Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/50737B7A3C9A11F095703759C4F9AE02.roa
File: 50737B7A3C9A11F095703759C4F9AE02.roa (raw, json)
Hash identifier: 0FoRufOSjiT0Vu2a+BGDKRNwD7BM/zMJh8TUtxMnQsI=
Subject key identifier: 37:74:29:3A:B6:3A:12:58:A0:13:1C:64:74:B7:BC:E5:D0:6E:6C:9C
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0361
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/50737B7A3C9A11F095703759C4F9AE02.roa
Signing time: Thu 29 May 2025 14:36:32 +0000
ROA not before: Thu 29 May 2025 14:36:32 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.141.0/24 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
218.33.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 08:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: May 29 14:36:32 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=683870f0-1507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:91:b4:e9:6a:01:d0:4c:d2:0a:a7:3b:5e:
9f:b7:ff:c7:5b:b1:5e:c4:ff:c6:8c:15:12:b0:de:
f4:f8:9d:00:a0:9d:2d:9e:da:30:c7:44:d9:66:11:
fc:d3:52:c0:fe:e8:40:13:12:79:e4:4d:07:42:05:
f3:45:ee:b4:7b:d5:39:1b:54:bc:af:a4:4a:31:ac:
e9:91:ec:3b:e6:3a:3c:17:49:fd:8c:b9:3a:33:69:
be:68:55:98:3f:16:3c:41:df:b0:8f:9e:ab:58:76:
ea:88:88:60:4f:68:1d:4a:7d:bc:09:be:be:5a:29:
e8:8b:65:da:ef:16:89:0f:9d:d2:4d:01:fd:0a:e0:
5f:84:87:85:32:c7:7f:88:c0:5d:11:be:a0:ad:b6:
4f:66:a0:8b:93:c4:9b:97:df:5e:5d:92:ce:47:fd:
21:56:f1:46:9d:98:dd:37:ac:23:b8:d7:a6:a5:ae:
d2:b6:54:2c:54:80:e3:2f:96:5c:15:a4:39:51:a5:
75:fa:4f:59:0d:63:dc:4c:6d:7c:6a:6d:5e:4f:df:
6d:86:0d:72:a9:71:44:37:c7:6c:23:54:89:41:f4:
b0:45:3b:24:97:9b:08:0b:57:9d:73:22:4f:e4:49:
32:04:3a:73:cd:86:f1:c7:e4:e2:36:01:32:64:e7:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:29:3A:B6:3A:12:58:A0:13:1C:64:74:B7:BC:E5:D0:6E:6C:9C
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/50737B7A3C9A11F095703759C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.141.0/24
218.33.80.0/22
218.33.92.0/22
218.33.100.0/22
218.33.124.0/22
Signature Algorithm: sha256WithRSAEncryption
53:4d:85:b2:ad:1a:15:4f:1f:94:a0:aa:4b:1c:27:82:fd:f1:
5b:84:41:ad:31:9e:e5:64:26:45:20:ba:99:db:4f:2a:c5:a3:
6c:02:21:2f:71:bf:48:c0:a3:da:41:5b:f5:13:b4:17:d1:af:
ed:6b:8f:c4:01:41:7f:4e:58:55:41:0d:1f:f2:54:02:e5:64:
87:58:d5:ae:fd:42:bf:3c:65:a0:5c:76:42:53:35:36:84:68:
5b:de:b4:34:57:cc:95:f3:e0:b8:d6:5a:fe:bf:c1:70:59:eb:
a2:81:fd:4c:29:ff:a2:99:45:75:04:03:46:ff:69:54:7e:0a:
6e:df:d5:bd:67:78:d6:d0:df:fb:b2:d1:0f:29:59:1d:b7:ca:
94:86:af:46:8f:78:b1:23:3a:c7:ba:8e:1a:b5:c7:60:f7:48:
42:f3:72:8b:3c:85:51:86:6e:ea:94:12:2a:a5:57:81:d4:6b:
14:d0:57:65:4c:97:65:e1:0e:29:ec:f2:d2:7a:85:9b:d0:b6:
2e:53:88:69:48:aa:88:4b:c0:62:e6:28:20:3b:0d:99:87:e7:
c4:d5:40:ba:34:41:51:d7:3a:09:27:15:ab:47:36:8f:3a:a6:
b9:11:bd:ae:49:59:ef:37:64:03:61:8f:4c:4d:6f:99:62:92:
c3:ac:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:40:23 2025 by rpki-client