Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/287B708E2FBE11F08F1D886EC4F9AE02.roa
File: 287B708E2FBE11F08F1D886EC4F9AE02.roa (raw, json)
Hash identifier: 34DlagC37p2jAiS28PAafuGofKYd/2DGFWtnHM05a7I=
Subject key identifier: 2C:9D:BF:4C:BF:05:BF:80:C6:8D:DF:97:2B:90:15:F0:C3:F3:03:B4
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0352
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/287B708E2FBE11F08F1D886EC4F9AE02.roa
Signing time: Wed 21 May 2025 08:23:16 +0000
ROA not before: Wed 21 May 2025 08:23:16 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.141.0/24 maxlen: 24
202.155.143.0/24 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
218.33.120.0/22 maxlen: 24
218.33.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 03:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: May 21 08:23:16 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=682d8d74-3b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:c4:62:18:9a:4d:95:7b:3e:aa:b6:fd:f0:
0d:12:74:bd:09:b6:2d:0d:fb:cb:37:11:1d:80:af:
f6:c1:fc:59:e9:c9:6f:42:76:ca:29:e9:01:e9:13:
8c:01:6e:d6:ff:ea:38:f5:99:ca:f6:80:e8:83:64:
7a:ca:98:de:99:90:03:d2:39:3e:af:68:79:15:8c:
ea:9a:19:76:41:a0:83:3e:45:81:22:38:2e:bf:26:
60:09:4a:16:72:14:fb:b1:09:2a:0d:2c:b6:78:20:
a7:31:84:b0:8e:37:7f:4a:d3:69:64:97:9d:83:f8:
a0:7f:32:9c:36:96:6c:80:1c:2e:49:9b:62:d3:ef:
5e:ec:9c:dd:b3:2f:14:df:96:9e:67:81:19:44:f1:
a8:b9:18:6d:87:e7:a9:35:ff:33:40:72:23:08:09:
70:c7:b0:4a:2e:e2:df:27:5d:bd:a0:20:63:3f:64:
8a:83:a8:b2:26:3f:c9:81:32:d5:07:b4:ee:75:bb:
59:5a:d1:04:40:e3:a0:d5:1a:ef:a0:78:0e:d2:07:
d9:07:d1:61:7b:cc:40:92:4b:b1:f3:50:6e:1c:36:
39:ed:85:e7:c8:9b:b8:72:11:09:87:40:74:a7:f6:
0c:54:b8:1e:dd:33:b1:95:6c:ee:1e:a7:68:25:89:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:BF:4C:BF:05:BF:80:C6:8D:DF:97:2B:90:15:F0:C3:F3:03:B4
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/287B708E2FBE11F08F1D886EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.141.0/24
202.155.143.0/24
218.33.80.0/22
218.33.92.0/22
218.33.100.0/22
218.33.120.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:a0:be:c2:5d:a5:85:58:13:19:a9:f6:69:ad:71:77:c6:d7:
23:ee:37:a8:e9:ca:33:a5:09:cf:bb:1f:60:9c:22:c3:ba:9b:
e7:56:79:8f:ba:40:65:b0:55:b6:a9:b2:22:aa:8b:32:75:1c:
b3:5e:b6:4a:0d:aa:dc:b2:f9:ee:a7:2a:bb:04:fe:d1:aa:4a:
99:36:bf:c8:0d:fe:10:10:cc:d1:d3:ec:7e:75:4d:74:1a:ee:
0a:a3:7e:00:29:60:85:fb:c6:5b:1d:b8:71:2c:79:c4:2e:5b:
be:16:c7:d9:74:80:8d:05:04:96:77:30:cc:25:6c:ac:79:b8:
15:b8:78:76:64:8b:07:de:7e:8f:a2:ef:bc:22:66:c5:0c:0d:
af:6d:3a:c4:fc:e4:5e:3f:cf:23:73:d0:86:6c:4a:27:93:c0:
4d:fa:11:0d:ca:a1:70:f9:9b:f2:a9:82:43:19:26:ad:18:57:
03:c0:83:ed:64:29:3c:0f:9e:ac:13:b3:05:36:82:93:0c:a8:
d7:03:0c:a1:9e:52:24:3d:a3:ba:01:e3:4a:0d:be:2d:19:16:
ed:f3:b1:10:57:a5:19:7c:cd:d5:6d:8a:5b:c1:fd:a1:15:97:
90:0d:04:b5:08:42:78:c5:cd:f1:98:0e:37:9f:49:76:34:17:
ae:53:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:33:44 2025 by rpki-client