Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/A1D43CC6519D11F087D63352C4F9AE02.roa
File: A1D43CC6519D11F087D63352C4F9AE02.roa (raw, json)
Hash identifier: 1dQd8ACwbc7sRQa9v+XA9EPWNUfGM2x1LFaFb6GxfX4=
Subject key identifier: F3:10:62:83:76:F3:39:55:27:72:3B:13:09:FA:63:2E:EB:6C:46:5B
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: 08
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/A1D43CC6519D11F087D63352C4F9AE02.roa
Signing time: Wed 25 Jun 2025 08:23:11 +0000
ROA not before: Wed 25 Jun 2025 08:23:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 23941
IP address blocks: 203.158.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 10:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Jun 25 08:23:11 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=685bb1ef-6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:5d:87:37:0e:31:c3:16:07:b6:9c:1a:d6:
e2:18:63:a1:a1:14:77:07:07:5a:0f:e8:c6:2a:f2:
e2:2c:c7:d8:2c:f1:2b:9c:f2:47:e4:f5:65:5f:0c:
8d:89:12:51:85:be:42:70:73:bd:ea:49:48:f7:43:
80:df:d1:0c:c1:c5:84:10:7b:41:a6:c9:5a:df:96:
89:2c:35:ca:c9:83:66:9b:7b:42:e9:52:3b:5c:46:
95:b2:af:fe:6e:6f:67:b6:fc:be:62:5e:a7:90:ee:
d1:80:2e:f7:71:91:c4:6b:a2:79:36:41:ce:79:b0:
54:c9:f6:9d:59:35:54:ad:52:3e:24:24:13:83:01:
d5:5f:96:c3:41:96:c5:d1:28:df:c6:4c:cf:4d:77:
c3:42:83:fc:57:8b:94:56:08:f4:39:89:9e:9f:40:
09:1b:34:96:8f:a8:9b:23:93:53:fd:07:0c:b0:3a:
a4:fc:4d:1b:ff:bd:32:11:ee:2f:9d:3b:60:0e:fd:
13:4b:82:0c:7e:44:7e:64:44:60:f7:47:94:d3:0a:
31:f8:bc:8d:b8:9d:2d:97:ce:09:2c:88:25:75:22:
5c:91:94:53:33:11:ef:74:f2:dd:6e:bb:94:db:bc:
bb:10:1f:5b:2d:d7:3a:ef:6b:1b:36:8c:ce:a9:52:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:62:83:76:F3:39:55:27:72:3B:13:09:FA:63:2E:EB:6C:46:5B
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/A1D43CC6519D11F087D63352C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.158.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:91:8b:15:74:82:da:65:23:62:43:9e:7a:7b:9c:ee:e5:a7:
e7:0b:47:56:78:44:4a:ca:74:d0:d2:37:a8:8e:a3:d0:4a:50:
42:a7:80:45:36:d1:af:99:8d:81:a3:39:96:c1:2b:c6:3b:15:
41:63:38:21:ac:57:6b:30:b4:87:68:2d:9d:78:02:56:04:f0:
70:bf:d4:ea:d9:92:6d:e5:e8:00:a0:99:d8:ec:c7:71:6e:28:
4e:97:92:a7:39:7e:97:bf:5f:b9:38:7f:9f:01:0e:4d:0a:6f:
04:f7:d9:cc:9f:73:ff:ff:0f:67:c1:42:4a:43:50:5c:34:98:
ff:9d:11:32:50:cf:45:01:8f:21:bf:7d:f2:4a:63:f8:a6:b9:
e3:88:30:f2:20:1d:e0:bc:dc:d9:ba:e7:74:5d:62:4d:de:f6:
40:16:97:d3:2f:e6:2d:4f:a7:0e:41:88:30:8c:50:8e:bb:44:
ef:2d:54:8c:1f:65:06:29:9e:be:4f:6d:ab:26:c6:e2:9a:de:
e2:31:08:1d:37:0e:96:18:18:ed:cc:f1:df:15:44:54:b6:47:
e4:ce:4b:25:bd:65:70:84:76:93:06:31:6c:63:b7:8e:16:8e:
75:fb:ef:be:d1:5d:65:96:39:d7:10:65:fd:57:72:f3:6a:cd:
69:cb:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 14:18:44 2025 by rpki-client