Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/F00EED50ED2B11EE98C44146C4F9AE02.roa
File: F00EED50ED2B11EE98C44146C4F9AE02.roa (raw, json)
Hash identifier: d3JCpwne1uQUGFg4yTWW1Ytpt+bN8JwU4BdVhc7F6aY=
Subject key identifier: A7:B7:72:89:58:1B:4E:84:03:EF:0E:3F:59:49:EC:B6:F5:C4:D3:42
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 03FB
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/F00EED50ED2B11EE98C44146C4F9AE02.roa
Signing time: Tue 29 Oct 2024 01:26:43 +0000
ROA not before: Tue 29 Oct 2024 01:26:43 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 7029
IP address blocks: 113.20.40.0/22 maxlen: 22
113.20.48.0/22 maxlen: 22
113.20.52.0/22 maxlen: 22
113.20.56.0/22 maxlen: 22
113.20.60.0/22 maxlen: 22
223.29.128.0/22 maxlen: 22
223.29.132.0/22 maxlen: 22
223.29.136.0/22 maxlen: 22
223.29.140.0/22 maxlen: 22
223.29.144.0/22 maxlen: 22
223.29.148.0/22 maxlen: 22
223.29.152.0/22 maxlen: 22
223.29.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 02 Dec 2024 09:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73
Validity
Not Before: Oct 29 01:26:43 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672039d2-cf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:90:c4:2f:4f:fb:8e:de:d5:af:68:70:c6:
9c:6e:0e:c2:88:01:14:fb:c1:20:69:c7:a2:46:30:
15:ee:3f:cd:00:81:4a:45:d3:e9:25:96:8f:d4:fb:
43:be:63:cb:1e:c9:a4:0f:63:70:4b:26:03:b3:01:
32:73:3d:54:74:e8:49:d9:e7:6d:fe:09:7c:d5:9c:
7f:75:b0:e3:ec:85:31:6a:f8:b2:5c:f8:31:e9:e6:
f1:42:3e:62:d3:89:1c:38:fe:5d:8e:fc:47:76:ff:
04:7b:7b:d7:87:1d:a8:5f:7a:3c:24:50:cb:3d:10:
70:3a:4b:6f:33:70:e8:83:e4:dd:31:44:d5:2e:d7:
83:53:46:d7:4f:1d:eb:8f:63:90:1b:13:6d:05:a4:
31:99:30:1c:bc:81:03:4d:2a:19:34:35:70:ec:f1:
6c:f6:db:8c:9b:9e:a1:82:c8:76:e4:a5:86:ac:b2:
5b:b7:35:49:90:30:04:63:23:34:40:5a:dd:b8:64:
53:9a:b0:13:21:7a:ce:f4:65:e2:65:a2:d4:c5:71:
0e:93:57:b3:31:6b:be:f2:dd:f6:57:61:be:ca:a4:
84:40:7a:c2:d2:44:f7:7d:ae:29:52:04:19:b5:48:
01:bc:e1:3c:91:08:fe:68:8d:10:2e:5f:85:a6:a7:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B7:72:89:58:1B:4E:84:03:EF:0E:3F:59:49:EC:B6:F5:C4:D3:42
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/F00EED50ED2B11EE98C44146C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.20.40.0/22
113.20.48.0/20
223.29.128.0/19
Signature Algorithm: sha256WithRSAEncryption
bd:8e:e3:28:5c:d5:bc:3a:f5:1d:f0:ab:3c:27:db:b9:db:94:
02:bd:05:8e:da:57:60:39:f3:0f:eb:6c:f6:4b:a9:aa:67:e1:
75:0d:f6:68:f3:a7:fd:64:d2:d1:9a:41:79:ef:19:37:80:76:
c0:ba:b4:89:a1:fa:f7:de:8f:18:17:ef:b3:1a:1a:b0:76:06:
f7:10:15:0f:33:51:43:d5:0b:04:5b:34:d8:d8:17:e8:49:79:
f3:0b:45:ff:1c:6f:93:b8:b4:1f:17:2a:4d:92:30:a1:dd:1a:
75:13:0a:fb:5f:63:72:47:d6:c3:9d:05:e7:c9:c4:e5:1c:83:
3c:2f:35:97:ab:2b:86:9d:f5:3c:06:82:de:ea:cb:59:eb:9d:
50:81:49:59:60:8a:2f:ef:55:b1:6e:44:1d:80:99:e0:e5:a9:
bf:80:72:05:11:8d:52:10:9e:f6:68:82:73:c0:ba:4b:b4:f9:
1f:64:ad:21:0f:20:ca:a9:8b:e5:6d:38:eb:d6:a2:58:63:fd:
c5:4a:cf:02:cd:63:6e:8d:48:b0:17:02:33:3c:a7:78:c6:fa:
6a:31:8f:4d:82:f4:22:10:40:89:07:ca:d2:a7:97:74:dd:c9:
d2:46:b8:a0:c9:61:28:eb:2e:bb:fa:aa:66:2c:cc:af:f7:17:
f5:43:5c:d4
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD
RUZBRjVBQkMwHhcNMjQxMDI5MDEyNjQzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzIwMzlkMi1jZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uOQxC9P+47e1a9ocMacbg7CiAEU+8EgaceiRjAV7j/NAIFKRdPpJZaP1PtD
vmPLHsmkD2NwSyYDswEycz1UdOhJ2edt/gl81Zx/dbDj7IUxaviyXPgx6ebxQj5i
04kcOP5djvxHdv8Ee3vXhx2oX3o8JFDLPRBwOktvM3Dog+TdMUTVLteDU0bXTx3r
j2OQGxNtBaQxmTAcvIEDTSoZNDVw7PFs9tuMm56hgsh25KWGrLJbtzVJkDAEYyM0
QFrduGRTmrATIXrO9GXiZaLUxXEOk1ezMWu+8t32V2G+yqSEQHrC0kT3fa4pUgQZ
tUgBvOE8kQj+aI0QLl+FpqdVwwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKe3colY
G06EA+8OP1lJ7Lb1xNNCMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG
MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvRjAwRUVENTBF
RDJCMTFFRTk4QzQ0MTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAJxFCgDBARxFDADBAXfHYAwDQYJKoZIhvcNAQELBQADggEB
AL2O4yhc1bw69R3wqzwn27nblAK9BY7aV2A58w/rbPZLqapn4XUN9mjzp/1k0tGa
QXnvGTeAdsC6tImh+vfejxgX77MaGrB2BvcQFQ8zUUPVCwRbNNjYF+hJefMLRf8c
b5O4tB8XKk2SMKHdGnUTCvtfY3JH1sOdBefJxOUcgzwvNZerK4ad9TwGgt7qy1nr
nVCBSVlgii/vVbFuRB2AmeDlqb+AcgURjVIQnvZognPAuku0+R9krSEPIMqpi+Vt
OOvWolhj/cVKzwLNY26NSLAXAjM8p3jG+moxj02C9CIQQIkHytKnl3TdydJGuKDJ
YSjrLrv6qmYszK/3F/VDXNQ=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:57:00 2025 by rpki-client