Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
File: 79124A64AD5F11EE8824985BC4F9AE02.roa (raw, json)
Hash identifier: a7L7lKNPtYfySziG/XfT1NnNbYy7NvnTdqLiXqiZFdM=
Subject key identifier: 5D:EF:4C:FD:E8:0F:8E:DD:22:DC:D5:EB:01:6D:43:3F:5B:68:B6:F5
Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial: 011A
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
Signing time: Sat 17 May 2025 05:05:02 +0000
ROA not before: Sat 17 May 2025 05:05:02 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136765
IP address blocks: 36.50.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 16:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Validity
Not Before: May 17 05:05:02 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=682818fe-4243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:37:d7:a8:8e:73:4b:3d:89:b5:a5:53:24:
63:2e:3e:a9:8b:d9:c3:1d:3e:ec:51:ff:19:4c:e8:
11:53:b0:53:58:92:53:e1:01:a6:ad:82:c3:1b:bb:
41:aa:af:fe:e0:0b:ea:e2:c7:de:f3:f0:5d:f3:50:
06:c9:99:e3:ce:73:c4:f1:31:c4:7e:61:53:1c:f3:
58:80:0b:40:ad:8a:4a:da:43:2e:2f:14:91:0e:e2:
ea:ff:b8:a0:a6:73:c8:c9:11:63:78:cc:8a:08:87:
5f:be:d8:c6:8a:2b:cb:ef:3f:19:d1:87:bf:e4:dc:
36:36:11:d1:77:af:53:a5:c0:0e:b6:1a:f0:2a:a1:
4e:58:30:69:08:91:c6:c5:d0:d9:57:cc:89:eb:5b:
04:8a:90:0c:ce:a6:a3:79:94:3e:68:cb:21:c9:5d:
44:9f:52:d0:50:60:7e:a2:f2:b5:fd:3c:bc:96:c2:
ec:4a:53:9b:8f:c0:9b:f1:d4:e6:89:ff:5f:99:dd:
74:ca:59:f5:54:93:82:bf:2d:75:bc:5b:70:2f:34:
68:b4:52:2d:14:20:b5:fb:d8:62:c1:ae:e6:ed:3c:
8d:5f:f0:1b:a8:40:c5:5c:d6:59:b2:a2:0b:75:fd:
3b:93:cd:27:da:6e:cc:a4:b9:7e:ad:09:5c:d7:0e:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:4C:FD:E8:0F:8E:DD:22:DC:D5:EB:01:6D:43:3F:5B:68:B6:F5
X509v3 Authority Key Identifier:
keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/79124A64AD5F11EE8824985BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:dc:d0:49:02:a7:07:20:e2:e7:14:b6:3d:26:7c:2c:47:e4:
d1:df:b3:57:f9:fd:48:0b:8c:3d:2e:b4:90:ce:d8:86:84:f6:
eb:c8:f3:bb:7d:ff:26:92:d8:bf:7c:4f:6c:5e:b1:43:2a:d5:
a1:a4:87:df:54:5a:17:95:9f:d5:4f:69:aa:a4:00:8b:a8:3f:
bf:22:f8:b9:df:cd:7d:f1:50:67:e0:f3:f6:4a:75:01:ab:bc:
d8:03:33:4b:e0:12:0e:a2:19:bd:99:79:ee:0e:bc:6d:a8:e5:
ff:47:a7:52:f9:35:d9:ff:35:db:7f:18:8b:d6:a3:ca:8f:1c:
c3:ba:71:92:4b:eb:72:9a:d7:b0:95:98:e2:b6:73:ad:68:05:
1b:24:d4:72:77:89:a8:05:36:6f:29:04:e0:03:d0:25:99:98:
0b:83:dc:f6:a0:30:2f:61:f0:b0:72:f5:e6:67:b9:c0:9e:2c:
d3:56:02:b1:63:62:cd:58:06:0e:f6:fc:ff:81:61:f9:2b:e5:
80:9d:e9:26:f8:08:2e:ee:07:ba:ee:4b:1e:e3:c3:17:49:21:
bd:67:06:08:ba:04:54:00:14:8a:ee:54:8d:6c:76:e9:79:81:
c1:9c:e9:ad:7e:bc:e1:98:ff:76:28:2f:c6:60:b2:7d:17:e5:
50:a7:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:36 2025 by rpki-client