Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DAE5E1323A2C11F09C99C60FC4F9AE02.roa
File: DAE5E1323A2C11F09C99C60FC4F9AE02.roa (raw, json)
Hash identifier: mHjkTr/6Jcu/icZE5aJbJIitwk9ftK18odRXBDcE1g0=
Subject key identifier: D2:A4:5E:2E:4C:DC:FC:86:08:8D:DC:26:0F:12:07:8C:F9:82:ED:F7
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 363F
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DAE5E1323A2C11F09C99C60FC4F9AE02.roa
Signing time: Mon 26 May 2025 12:27:57 +0000
ROA not before: Mon 26 May 2025 12:27:57 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 175.29.19.0/24 maxlen: 24
175.29.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 22:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13887 (0x363f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: May 26 12:27:57 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=68345e4d-9c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:82:c5:e2:1e:9a:03:21:32:a9:06:43:d5:
43:af:66:86:a1:a0:9a:7c:36:8d:cd:3b:2c:fe:e4:
3e:38:43:77:d5:24:73:95:81:99:18:d5:57:11:9b:
63:41:99:31:67:9e:60:da:af:5e:f2:7e:c9:b8:99:
25:94:eb:29:27:bc:8e:9f:94:7b:6d:08:5c:76:26:
b2:78:e5:c7:e8:00:4c:06:68:25:03:b6:34:e3:57:
d3:1a:84:04:c2:5f:9c:e5:f7:c5:8a:6e:b2:99:f6:
fc:05:72:a0:a9:ae:91:f9:42:36:c0:07:6f:29:1f:
a1:82:bf:bc:37:a3:9a:a2:d1:e4:4a:5f:d5:9f:42:
b0:73:6e:d8:9b:ad:3c:31:49:2a:df:ea:5a:ef:1b:
8c:a6:38:e1:49:b6:cf:88:76:e4:a2:e5:6e:86:9e:
4c:38:12:59:71:ae:60:94:50:f4:7c:dc:3b:9d:24:
ae:37:2f:e9:7e:15:bf:3b:d7:0d:68:4b:30:c7:bf:
14:69:71:30:fd:bf:da:07:94:32:69:66:28:ee:51:
1f:7f:da:3f:73:6e:f7:54:c7:59:ca:27:45:6a:49:
c0:65:34:52:21:7d:9d:ae:8e:2e:a4:71:f7:68:a2:
51:c0:7e:2a:a4:59:23:5b:dd:5a:b5:07:2b:da:4c:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:5E:2E:4C:DC:FC:86:08:8D:DC:26:0F:12:07:8C:F9:82:ED:F7
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DAE5E1323A2C11F09C99C60FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.19.0-175.29.20.255
Signature Algorithm: sha256WithRSAEncryption
06:6f:c1:e5:a6:9d:3c:19:53:8e:18:79:31:bd:a1:ce:8a:3a:
1b:15:65:73:0d:4a:1f:fd:0b:40:66:51:e4:fe:62:9b:3f:05:
d5:8d:a9:79:69:71:fc:5d:b6:18:8e:d2:72:60:fb:d4:47:e8:
5a:67:5e:fd:68:24:f3:7d:9b:b7:34:b1:86:2f:34:fa:4b:e6:
6d:aa:ae:f0:f5:12:df:77:ff:c5:7d:76:2f:b3:5f:0a:13:f1:
01:7a:ca:c9:8c:74:38:6b:bd:74:f3:f1:de:9b:b0:ea:e5:a9:
77:3c:6b:e1:59:1e:e5:13:17:a3:d1:a9:45:b9:c4:49:b5:d4:
82:a6:88:a8:b8:9a:b3:f7:61:1b:08:26:c8:a0:01:d5:30:e8:
19:5a:d4:b3:02:e7:f3:23:1d:93:d2:de:1a:5d:7e:6c:ea:00:
7d:6a:b8:d5:5e:6a:cd:86:fe:d5:ce:e9:e1:d5:d5:31:5a:ea:
81:f2:e5:ed:09:8c:c1:33:3c:eb:59:b3:0f:73:48:77:0e:32:
fd:f2:39:a5:61:ae:62:c3:29:3d:c8:38:0f:09:04:88:8c:e0:
de:23:d4:de:22:60:e5:cb:7c:40:09:cb:3f:3f:9f:b4:75:1e:
08:1c:a7:2b:6d:2c:70:04:49:56:7d:8d:14:f2:1f:a3:80:31:
65:9a:18:39
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICNj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUwNTI2MTIyNzU3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM0NWU0ZC05YzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zuCxeIemgMhMqkGQ9VDr2aGoaCafDaNzTss/uQ+OEN31SRzlYGZGNVXEZtj
QZkxZ55g2q9e8n7JuJkllOspJ7yOn5R7bQhcdiayeOXH6ABMBmglA7Y041fTGoQE
wl+c5ffFim6ymfb8BXKgqa6R+UI2wAdvKR+hgr+8N6OaotHkSl/Vn0Kwc27Ym608
MUkq3+pa7xuMpjjhSbbPiHbkouVuhp5MOBJZca5glFD0fNw7nSSuNy/pfhW/O9cN
aEswx78UaXEw/b/aB5QyaWYo7lEff9o/c273VMdZyidFaknAZTRSIX2dro4upHH3
aKJRwH4qpFkjW91atQcr2kwE2wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFNKkXi5M
3PyGCI3cJg8SB4z5gu33MB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvREFFNUUxMzIz
QTJDMTFGMDlDOTlDNjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAK8dEwMEAK8dFDANBgkqhkiG9w0BAQsFAAOCAQEABm/B
5aadPBlTjhh5Mb2hzoo6GxVlcw1KH/0LQGZR5P5imz8F1Y2peWlx/F22GI7ScmD7
1EfoWmde/Wgk832btzSxhi80+kvmbaqu8PUS33f/xX12L7NfChPxAXrKyYx0OGu9
dPPx3puw6uWpdzxr4Vke5RMXo9GpRbnESbXUgqaIqLias/dhGwgmyKAB1TDoGVrU
swLn8yMdk9LeGl1+bOoAfWq41V5qzYb+1c7p4dXVMVrqgfLl7QmMwTM861mzD3NI
dw4y/fI5pWGuYsMpPcg4DwkEiIzg3iPU3iJg5ct8QAnLPz+ftHUeCBynK20scARJ
Vn2NFPIfo4AxZZoYOQ==
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:15:33 2025 by rpki-client