Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0B93EA661FD111F091F95F82C4F9AE02.roa
File: 0B93EA661FD111F091F95F82C4F9AE02.roa (raw, json)
Hash identifier: S8S/PVnEFdzRmwECm2IPzs3uiE5PL2ImPJmjhxClCr8=
Subject key identifier: 5A:D9:11:A4:30:09:9F:98:81:28:5E:78:A1:D4:5A:72:15:42:92:22
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0317
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0B93EA661FD111F091F95F82C4F9AE02.roa
Signing time: Tue 22 Apr 2025 23:25:15 +0000
ROA not before: Tue 22 Apr 2025 23:25:15 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 3144
IP address blocks: 202.155.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 05:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Apr 22 23:25:15 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6808255b-5cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:b8:bf:26:28:9f:cc:ec:7c:ce:8b:9f:03:
8a:fd:15:c7:7d:e1:64:24:4c:ac:3e:f6:6a:e2:79:
6b:27:36:6a:17:12:28:f7:3d:c4:57:51:dc:cc:13:
e8:3d:90:de:d2:41:e9:17:51:f4:30:86:d3:78:03:
f6:79:bb:29:95:8f:28:3d:34:1e:2d:92:5f:38:02:
dc:eb:84:50:a1:00:b6:05:12:25:d5:52:29:a3:b4:
25:c2:be:7b:4e:1f:9c:cb:b1:5c:ff:fb:c6:d2:16:
14:d1:a4:87:15:64:ac:d1:b3:a1:2c:d3:67:d6:3b:
a2:ef:07:85:d1:6f:79:68:e2:07:45:55:bd:dd:e4:
0b:dc:29:86:9b:ff:48:78:3d:1a:32:38:a8:74:84:
7d:b7:d5:66:98:a9:b9:0d:03:0e:22:d7:4f:cb:35:
b8:0b:87:01:bc:6a:a0:f4:8a:98:54:ae:08:22:d3:
e1:98:9d:95:dc:31:84:70:72:1c:ff:09:7e:e7:e5:
aa:37:8a:d3:81:00:22:e3:f8:9f:e7:4a:d3:4b:9a:
2c:b6:c4:12:a8:69:6f:cf:92:2e:45:22:17:76:17:
8d:15:df:85:a4:bc:05:a3:d3:2c:f5:7e:08:02:69:
2c:88:c3:bd:02:13:6f:9b:2e:38:0c:1b:80:4b:30:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:11:A4:30:09:9F:98:81:28:5E:78:A1:D4:5A:72:15:42:92:22
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0B93EA661FD111F091F95F82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
71:57:6f:00:9d:c3:e3:d6:9e:31:80:d7:d8:cb:1c:d3:b9:3e:
b3:ce:bd:fe:2c:1a:72:7d:4c:c3:dc:a2:19:e2:6e:53:da:f0:
67:67:4d:64:fb:03:60:f7:c0:80:69:51:9b:86:10:73:43:2c:
e8:db:ac:5a:94:98:5d:05:2d:1a:63:78:74:bc:c8:ac:98:d1:
74:1c:c0:c1:33:c4:60:a2:2a:8d:b8:ef:6f:61:2f:9b:99:9b:
b1:dc:07:7c:00:b5:5f:7f:4f:2f:c8:98:b1:fe:44:65:3c:49:
20:00:80:da:e7:e9:52:e8:ff:ad:23:5f:5d:9e:f7:c0:83:07:
e6:aa:64:c9:46:fb:9c:17:0e:63:c0:bb:71:0f:40:4f:f6:be:
5a:00:b5:a1:06:82:37:e5:48:71:f2:d7:69:ad:d0:86:eb:fd:
0a:8a:85:7f:7c:00:e8:0e:00:27:7a:a5:3d:a4:78:29:52:55:
1c:de:a9:c1:6e:2e:f8:45:80:44:3b:d7:7e:8c:58:58:31:8a:
0f:ef:bf:59:46:de:f9:22:61:94:21:e6:a9:a7:f1:95:cd:03:
02:93:b5:93:67:7e:7c:5d:14:34:bc:3b:d1:10:e7:81:b9:2d:
a2:3c:29:fc:23:f1:8b:e7:ff:a8:7c:eb:70:0a:57:73:d3:6e:
bd:62:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:27:48 2025 by rpki-client