Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/BC9719A0B11411EE9B803C66C4F9AE02.roa
File: BC9719A0B11411EE9B803C66C4F9AE02.roa (raw, json)
Hash identifier: IxH7gjXevIg2tTN50/4M7Aq8Xv7CHiU7ebSSRogqTwc=
Subject key identifier: 09:86:C6:B2:B8:A2:1F:34:31:3A:4F:51:4C:85:9B:EC:01:07:51:36
Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial: 02
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/BC9719A0B11411EE9B803C66C4F9AE02.roa
Signing time: Fri 12 Jan 2024 06:35:12 +0000
ROA not before: Fri 12 Jan 2024 06:35:12 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152327
IP address blocks: 157.10.174.0/24 maxlen: 24
157.10.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 06:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBD
Validity
Not Before: Jan 12 06:35:12 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65a0dd9f-7dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:ae:7a:da:8a:70:e4:0b:24:a5:45:39:41:
ce:5f:4b:f4:e3:b0:92:2a:14:4b:65:95:3c:82:4a:
24:85:1f:4f:0c:85:f4:d5:01:b6:d9:d1:a4:1d:21:
02:21:ee:fa:0e:f3:54:e3:57:1a:9c:26:50:f9:92:
34:59:20:f3:e6:5f:82:50:4c:fb:ff:92:8f:71:26:
fa:51:cc:c7:4f:26:ba:20:2a:7e:3e:e8:62:8d:b9:
43:d2:4e:44:b0:f3:54:c6:0f:cd:21:45:29:25:87:
b7:63:0d:4c:e9:b9:14:00:8b:a9:15:f9:9b:2e:e1:
4f:44:b3:d5:50:77:17:04:4b:7b:a1:e0:02:03:1d:
53:44:0b:f0:0f:b1:da:fc:b5:9a:e8:65:db:7c:04:
c6:14:63:25:97:ef:5b:f6:7f:2b:a9:0e:c1:ec:39:
b4:b5:1d:18:60:2e:0e:60:d4:af:71:20:23:11:3b:
f7:0d:b7:91:ee:a2:f7:7e:fd:f5:b5:2b:65:08:66:
23:bc:d2:71:c3:c6:49:33:ce:66:92:23:54:f9:6a:
57:1a:31:07:92:c0:64:47:25:7b:55:bc:c7:f7:6b:
d3:39:da:b4:a2:f1:84:a9:2d:06:eb:3a:42:7c:85:
62:74:37:d6:bd:82:58:56:bb:b1:3b:ae:f8:16:da:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:C6:B2:B8:A2:1F:34:31:3A:4F:51:4C:85:9B:EC:01:07:51:36
X509v3 Authority Key Identifier:
keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/BC9719A0B11411EE9B803C66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.174.0/23
Signature Algorithm: sha256WithRSAEncryption
51:94:da:78:7a:e2:d8:b2:68:1f:54:19:3c:c7:ea:f3:82:9b:
0b:6e:a8:59:4d:2b:c7:ab:60:42:0c:3b:57:f7:c1:f3:8d:0c:
15:0a:8c:f8:65:cd:6b:ee:14:77:26:d1:9a:f3:52:69:2a:f4:
45:0d:91:bb:80:9b:18:11:7d:2e:58:31:a1:f5:c2:31:6e:13:
1e:df:24:4c:26:09:72:61:71:78:ab:0c:1b:88:95:88:5c:be:
fe:b7:b8:84:5e:91:a8:09:8c:13:a8:dc:d2:b8:2a:04:68:f1:
f3:43:45:52:e4:a2:7c:da:ea:bb:c3:b9:35:64:f8:3e:46:e1:
a0:e0:5a:12:2d:4d:81:c9:2c:32:93:28:0f:8b:f9:b8:9d:e8:
da:c9:59:f1:a2:2d:a3:a6:13:af:a0:29:82:09:4a:8a:b9:88:
a5:f2:b8:34:5b:c7:e4:07:fd:cc:e9:80:23:65:45:9a:12:7c:
35:a8:c4:6b:77:e0:d1:72:40:80:8b:98:f3:fb:f6:29:aa:48:
2d:97:c9:bc:53:ea:81:e3:85:e7:55:a9:d9:0d:34:c5:0b:34:
f4:9a:96:8e:e5:b1:ce:3c:87:8a:8b:17:93:e8:22:d6:6d:4b:
16:69:8b:c2:84:f7:37:f2:32:57:e0:ff:04:c6:af:d2:15:ce:
15:76:38:ce
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
N0NCRDExMC8GA1UEBRMoQjQ4NjVFM0JFOUM1NjlEMkI5M0YyQzM1MUNBQjI0RDE1
MDZBQUMwRDAeFw0yNDAxMTIwNjM1MTJaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1YTBkZDlmLTdkZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC06562opw5AskpUU5Qc5fS/TjsJIqFEtllTyCSiSFH08MhfTVAbbZ0aQdIQIh
7voO81TjVxqcJlD5kjRZIPPmX4JQTPv/ko9xJvpRzMdPJrogKn4+6GKNuUPSTkSw
81TGD80hRSklh7djDUzpuRQAi6kV+Zsu4U9Es9VQdxcES3uh4AIDHVNEC/APsdr8
tZroZdt8BMYUYyWX71v2fyupDsHsObS1HRhgLg5g1K9xICMRO/cNt5Huovd+/fW1
K2UIZiO80nHDxkkzzmaSI1T5alcaMQeSwGRHJXtVvMf3a9M52rSi8YSpLQbrOkJ8
hWJ0N9a9glhWu7E7rvgW2sALAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCYbGsrii
HzQxOk9RTIWb7AEHUTYwHwYDVR0jBBgwFoAUtIZeO+nFadK5Pyw1HKsk0VBqrA0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3Q0JELzM1NzBERjJFQjEx
NDExRUU5NUU3NDM2NUM0RjlBRTAyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJB
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdElaZU8tbkZhZEs1UHl3MUhLc2swVkJxckEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9CQzk3MTlBMEIx
MTQxMUVFOUI4MDNDNjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZ0KrjANBgkqhkiG9w0BAQsFAAOCAQEAUZTaeHri2LJoH1QZ
PMfq84KbC26oWU0rx6tgQgw7V/fB840MFQqM+GXNa+4UdybRmvNSaSr0RQ2Ru4Cb
GBF9LlgxofXCMW4THt8kTCYJcmFxeKsMG4iViFy+/re4hF6RqAmME6jc0rgqBGjx
80NFUuSifNrqu8O5NWT4PkbhoOBaEi1NgcksMpMoD4v5uJ3o2slZ8aIto6YTr6Ap
gglKirmIpfK4NFvH5Af9zOmAI2VFmhJ8NajEa3fg0XJAgIuY8/v2KapILZfJvFPq
geOF51Wp2Q00xQs09JqWjuWxzjyHiosXk+gi1m1LFmmLwoT3N/IyV+D/BMav0hXO
FXY4zg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:29 2025 by rpki-client