Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/8CE5EE808E1A11EC96B4970AC4F9AE02.roa
File: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (raw, json)
Hash identifier: sH4E3ej5QjGMfMCSB84T2nKZUZJNE4E77ZVPlmTpXdM=
Subject key identifier: E9:BD:5E:CB:15:E0:B6:8D:96:39:C2:19:41:50:4E:04:66:C2:B3:05
Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Certificate serial: 08ED
Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/8CE5EE808E1A11EC96B4970AC4F9AE02.roa
Signing time: Wed 14 May 2025 20:57:32 +0000
ROA not before: Wed 14 May 2025 20:57:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51089
IP address blocks: 2405:f3c0:40::/42 maxlen: 48
2405:f3c0:600::/42 maxlen: 42
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4502, serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Validity
Not Before: May 14 20:57:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682503bc-7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:e3:12:a3:2b:5b:ab:58:f7:7e:e2:51:60:
38:8e:63:ba:51:e5:d6:be:24:19:73:c1:29:14:3c:
47:f6:f1:2a:17:17:f6:99:aa:10:92:e3:0b:4c:33:
1a:91:81:f9:88:f3:67:64:a1:c1:48:79:e4:21:bf:
cb:af:2d:93:85:07:b3:98:85:4c:04:ef:fc:64:62:
00:72:a1:48:b6:29:8e:89:c4:f7:8d:98:13:47:92:
67:da:1d:7a:dc:2f:ab:a2:fb:44:59:54:8b:e7:eb:
84:36:36:b0:62:9e:c4:e1:cf:98:98:2c:a4:e1:12:
16:3c:a2:f3:77:98:6c:03:2e:97:6b:02:31:9d:a3:
f6:ad:9b:85:7e:f5:fb:a1:a7:19:55:ac:e7:22:13:
44:8b:e1:a5:33:95:87:07:c9:60:fe:4f:11:aa:93:
71:81:36:6b:83:ce:4f:42:ff:00:4e:88:8d:9c:6d:
28:79:50:cb:b1:2e:77:cf:1d:ad:8b:aa:de:6b:8b:
f9:00:c0:ad:e6:7c:34:6c:56:37:9f:77:5b:7e:22:
30:5f:4f:73:2e:40:bb:ad:43:2b:df:cd:28:32:63:
62:20:fd:ef:45:a7:3e:ee:4a:b9:1f:37:d2:2c:93:
8e:a5:73:01:db:f7:8e:98:9b:de:b9:2b:de:e1:e6:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:5E:CB:15:E0:B6:8D:96:39:C2:19:41:50:4E:04:66:C2:B3:05
X509v3 Authority Key Identifier:
keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/8CE5EE808E1A11EC96B4970AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:f3c0:40::/42
2405:f3c0:600::/42
Signature Algorithm: sha256WithRSAEncryption
37:b5:f2:74:0e:56:7c:fb:2d:6f:0c:f7:f9:ec:26:44:b7:b1:
56:ac:3e:4c:c2:f0:d0:ae:66:5b:82:55:15:98:9c:ab:61:4d:
c2:26:b1:37:56:12:df:92:ce:79:4b:7b:06:5d:45:59:67:f2:
81:3a:1a:6b:13:ed:97:40:02:08:80:d0:10:50:1e:76:76:a2:
a2:bb:4f:6d:c3:a9:e9:87:ac:0e:95:6c:2e:30:fc:3d:3f:2d:
ca:60:94:26:6b:e3:82:23:d0:53:64:92:a2:0e:07:b4:93:20:
6d:1a:19:ec:07:6b:43:b5:74:b8:57:dc:4e:a1:85:ba:b8:b7:
6c:01:8c:55:f8:5d:b9:a0:4a:5c:63:7c:24:0b:a9:83:55:e3:
cc:5b:bf:04:7b:d6:fd:80:b8:88:0f:4c:cf:39:87:e0:26:48:
f2:bb:f0:ce:37:b1:46:5e:a8:c5:af:22:fe:4b:83:1e:54:9e:
26:ae:9a:62:21:1e:f2:85:78:29:63:26:f3:95:9d:1f:84:d9:
14:61:fa:b7:1f:9a:b4:2a:cf:62:e6:62:a4:93:cf:5c:93:e6:
c5:da:c7:43:60:c4:4f:ec:85:e1:7c:a0:cd:1f:2e:44:d7:f4:
81:d7:98:90:e9:b7:c5:02:0d:6c:cd:54:55:ea:9f:7a:c1:aa:
dd:79:47:0f
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy
OEU0MTREODgwHhcNMjUwNTE0MjA1NzMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI1MDNiYy03ZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjnjEqMrW6tY937iUWA4jmO6UeXWviQZc8EpFDxH9vEqFxf2maoQkuMLTDMa
kYH5iPNnZKHBSHnkIb/Lry2ThQezmIVMBO/8ZGIAcqFItimOicT3jZgTR5Jn2h16
3C+rovtEWVSL5+uENjawYp7E4c+YmCyk4RIWPKLzd5hsAy6XawIxnaP2rZuFfvX7
oacZVaznIhNEi+GlM5WHB8lg/k8RqpNxgTZrg85PQv8AToiNnG0oeVDLsS53zx2t
i6rea4v5AMCt5nw0bFY3n3dbfiIwX09zLkC7rUMr380oMmNiIP3vRac+7kq5HzfS
LJOOpXMB2/eOmJveuSve4eb+FwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOm9XssV
4LaNljnCGUFQTgRmwrMFMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1
MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzQ1MDIvNDBFMkRGQ0NCNTAyMTFFQUEyOUYyNzdBQzRGOUFFMDIvOENFNUVFODA4
RTFBMTFFQzk2QjQ5NzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwYkBfPAAEADBwYkBfPABgAwDQYJKoZIhvcNAQELBQADggEB
ADe18nQOVnz7LW8M9/nsJkS3sVasPkzC8NCuZluCVRWYnKthTcImsTdWEt+SznlL
ewZdRVln8oE6GmsT7ZdAAgiA0BBQHnZ2oqK7T23DqemHrA6VbC4w/D0/LcpglCZr
44Ij0FNkkqIOB7STIG0aGewHa0O1dLhX3E6hhbq4t2wBjFX4XbmgSlxjfCQLqYNV
48xbvwR71v2AuIgPTM85h+AmSPK78M43sUZeqMWvIv5Lgx5UniaummIhHvKFeClj
JvOVnR+E2RRh+rcfmrQqz2LmYqSTz1yT5sXax0NgxE/sheF8oM0fLkTX9IHXmJDp
t8UCDWzNVFXqn3rBqt15Rw8=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:53:35 2025 by rpki-client