Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/91630C303E9911F0B1E8BD6EC4F9AE02.roa
File: 91630C303E9911F0B1E8BD6EC4F9AE02.roa (raw, json)
Hash identifier: MmNZ5SRBS8apmbHmIyBPI//Jg7FER46gdOEsqhh4/Gw=
Subject key identifier: A7:37:4F:BF:A4:62:86:A0:BD:5E:EF:A9:B1:7E:61:60:75:C0:B4:F8
Certificate issuer: /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial: 0BB4
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/91630C303E9911F0B1E8BD6EC4F9AE02.roa
Signing time: Sun 01 Jun 2025 03:36:14 +0000
ROA not before: Sun 01 Jun 2025 03:36:14 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 174
IP address blocks: 2001:df1:6e80::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Jun 2025 04:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Validity
Not Before: Jun 1 03:36:14 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=683bcaae-6772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:27:4d:b2:1e:ef:a6:bf:ed:e2:8e:7d:4a:
c8:4c:6e:74:fa:47:b4:b2:4d:e8:60:00:9e:8e:af:
2c:64:d4:e7:36:0a:8b:48:46:58:20:01:8e:15:40:
c8:03:89:2f:b3:fa:f6:ac:06:5f:99:3c:66:b8:e7:
8e:b9:d0:b7:5f:41:a3:35:34:c3:4e:3c:22:e4:2d:
b0:22:e2:29:d7:d1:10:b7:7c:0c:17:8d:3b:33:02:
d0:e0:ce:dc:82:a4:87:98:2e:37:ce:bc:aa:46:28:
75:bb:18:e9:47:be:b5:f5:70:ae:39:cc:0f:68:0c:
6b:f9:d5:3e:2b:8e:b6:ea:87:98:15:28:68:95:eb:
42:2b:b1:d8:8f:27:18:b4:98:4b:80:91:20:89:81:
b2:25:86:28:27:32:30:62:ef:4b:23:54:43:c1:2c:
57:d7:f0:8e:7b:61:83:8f:57:3a:95:e4:47:23:5f:
1f:0e:fc:6c:6b:79:3f:5f:7f:8c:73:03:14:60:c2:
f8:0c:50:4b:79:d4:45:20:e0:1e:65:1a:58:0a:a5:
6c:71:64:8f:3e:6a:f7:7f:02:f7:0d:48:f7:ca:f1:
0d:05:15:b6:cb:3b:bb:d9:5d:ed:7d:aa:04:ee:d9:
57:cd:7e:4a:0d:5d:38:eb:7c:48:c4:7c:12:a7:a7:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:4F:BF:A4:62:86:A0:BD:5E:EF:A9:B1:7E:61:60:75:C0:B4:F8
X509v3 Authority Key Identifier:
keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/91630C303E9911F0B1E8BD6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:6e80::/48
Signature Algorithm: sha256WithRSAEncryption
77:cc:4b:26:52:61:ff:13:3d:96:f1:10:0e:a3:41:e5:f3:f7:
dd:17:72:93:9d:eb:88:61:ff:e5:c9:01:98:a8:87:f5:52:be:
a1:59:63:66:aa:ef:e0:6b:a2:49:43:19:ff:99:4e:88:df:13:
63:ea:c3:aa:59:5f:b4:92:0e:0d:dd:3a:2f:6e:ec:48:44:6d:
71:95:8a:65:f2:ec:4d:39:39:16:28:e1:84:92:32:6d:11:87:
1a:a6:1b:2e:7f:d3:fc:fd:d3:95:e4:0d:71:d4:4e:36:4c:83:
ac:c8:20:dd:70:bd:0f:be:29:1f:ad:c7:f3:f6:57:8b:59:30:
21:00:fa:64:68:72:39:d0:0f:df:70:b9:e9:21:b4:b5:b9:20:
38:e2:aa:7f:61:7e:54:53:05:33:d8:32:0f:13:54:ad:e4:bd:
24:74:ea:65:13:6a:1c:d2:79:bb:fe:8c:1b:1c:c6:c8:d6:5b:
7b:d1:6b:e8:85:95:71:53:11:c7:8c:de:40:aa:a9:94:d1:2b:
23:e8:82:14:ea:93:49:a8:95:e2:b2:d7:e4:79:9a:df:2f:cb:
a5:c6:9b:a7:48:e2:f5:eb:de:1a:d9:4f:ba:87:4c:6c:0a:97:
4d:df:1c:c2:a2:17:f3:2f:d6:ec:4c:44:e8:93:22:58:19:b4:
57:8e:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:05:42 2025 by rpki-client