Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/B31033564D8C11F09C620425C4F9AE02.roa
File: B31033564D8C11F09C620425C4F9AE02.roa (raw, json)
Hash identifier: 99cpqF9DKNQucLCgeqG5SSpV/0VEyQ/ug05+2k2HRPk=
Subject key identifier: 5F:C5:7A:6C:54:78:4F:CE:32:C9:7D:67:5C:FA:6C:56:1C:97:20:A8
Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial: 02
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/B31033564D8C11F09C620425C4F9AE02.roa
Signing time: Fri 20 Jun 2025 04:11:54 +0000
ROA not before: Fri 20 Jun 2025 04:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45158
IP address blocks: 203.56.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 02:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Validity
Not Before: Jun 20 04:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6854df8a-281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:e3:86:fe:81:ea:fd:09:6b:1d:d3:fe:77:
99:18:f3:4b:90:66:24:14:1b:ba:1a:0f:9f:11:c1:
1d:49:60:ef:b6:81:40:26:5e:ef:1a:f0:b2:d2:1e:
92:d1:ed:33:00:f3:85:b2:8c:d3:2b:44:36:d4:43:
44:40:15:96:03:71:09:9e:ee:3d:05:ef:07:94:f2:
78:37:e6:94:b2:af:af:d2:45:3f:2a:ca:28:a8:95:
1a:c6:32:3a:36:87:ea:6d:1b:cb:b9:a6:63:c4:c6:
b5:89:c1:82:70:aa:e0:f7:80:01:5b:99:99:12:55:
bd:28:35:7e:2d:9b:95:e8:67:14:d8:b5:23:13:fb:
c1:7f:b8:e8:22:e7:22:67:4c:50:db:fe:a0:4a:4c:
1b:79:f4:6c:22:74:42:ac:a6:6b:4a:bb:29:20:45:
39:ed:12:6a:00:b9:8c:b0:d9:85:42:bf:79:de:55:
31:1c:42:b8:6d:24:a1:07:3b:19:6a:a7:fc:0e:b5:
9a:5e:a4:0f:6b:66:d5:93:98:97:87:0a:68:7a:4a:
d5:4f:80:40:09:ce:49:ac:48:6f:f4:bd:3e:05:e2:
88:ba:2e:29:30:42:9c:ae:54:ee:ac:be:2e:1f:12:
fd:91:68:16:4f:29:d9:f0:65:3a:f7:58:60:70:e2:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:7A:6C:54:78:4F:CE:32:C9:7D:67:5C:FA:6C:56:1C:97:20:A8
X509v3 Authority Key Identifier:
keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/B31033564D8C11F09C620425C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.56.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:97:23:18:4d:1f:c1:cc:11:32:cc:07:9c:e3:f8:47:e4:85:
d6:0c:80:e8:3e:f6:53:1e:20:58:20:22:93:6d:88:fb:3f:4f:
b8:92:f7:7d:a8:83:23:e4:e5:31:92:7e:c7:97:08:47:22:f7:
e6:f7:8c:6a:63:dd:0e:dd:2a:0a:ad:29:87:0f:2b:73:f0:ac:
a0:2c:a2:7e:18:4c:96:93:eb:0c:50:77:9f:90:11:e3:b9:19:
8e:49:3f:1d:91:91:3a:fc:c7:e8:83:76:d3:83:a7:93:fe:9f:
f9:69:35:ea:74:65:e7:6e:f1:c3:47:b7:1a:6f:69:06:34:35:
1b:a1:b0:94:ce:82:dc:7a:44:7a:7d:7e:24:af:6b:02:cc:08:
6c:92:ea:c0:de:a0:1b:75:2e:96:8c:8e:ad:c3:db:ef:df:a1:
67:d6:f4:06:39:5d:92:dc:90:24:6e:30:0c:b8:ca:c7:5c:e8:
4c:96:12:08:bf:94:39:bf:54:e2:77:5e:ad:57:d0:37:90:c1:
0b:15:70:d5:00:2d:6c:ac:7e:9d:97:31:26:a0:7a:4d:19:c6:
81:99:e6:3e:36:16:ae:e7:ef:ed:4c:d5:5c:73:a0:eb:cf:9e:
db:47:f2:7b:c2:b6:70:52:54:b4:f0:b3:25:13:3c:24:ff:1f:
36:ba:34:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:21:35 2025 by rpki-client