Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73ED7E323AD511F088DD2815C4F9AE02.roa
File: 73ED7E323AD511F088DD2815C4F9AE02.roa (raw, json)
Hash identifier: IYQEOpe7Ep/j+JB5eeBNf6n1/HhmsgySLxGaP54jW34=
Subject key identifier: ED:F0:8C:B9:A9:1A:78:76:58:E9:99:33:3E:4E:00:26:2A:18:9B:CD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BC11
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73ED7E323AD511F088DD2815C4F9AE02.roa
Signing time: Tue 27 May 2025 08:34:50 +0000
ROA not before: Tue 27 May 2025 08:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139573
IP address blocks: 2001:df2:8f80::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 08:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48145 (0xbc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 27 08:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68357929-4a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:67:5c:81:ca:83:8e:2b:c1:24:03:e1:0f:
6a:90:c9:a9:95:28:20:8e:38:08:25:d8:83:a6:37:
41:a0:ba:3b:b4:a8:7e:39:5e:74:db:b1:8f:24:ec:
0e:78:ff:0b:c3:9a:d3:ff:04:32:f7:8a:cb:78:9b:
69:07:f1:a9:76:1d:d0:32:10:cf:e6:ab:a7:e4:67:
a8:5d:8e:f9:4e:e7:8c:55:48:26:1e:a8:3d:4e:47:
66:d6:2a:69:4f:bf:a3:dc:e0:94:84:92:3a:1f:3a:
8d:14:dd:85:bb:79:5b:69:5e:ca:80:20:1e:92:ea:
87:21:8e:9c:49:fa:00:80:77:1f:0d:55:ba:87:3d:
93:fa:a5:65:cc:bf:4a:d1:bd:a5:e5:03:f4:ec:75:
01:96:70:05:13:60:ce:44:0a:1e:b8:92:22:59:9d:
9a:71:89:38:c2:e5:f3:12:44:4c:ed:cf:3a:33:35:
0d:73:7f:ba:47:2e:36:72:e8:2b:0c:e0:65:81:2f:
f1:de:11:ce:61:4b:05:9a:c9:4f:b6:dc:6a:85:81:
21:ba:4f:42:04:75:46:fb:18:52:2d:db:36:66:6f:
cb:70:d1:22:cd:c3:b7:c8:54:92:6a:06:1f:93:5f:
ac:2c:aa:f5:e9:54:c9:f4:e8:e1:1e:cb:bb:de:54:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:8C:B9:A9:1A:78:76:58:E9:99:33:3E:4E:00:26:2A:18:9B:CD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73ED7E323AD511F088DD2815C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:8f80::/48
Signature Algorithm: sha256WithRSAEncryption
8e:fb:e1:8b:22:53:b7:1c:9d:3b:32:49:23:54:5b:06:39:d6:
19:a1:f5:11:55:aa:ff:e9:a5:4c:14:07:82:38:55:51:1a:d0:
43:3f:c0:f0:ea:97:94:b6:cd:de:da:53:0e:a7:e3:87:9f:58:
25:26:ec:27:6a:17:1d:61:8d:a8:9c:c0:81:e3:88:0c:3e:e7:
6c:ae:ff:3e:ff:8e:1b:66:dd:3e:68:9b:c8:58:9e:c2:7e:ac:
53:22:48:18:d2:31:3f:46:9e:49:64:f1:bb:ea:85:1d:a2:24:
73:74:53:c5:fe:1f:b8:7b:fc:2d:cf:8a:6d:83:30:f9:88:66:
8f:a4:e0:74:1c:19:6d:61:33:2d:78:6d:49:1d:48:21:78:86:
37:09:20:b0:4f:59:2d:a8:cb:f7:8d:cc:89:f2:6e:7f:05:23:
d4:71:53:4b:f0:c5:80:a6:9e:20:e0:ee:2e:17:df:de:09:b9:
52:88:dd:ac:d0:f9:7c:60:4d:0c:fc:f0:84:a5:86:bf:f7:2d:
a2:d2:d1:91:59:ab:6c:e0:0c:00:b4:82:88:2a:8f:42:35:70:
49:78:75:73:00:ef:f7:fa:07:f3:60:a7:46:ed:d8:97:ea:a8:
13:c1:ad:bc:27:76:51:cd:4e:f2:67:e1:f1:fb:91:c7:bf:b9:
51:13:2a:ea
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIDALwRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUyNzA4MzQ1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgzNTc5MjktNGExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOJpZ1yByoOOK8EkA+EPapDJqZUoII44CCXYg6Y3QaC6O7SofjledNuxjyTs
Dnj/C8Oa0/8EMveKy3ibaQfxqXYd0DIQz+arp+RnqF2O+U7njFVIJh6oPU5HZtYq
aU+/o9zglISSOh86jRTdhbt5W2leyoAgHpLqhyGOnEn6AIB3Hw1Vuoc9k/qlZcy/
StG9peUD9Ox1AZZwBRNgzkQKHriSIlmdmnGJOMLl8xJETO3POjM1DXN/ukcuNnLo
KwzgZYEv8d4RzmFLBZrJT7bcaoWBIbpPQgR1RvsYUi3bNmZvy3DRIs3Dt8hUkmoG
H5NfrCyq9elUyfTo4R7Lu95UrGkCAwEAAaOCApgwggKUMB0GA1UdDgQWBBTt8Iy5
qRp4dljpmTM+TgAmKhibzTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczRUQ3RTMy
M0FENTExRjA4OEREMjgxNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAIAEN8o+AMA0GCSqGSIb3DQEBCwUAA4IBAQCO++GLIlO3
HJ07MkkjVFsGOdYZofURVar/6aVMFAeCOFVRGtBDP8Dw6peUts3e2lMOp+OHn1gl
JuwnahcdYY2onMCB44gMPudsrv8+/44bZt0+aJvIWJ7CfqxTIkgY0jE/Rp5JZPG7
6oUdoiRzdFPF/h+4e/wtz4ptgzD5iGaPpOB0HBltYTMteG1JHUgheIY3CSCwT1kt
qMv3jcyJ8m5/BSPUcVNL8MWApp4g4O4uF9/eCblSiN2s0Pl8YE0M/PCEpYa/9y2i
0tGRWats4AwAtIKIKo9CNXBJeHVzAO/3+gfzYKdG7diX6qgTwa28J3ZRzU7yZ+Hx
+5HHv7lREyrq
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:25:19 2025 by rpki-client