Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/95DC41E8D59711EFAA02A50FC4F9AE02.roa
File: 95DC41E8D59711EFAA02A50FC4F9AE02.roa (raw, json)
Hash identifier: 2W3Tiks6tY8XwEA5Qn2SIaqLng68gKKhMYEgBVOvI18=
Subject key identifier: 22:85:7B:7F:EA:15:A1:B1:4F:44:94:75:13:A8:CB:E7:4C:C7:89:50
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0C16
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/95DC41E8D59711EFAA02A50FC4F9AE02.roa
Signing time: Sat 18 Jan 2025 12:27:30 +0000
ROA not before: Sat 18 Jan 2025 12:27:30 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 16589
IP address blocks: 111.92.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 27 Jan 2025 11:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jan 18 12:27:30 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=678b9e32-bff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:be:b8:0b:f5:cf:46:d9:bc:60:cc:70:d9:
0a:ef:15:72:b8:db:d7:27:78:bf:48:dc:23:7b:a2:
8e:1d:7a:fb:3f:d5:6f:ad:ec:64:ca:88:92:ee:a7:
38:71:bf:53:27:09:fa:f0:04:36:c3:75:c4:63:39:
5c:a9:4c:b3:84:a0:7a:e6:01:05:44:6f:db:bf:20:
ba:62:71:fe:d1:d1:fc:06:5a:61:23:a7:03:39:7b:
70:c1:68:55:bf:2b:b8:d3:e1:05:38:4d:ec:dc:71:
3d:88:c5:bc:88:bf:7b:bf:bc:c0:ec:b8:d7:4e:56:
2a:2e:db:8d:06:f5:16:8d:30:11:09:4d:df:6f:68:
68:5b:5c:c8:56:d8:9f:eb:91:70:09:f8:12:3f:58:
70:8d:9d:63:1c:81:86:22:7a:59:fa:39:3f:76:4f:
64:48:b7:ef:ca:48:7d:c2:d8:d5:e7:b8:4b:e5:9f:
33:d4:dd:de:c7:7d:12:11:bf:72:50:f4:1d:ab:5a:
83:97:34:28:0a:97:a9:ac:b4:66:f6:51:68:f0:c3:
69:6c:37:2a:45:49:33:78:f9:40:b7:9d:76:53:07:
27:a2:f8:c4:6b:bb:f1:93:56:01:b7:3f:24:f6:c0:
46:c9:0e:1d:63:02:3b:9d:0d:e1:71:6e:42:3a:90:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:7B:7F:EA:15:A1:B1:4F:44:94:75:13:A8:CB:E7:4C:C7:89:50
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/95DC41E8D59711EFAA02A50FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.92.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:d4:a1:76:a2:43:d0:01:95:3a:45:ad:12:20:f1:cb:cf:02:
6d:a9:60:8d:c1:0f:3a:37:ef:57:9b:4a:08:28:f4:29:de:f1:
df:94:e8:32:ea:09:12:01:b8:19:97:b3:02:dd:f3:9a:7b:b3:
af:bd:7d:f1:bc:51:9d:d3:0b:bb:af:c6:0d:66:79:8d:82:36:
1d:ef:70:30:08:15:ea:3b:80:f9:ba:f4:c9:8f:e6:7b:98:b8:
87:aa:45:45:29:bc:c4:e0:37:30:89:a5:59:7a:cd:80:d5:3e:
b7:ef:16:fd:02:a7:91:fd:2a:3a:c9:05:5f:b2:a0:eb:c3:c3:
64:58:17:d3:15:1f:12:ba:85:04:3e:28:82:99:d0:31:31:74:
ce:9c:4d:06:79:b6:99:fa:71:84:a0:40:6a:6e:b1:3c:5b:13:
25:96:45:cf:db:7b:71:12:0c:3f:06:b4:97:70:37:38:65:c2:
62:55:93:3d:da:a9:75:4f:11:43:aa:75:bd:dc:24:33:a6:22:
0c:25:b0:f5:90:0f:ab:10:27:8e:dc:87:61:14:87:5a:9b:81:
8f:21:b5:8f:b1:e0:ff:fc:62:e9:45:37:d9:b4:7d:a5:41:10:
a2:69:ab:92:ad:b3:22:c7:d1:52:48:fb:53:96:1d:c5:11:d9:
81:46:81:4d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjUwMTE4MTIyNzMwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzhiOWUzMi1iZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9K+uAv1z0bZvGDMcNkK7xVyuNvXJ3i/SNwje6KOHXr7P9VvrexkyoiS7qc4
cb9TJwn68AQ2w3XEYzlcqUyzhKB65gEFRG/bvyC6YnH+0dH8BlphI6cDOXtwwWhV
vyu40+EFOE3s3HE9iMW8iL97v7zA7LjXTlYqLtuNBvUWjTARCU3fb2hoW1zIVtif
65FwCfgSP1hwjZ1jHIGGInpZ+jk/dk9kSLfvykh9wtjV57hL5Z8z1N3ex30SEb9y
UPQdq1qDlzQoCpeprLRm9lFo8MNpbDcqRUkzePlAt512UwcnovjEa7vxk1YBtz8k
9sBGyQ4dYwI7nQ3hcW5COpCEHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCKFe3/q
FaGxT0SUdROoy+dMx4lQMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOTVEQzQxRThE
NTk3MTFFRkFBMDJBNTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAVvXIAwDQYJKoZIhvcNAQELBQADggEBAKbUoXaiQ9ABlTpF
rRIg8cvPAm2pYI3BDzo371ebSggo9Cne8d+U6DLqCRIBuBmXswLd85p7s6+9ffG8
UZ3TC7uvxg1meY2CNh3vcDAIFeo7gPm69MmP5nuYuIeqRUUpvMTgNzCJpVl6zYDV
PrfvFv0Cp5H9KjrJBV+yoOvDw2RYF9MVHxK6hQQ+KIKZ0DExdM6cTQZ5tpn6cYSg
QGpusTxbEyWWRc/be3ESDD8GtJdwNzhlwmJVkz3aqXVPEUOqdb3cJDOmIgwlsPWQ
D6sQJ47ch2EUh1qbgY8htY+x4P/8YulFN9m0faVBEKJpq5KtsyLH0VJI+1OWHcUR
2YFGgU0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:44 2025 by rpki-client