Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2B0CD694388311F0ACBE9467C4F9AE02.roa
File: 2B0CD694388311F0ACBE9467C4F9AE02.roa (raw, json)
Hash identifier: VHHN7x2W0BRSGbzAK+LYD4Umhs0uew17t6g/TBn9nO4=
Subject key identifier: 7C:3D:97:A3:C6:6E:FF:14:DB:6F:F7:B0:B5:09:F9:8B:1F:8A:AA:D2
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 022D
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2B0CD694388311F0ACBE9467C4F9AE02.roa
Signing time: Sat 24 May 2025 09:40:46 +0000
ROA not before: Sat 24 May 2025 09:40:46 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 140389
IP address blocks: 202.155.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 00:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: May 24 09:40:46 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6831941e-532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:a8:7b:95:90:77:b1:03:8d:f5:7d:e5:79:
ef:db:54:6c:43:86:63:f1:07:8e:47:0a:02:89:41:
d8:2e:54:36:45:1b:56:7a:db:60:6f:72:66:4a:c4:
49:3e:b4:e9:85:ca:91:9a:85:0c:86:ee:3b:94:63:
7d:0f:88:f5:c8:51:5a:42:3b:51:cc:ff:30:d3:74:
f4:df:39:66:b3:8e:ec:2d:47:1c:58:a8:39:f4:e5:
37:6b:b1:cd:15:67:0d:0d:c6:ae:1b:aa:4e:75:33:
4e:4f:1f:6b:8e:23:2f:a1:78:e2:27:cb:54:b1:40:
d3:85:22:79:aa:8f:e7:f2:3f:81:bb:ce:e0:4f:ac:
01:2a:d3:0f:a0:27:a0:87:7d:6f:49:91:df:35:61:
25:fe:fb:71:39:04:14:e0:62:0c:67:43:b2:96:d3:
7e:4c:c7:fb:04:25:fb:01:0d:ec:d7:7a:51:ba:17:
14:98:18:2a:0a:01:ee:40:7e:45:9b:61:74:78:9e:
92:82:cd:f4:a8:cd:a8:79:2e:96:ad:2a:cc:c7:1f:
47:24:f7:d9:c9:17:51:40:10:a2:8a:90:56:9e:04:
91:94:91:f2:34:9b:79:b7:9d:dc:79:0f:0e:be:78:
7a:91:20:80:ef:30:72:e7:36:35:63:b7:cd:73:9b:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:97:A3:C6:6E:FF:14:DB:6F:F7:B0:B5:09:F9:8B:1F:8A:AA:D2
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2B0CD694388311F0ACBE9467C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:90:be:e7:d1:d4:3a:85:20:b3:73:e2:be:1d:b6:6d:ce:65:
67:5c:9c:0d:bc:38:53:9b:de:6f:50:8c:11:61:7f:2d:92:1c:
67:4a:04:dd:d7:40:7d:58:ec:fe:6b:cb:69:53:95:af:8c:57:
07:a2:55:40:c0:8c:a8:9e:bd:43:b0:94:90:cb:3a:c1:39:9e:
ba:a4:71:1f:97:d6:b9:88:19:cb:a8:62:e6:fb:60:31:e9:e7:
8c:06:25:ac:35:94:41:17:26:b1:bf:b1:8f:44:b2:ee:50:02:
13:27:0a:0c:b3:cd:f2:e4:ed:98:16:a7:1c:de:a2:cf:f7:4b:
29:6d:63:43:8b:64:d8:21:3e:3c:1b:96:4a:f3:e6:28:64:3c:
be:69:ac:96:c2:13:b3:1a:ac:0f:06:c3:2c:b4:9d:67:d0:98:
01:cd:ed:30:d5:7c:25:b5:80:7b:22:c4:8a:1d:f7:49:a1:94:
62:fd:11:34:75:14:df:d8:92:30:cf:f7:b1:fb:7d:c1:17:fe:
2a:f6:fc:14:7a:63:28:66:6d:70:30:d1:e1:ea:73:30:64:ab:
d7:07:ad:42:83:ff:04:dc:5e:04:a2:cd:aa:9c:47:a1:f7:8d:
a3:e4:d7:01:0c:01:02:da:2c:35:a8:04:91:55:14:99:6c:a6:
27:37:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:06:54 2025 by rpki-client