen: 21
61.9.96.0/19 maxlen: 19
61.9.96.0/22 maxlen: 22
61.9.111.0/24 maxlen: 24
61.14.192.0/21 maxlen: 24
103.239.200.0/22 maxlen: 22
202.81.160.0/20 maxlen: 20
202.81.160.0/22 maxlen: 22
202.81.164.0/22 maxlen: 22
202.81.168.0/21 maxlen: 22
202.81.173.0/24 maxlen: 24
202.81.174.0/24 maxlen: 24
203.76.192.0/20 maxlen: 20
203.76.192.0/21 maxlen: 22
203.76.195.0/24 maxlen: 24
203.76.196.0/24 maxlen: 24
203.76.200.0/22 maxlen: 22
203.76.204.0/22 maxlen: 22
219.90.80.0/20 maxlen: 20
219.90.80.0/22 maxlen: 22
219.90.84.0/22 maxlen: 22
219.90.84.0/24 maxlen: 24
219.90.86.0/24 maxlen: 24
219.90.87.0/24 maxlen: 24
219.90.88.0/22 maxlen: 22
219.90.90.0/24 maxlen: 24
219.90.91.0/24 maxlen: 24
219.90.92.0/22 maxlen: 22
219.90.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 03:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10019 (0x2723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: May 22 15:52:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=682f4836-8064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:fc:af:71:e1:f3:04:f1:13:a3:48:98:ae:
35:d6:9c:c6:b9:23:ad:eb:e2:04:53:27:d3:ed:38:
ed:f7:8f:8d:35:25:ea:0a:75:12:6a:5c:0f:73:94:
37:73:75:71:1d:b9:38:25:d3:1b:47:a4:2b:3e:9f:
e2:d6:c3:05:4a:12:07:1e:8c:aa:b2:00:e7:ae:2c:
f3:46:d9:ec:13:47:40:de:41:7e:b8:de:eb:cb:12:
2d:c9:ca:f0:53:f4:ed:8f:1a:36:ea:af:92:07:09:
2d:23:bb:b4:b9:d5:27:09:0b:39:7a:ea:1b:d0:5f:
cf:eb:a1:cf:af:7b:74:72:a5:b1:e7:f6:50:d3:31:
58:1d:6f:74:41:0a:ab:e7:cd:6a:6c:1a:d6:98:35:
c2:90:4c:49:65:67:59:7e:75:a5:2d:de:65:2e:a3:
8e:78:6a:29:33:a9:79:cc:7a:1a:73:1c:ce:fc:0e:
51:c0:5f:a2:e6:55:30:cb:a6:48:8e:1c:40:db:79:
bc:9a:08:81:ef:59:e0:13:a0:a2:68:3b:6b:77:3d:
43:83:b1:4c:a5:4f:d1:ea:19:0d:eb:03:5a:63:81:
3e:82:9b:c4:2e:89:0f:6a:ed:dc:6f:e0:a9:09:9c:
08:60:1b:2c:8a:f8:99:6e:a7:f5:a3:2c:eb:24:95:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:1F:1D:14:06:0F:DC:B8:39:30:4E:D8:83:E3:3C:D7:14:92:8C
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/057B6160354111F0B98A6C36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.216.0/22
61.9.0.0/17
61.14.192.0/21
103.239.200.0/22
202.81.160.0/20
203.76.192.0/20
219.90.80.0/20
Signature Algorithm: sha256WithRSAEncryption
04:00:a4:23:b1:d5:78:15:7b:da:3c:d8:8b:06:8f:12:64:87:
e4:ad:60:4e:95:a3:8f:09:7f:f7:7b:b8:94:f4:ba:21:8c:f2:
26:a3:f4:bb:1a:69:38:fe:19:90:3d:51:9c:7c:81:37:93:54:
f0:d4:9b:fa:a7:72:7a:88:82:e6:62:db:25:fb:d9:49:97:c0:
75:bc:b4:62:fc:06:85:3f:97:d4:55:0b:87:dd:e9:c7:ff:97:
4f:d3:db:fb:19:19:57:8f:78:5a:06:40:a2:9f:3d:1f:4c:6c:
e8:cf:f7:bb:ca:2a:e7:9e:d4:a6:b9:6d:ad:09:00:6b:7d:c6:
b4:c3:26:72:2c:8d:33:57:df:56:c7:a7:c2:1a:73:10:03:ee:
2b:a2:55:6c:84:66:82:cb:30:28:59:ed:40:68:68:7c:3d:fa:
77:94:ac:7d:44:cb:1a:f3:b6:57:c5:df:6a:12:05:4a:9e:5b:
0d:5c:ba:f4:11:bb:30:40:57:48:d3:f1:15:9a:a0:66:9c:9d:
ae:6a:90:2d:c0:a0:1f:12:7e:f0:f6:7a:21:04:d3:da:6c:1d:
75:8e:0b:43:9b:30:48:75:4f:16:b1:1b:f4:fd:72:a6:7b:bc:
d9:7f:b5:5c:a3:41:e6:ae:8a:0f:10:ee:ca:46:64:5c:27:b1:
4b:20:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:25 2025 by rpki-client