Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/7ABDB67C30DB11F0AEAB3F79C4F9AE02.roa
File: 7ABDB67C30DB11F0AEAB3F79C4F9AE02.roa (raw, json)
Hash identifier: qv4E7dTwdELOTrIRkNclEDK5sW6eVnoo8TEwhEsu3LU=
Subject key identifier: C9:F0:84:BF:1C:0F:90:1D:1B:F2:74:41:80:21:D3:A2:E9:3D:8E:FC
Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial: 0119
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/7ABDB67C30DB11F0AEAB3F79C4F9AE02.roa
Signing time: Wed 14 May 2025 15:55:40 +0000
ROA not before: Wed 14 May 2025 15:55:40 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152322
IP address blocks: 157.10.134.0/23 maxlen: 23
157.10.134.0/24 maxlen: 24
157.10.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 11:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Validity
Not Before: May 14 15:55:40 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6824bcfc-0673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:9d:cc:34:e0:26:98:d6:ba:0c:af:fc:bc:
d9:60:80:29:9c:d3:ed:2e:20:9d:16:0c:6b:ff:68:
c9:c5:c3:7a:ca:db:c8:c0:94:4a:23:a5:69:9e:0a:
93:fb:28:25:93:b7:6e:86:0f:31:34:bd:2d:4f:0b:
c3:03:05:14:3f:1d:96:8c:20:99:e6:d2:63:f6:8c:
bc:80:93:22:41:32:97:74:ae:55:4e:9e:fd:de:bd:
e2:f4:a2:ed:e6:95:99:27:7a:e5:4b:c2:46:45:99:
64:14:dc:46:28:fe:e8:b4:21:fa:9b:b2:cc:2a:8f:
63:64:44:08:aa:f8:93:a7:fa:ba:ac:c7:de:b3:40:
85:80:a9:8b:6b:90:79:64:e3:fa:a6:de:41:6f:b4:
20:0c:77:1c:08:c3:9c:81:15:59:ac:89:5a:d0:5e:
1c:0e:01:ad:1f:86:3b:08:0a:3d:d5:0e:fd:84:80:
d3:73:1e:17:2b:db:f1:6e:05:34:de:d0:ad:58:6b:
44:55:fa:1c:55:97:07:ae:ca:0d:23:80:e5:0d:76:
f8:2b:cf:4c:38:61:8a:d6:f9:2d:1c:8d:d7:29:3f:
d4:78:95:3e:92:33:95:31:d9:0e:35:87:00:cc:18:
e7:45:ed:32:5c:d7:96:a7:b1:89:c4:a5:71:dc:fd:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:84:BF:1C:0F:90:1D:1B:F2:74:41:80:21:D3:A2:E9:3D:8E:FC
X509v3 Authority Key Identifier:
keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/7ABDB67C30DB11F0AEAB3F79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.134.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:30:1e:0b:60:b6:23:1b:e9:8e:7f:83:6a:f1:77:c0:ab:1d:
e1:f6:47:b1:bb:47:08:24:99:29:e9:39:bb:a4:6b:ab:0a:8a:
4a:7c:58:77:99:92:f4:b8:07:a5:57:28:ce:e5:6f:1d:02:3b:
4e:eb:c0:80:f5:2b:5f:89:a5:09:7a:05:95:63:15:50:b8:d2:
9e:d0:33:c6:a9:44:8e:0b:32:9e:4f:70:11:0d:14:95:c8:b3:
e3:ef:f8:fc:78:1a:8b:c2:1a:24:65:55:43:8a:83:3d:2a:6f:
8b:05:a7:81:e8:62:16:a0:67:3b:f9:27:8b:6e:68:cd:ae:84:
a8:07:cd:d1:f9:3b:fd:c9:2a:dc:3a:22:9f:0f:d9:a0:a2:2f:
c9:44:24:24:0c:ec:8e:1f:1a:32:b7:fe:9c:51:f2:be:e2:0c:
24:d7:5a:e9:40:d1:d3:69:44:d2:30:54:59:f6:79:69:43:09:
68:69:c1:6b:dd:99:22:f5:4b:24:cd:fb:ce:94:51:4e:c9:22:
a1:03:3b:68:9f:a3:dd:b3:da:6b:a5:dc:5a:96:bc:11:cb:1f:
19:45:b6:ef:79:85:80:41:be:6d:86:bb:5a:7b:9a:0b:e1:eb:
d7:6f:13:ee:e7:02:bb:a8:21:6b:cc:d7:78:29:e2:2c:f6:f3:
b5:32:1c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:19:29 2025 by rpki-client