Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9CDC48AC2A5C11F08E4E234FC4F9AE02.roa
File: 9CDC48AC2A5C11F08E4E234FC4F9AE02.roa (raw, json)
Hash identifier: 2oPBIk4MK6aaZcvphIdOCWQJNuv/J8CrlEPLFmrT1v0=
Subject key identifier: 29:BB:DD:35:DA:68:7D:EB:18:65:13:B1:E4:1F:4D:39:DD:7B:06:3F
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 033B
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9CDC48AC2A5C11F08E4E234FC4F9AE02.roa
Signing time: Fri 09 May 2025 00:58:36 +0000
ROA not before: Fri 09 May 2025 00:58:36 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.141.0/24 maxlen: 24
202.155.142.0/24 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
218.33.120.0/22 maxlen: 24
218.33.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 05:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: May 9 00:58:36 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=681d533c-a36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:e4:98:cb:9c:83:84:54:a0:3f:0d:82:29:
13:0e:a4:8a:70:b3:6c:d0:d1:c2:dc:27:23:f9:47:
95:9c:96:47:50:af:de:18:e3:81:ff:ed:3d:e8:6a:
91:d8:c9:ce:18:26:f0:b9:31:48:0a:6e:93:d7:26:
cb:57:05:50:9c:2e:ad:fe:63:f5:b8:e8:18:6c:c6:
a6:e2:22:3a:5a:fd:91:6b:b8:48:6b:85:3e:3d:17:
a5:05:e4:a2:bb:8b:73:a6:01:11:b6:9f:91:c8:52:
3b:50:31:c5:12:03:a6:60:82:07:90:a4:74:4b:40:
d0:88:c7:ff:04:df:44:37:5e:b4:bb:84:5f:09:23:
55:20:db:29:26:cc:77:f8:bf:5d:87:9a:7a:96:67:
14:c6:23:e9:bb:ff:22:f0:58:c7:ae:63:9b:1c:1a:
94:5a:47:f1:e3:54:b3:bf:46:f3:fa:d7:9e:23:5b:
fb:83:66:58:45:d9:b8:04:88:11:54:d7:fb:8f:df:
14:21:40:4b:cc:b5:45:6d:4b:94:f4:44:42:65:90:
71:fd:69:ac:9e:78:24:df:c5:cd:ae:ce:a0:bf:ec:
e8:26:55:ec:7a:ee:1b:c7:bd:27:49:3d:9f:95:e0:
79:dd:b6:68:47:ed:16:3c:2e:54:33:03:2e:ab:b6:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:DD:35:DA:68:7D:EB:18:65:13:B1:E4:1F:4D:39:DD:7B:06:3F
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9CDC48AC2A5C11F08E4E234FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.141.0-202.155.142.255
218.33.80.0/22
218.33.92.0/22
218.33.100.0/22
218.33.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:3a:e9:52:35:6d:f7:c8:ee:b7:cb:9d:cb:e9:26:f1:83:1a:
17:95:dd:6c:bf:a5:af:21:30:7a:34:dd:bb:8b:7a:e5:3b:73:
42:60:de:46:fd:3a:06:b1:c0:94:1d:80:67:4c:e5:05:b1:57:
79:de:0b:ce:6a:bb:ea:03:a7:91:52:65:f2:f1:2d:85:0f:9e:
81:d5:70:5e:49:ed:2f:1c:f3:4e:a2:91:f7:c8:7a:81:a8:2d:
f9:c8:83:26:c7:59:39:30:ca:99:53:4d:ef:af:de:cd:34:d3:
a5:3b:2d:eb:ec:40:66:12:f7:da:77:1d:f1:5f:a1:09:77:b2:
71:f8:00:eb:de:21:cd:42:90:08:85:6a:6b:6c:dd:70:e4:fc:
4a:90:83:5a:b5:46:c7:f5:8b:12:11:e3:d9:2c:0e:4f:98:e5:
c7:30:01:66:b4:27:fa:bf:b9:0f:86:23:d2:ef:7c:29:5a:fb:
14:c2:a1:42:9f:3c:fa:41:d8:b2:3f:dd:03:dc:9e:cb:14:35:
91:02:76:d6:e6:ea:97:ee:e6:23:5f:9a:7f:0c:2c:9f:c9:3c:
5b:cb:ff:f7:68:13:9e:f5:ce:b0:1e:ca:eb:64:e1:0a:72:75:
29:3b:1f:66:12:44:5d:9d:dc:3f:06:bf:b0:c2:a4:39:ce:75:
78:d9:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:48:44 2025 by rpki-client