Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4312EE98256611F0B262730DC4F9AE02.roa
File: 4312EE98256611F0B262730DC4F9AE02.roa (raw, json)
Hash identifier: AXN69BLrHYV6ZzY4o9NugzvgCFG4T3y4+y+H3jz4FB0=
Subject key identifier: 86:B6:A0:0F:41:7C:F4:96:6C:EE:AA:71:DF:69:E4:6A:8C:3B:F7:54
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0A48
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4312EE98256611F0B262730DC4F9AE02.roa
Signing time: Mon 19 May 2025 09:20:23 +0000
ROA not before: Mon 19 May 2025 09:20:23 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9513
IP address blocks: 203.83.64.0/18 maxlen: 18
203.83.64.0/19 maxlen: 19
203.83.65.0/24 maxlen: 24
203.83.72.0/22 maxlen: 22
203.83.72.0/24 maxlen: 24
203.83.73.0/24 maxlen: 24
203.83.74.0/24 maxlen: 24
203.83.75.0/24 maxlen: 24
203.83.78.0/23 maxlen: 23
203.83.84.0/24 maxlen: 24
203.83.96.0/19 maxlen: 19
203.83.96.0/22 maxlen: 22
203.83.110.0/24 maxlen: 24
203.83.111.0/24 maxlen: 24
203.83.114.0/23 maxlen: 23
203.83.116.0/22 maxlen: 22
203.83.116.0/23 maxlen: 23
203.83.118.0/24 maxlen: 24
203.168.128.0/22 maxlen: 22
203.168.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 00:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: May 19 09:20:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=682af7d7-1e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:4b:1d:c0:e5:c0:ea:ce:3f:20:0a:15:50:
c0:8a:4d:e1:d4:03:3f:fa:89:81:aa:b5:29:29:bd:
64:ed:e6:58:fe:f1:19:bc:cf:8a:18:e0:10:7a:b0:
d7:22:4c:a3:3a:e0:c2:ab:f7:8d:b0:0e:f6:e5:00:
3d:d3:3d:22:67:c3:ad:4f:ef:c8:cf:84:91:0c:5f:
24:89:72:a8:10:3e:7f:8b:2e:d1:ef:18:59:c7:13:
42:62:cd:f7:cf:d6:f3:f4:07:b5:b6:ac:b4:51:f4:
bb:5c:c7:60:5c:7d:79:7e:e9:77:c3:52:c9:90:6c:
cf:35:de:56:21:f1:cc:24:18:6c:70:66:70:d4:ae:
09:4e:2b:e4:79:4a:18:73:04:b2:fa:ef:f5:27:b5:
39:a2:e1:15:df:c6:36:c1:e1:93:1b:36:d3:3b:1d:
ca:0e:47:66:10:17:a8:5e:c8:24:91:fc:8b:75:16:
17:a1:e9:38:d9:be:a6:54:ea:26:4b:3e:a1:cb:f4:
fd:95:3f:85:a8:ec:c6:36:8e:ba:f7:e9:af:67:ac:
09:25:18:72:99:66:ef:05:21:e6:c0:95:d1:25:83:
41:12:53:15:61:f4:db:08:35:36:eb:a1:cc:dc:47:
57:58:8f:fb:9c:50:6f:4d:79:2d:59:93:d2:95:dd:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:A0:0F:41:7C:F4:96:6C:EE:AA:71:DF:69:E4:6A:8C:3B:F7:54
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4312EE98256611F0B262730DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.83.64.0/18
203.168.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:34:a1:ba:21:5b:d6:f5:08:8d:ce:df:32:bd:b5:36:73:03:
84:eb:97:bd:f7:0f:bc:3e:f0:ea:66:2e:5a:6c:fe:41:99:2b:
04:fa:83:61:9d:06:bf:bd:76:9d:ad:a6:18:8c:b7:04:1d:37:
91:0a:05:e5:22:8f:37:c7:89:3d:2c:47:cf:32:c2:f5:6c:ec:
ea:a0:ac:89:e2:c3:5a:c2:00:0f:b6:f9:1c:f7:01:99:03:74:
dd:55:1e:a5:02:57:d7:fa:3b:10:1f:02:68:dc:05:47:61:eb:
f3:09:c2:b0:f4:3c:dd:ad:ab:a0:91:06:ef:ab:76:45:4b:c6:
4a:7a:7e:33:53:64:45:bb:79:b9:6a:a7:4f:28:94:2f:17:7f:
28:a3:11:45:92:b3:b6:63:d1:3f:93:67:38:21:a3:14:62:e7:
3a:f8:a0:8a:6e:12:80:c0:fb:d2:05:54:7f:63:d9:22:ea:38:
a8:43:60:01:9b:26:86:d0:de:b8:60:b2:df:0e:d1:f5:af:5f:
1c:33:82:f1:62:eb:4c:dc:4f:4b:49:27:c8:48:4d:b4:8f:f2:
4a:aa:70:a4:d3:0c:d5:43:04:cc:bc:68:a5:cb:1c:0a:30:83:
d5:38:c0:65:66:ee:2b:d0:64:34:72:82:d3:14:3b:a7:10:6a:
ea:76:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:13:18 2025 by rpki-client