Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/24F393C839EC11F0B3F4840CC4F9AE02.roa
File: 24F393C839EC11F0B3F4840CC4F9AE02.roa (raw, json)
Hash identifier: yyvNNuod+M/O7CaOEj6C5pPGsC6pOuufkyWAeQw0tUY=
Subject key identifier: 37:8C:AA:3F:71:3E:73:A3:E7:4F:8F:E5:AF:26:42:6D:34:9A:C7:95
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 273B
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/24F393C839EC11F0B3F4840CC4F9AE02.roa
Signing time: Mon 26 May 2025 04:44:44 +0000
ROA not before: Mon 26 May 2025 04:44:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 17970
IP address blocks: 43.255.216.0/22 maxlen: 22
61.9.0.0/17 maxlen: 17
61.9.0.0/19 maxlen: 19
61.9.32.0/19 maxlen: 19
61.9.80.0/21 maxlen: 21
61.9.96.0/19 maxlen: 19
61.9.96.0/22 maxlen: 22
61.9.111.0/24 maxlen: 24
61.14.192.0/21 maxlen: 24
103.239.200.0/22 maxlen: 22
202.81.160.0/20 maxlen: 20
202.81.160.0/22 maxlen: 22
202.81.164.0/22 maxlen: 22
202.81.168.0/21 maxlen: 22
202.81.172.0/24 maxlen: 24
202.81.173.0/24 maxlen: 24
202.81.174.0/24 maxlen: 24
202.81.175.0/24 maxlen: 24
203.76.192.0/20 maxlen: 20
203.76.192.0/21 maxlen: 22
203.76.195.0/24 maxlen: 24
203.76.196.0/24 maxlen: 24
203.76.200.0/22 maxlen: 22
203.76.204.0/22 maxlen: 22
219.90.80.0/20 maxlen: 20
219.90.80.0/22 maxlen: 22
219.90.84.0/22 maxlen: 22
219.90.84.0/24 maxlen: 24
219.90.86.0/24 maxlen: 24
219.90.87.0/24 maxlen: 24
219.90.88.0/22 maxlen: 22
219.90.90.0/24 maxlen: 24
219.90.91.0/24 maxlen: 24
219.90.92.0/22 maxlen: 22
219.90.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 00:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10043 (0x273b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: May 26 04:44:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6833f1bc-7a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:7c:38:ab:8d:ff:d2:b5:5f:be:f7:7d:17:
3c:89:17:f5:09:11:12:f4:11:a8:8a:90:76:db:eb:
fa:3c:03:b1:db:07:a0:27:8d:52:fc:05:b3:01:7f:
a1:83:b9:8e:c4:41:4b:14:e4:ab:ca:81:f8:b1:1d:
c0:0c:4c:f7:50:e2:8f:21:11:c9:08:dd:48:d0:ae:
e4:1b:5a:5c:0d:56:82:e2:7d:0e:7f:e1:82:5d:a1:
d1:cb:2e:16:f4:62:85:90:ce:be:8a:57:51:82:44:
08:cd:5e:e1:f1:f6:d3:51:17:0c:c9:86:80:77:c2:
6c:2f:73:a2:8f:e3:cf:66:16:5c:36:37:99:49:c2:
a0:61:4d:d1:1c:9a:7d:11:a9:1f:7e:f0:2f:29:17:
2d:a5:c9:1d:5c:ce:46:c7:7d:b2:1b:c2:2f:c8:73:
86:63:55:a5:e8:bf:f5:46:43:f5:de:89:a1:4d:d2:
1d:c3:7c:ba:35:ca:60:77:3b:00:22:9d:c6:64:66:
04:71:ab:f5:cf:dd:eb:9e:f2:a7:30:b0:7d:f1:a4:
7b:98:a1:fb:be:a2:f7:15:c9:7d:a7:97:ed:62:3b:
60:27:af:26:e7:e0:2c:56:89:2b:a4:8b:aa:22:b1:
8c:78:50:29:28:13:22:c0:88:8c:c3:70:20:85:55:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:AA:3F:71:3E:73:A3:E7:4F:8F:E5:AF:26:42:6D:34:9A:C7:95
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/24F393C839EC11F0B3F4840CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.216.0/22
61.9.0.0/17
61.14.192.0/21
103.239.200.0/22
202.81.160.0/20
203.76.192.0/20
219.90.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:af:d2:f5:8e:a1:bc:78:c8:1b:6e:16:be:e6:ca:c8:36:e9:
a8:95:eb:3f:11:bc:20:e4:66:eb:48:24:44:4e:07:3a:e5:b6:
42:75:cb:b8:4d:ce:1b:84:54:15:fa:53:49:80:50:93:e4:26:
63:01:2e:7a:58:02:4d:2f:ba:37:ec:6d:89:80:2f:2a:01:aa:
dd:a0:92:ab:81:5a:48:3c:c5:44:c2:47:b6:60:5f:10:fe:1e:
be:f2:64:fb:e0:7c:6a:3c:82:1f:71:ed:4b:77:6f:bc:5a:68:
98:f3:6d:41:98:a1:2d:1c:d4:e4:11:5d:3c:8d:10:89:15:4b:
25:ff:ab:9a:4b:02:c2:1c:5b:1c:3b:ce:bb:ed:46:c9:ed:5a:
1e:ff:8a:1c:b5:a5:41:7e:41:17:ac:c8:14:b2:97:d3:c9:0b:
21:ea:94:b4:b6:df:d7:dc:9f:7e:5a:0c:79:f7:2d:22:fb:b7:
a1:e3:fb:9d:66:99:81:2d:a8:1a:f6:d7:f2:e5:93:b6:30:b3:
0a:62:af:2b:86:7e:40:79:80:98:ef:c0:7a:30:ed:f6:fc:cf:
42:36:e3:6b:cd:e1:ca:c5:21:9b:12:83:5e:c0:02:31:e9:5b:
9a:d4:05:95:6d:fe:4f:05:fa:32:66:c1:a2:df:8f:6f:59:92:
09:68:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:06 2025 by rpki-client