Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/35703D9A356A11F0A39ADD83C4F9AE02.roa
File: 35703D9A356A11F0A39ADD83C4F9AE02.roa (raw, json)
Hash identifier: hYQp8P1r8jYU7zFLOEa6+dp3ird2P9z0GFcJ7K4FUQI=
Subject key identifier: 4C:9B:C1:46:2B:7E:62:D3:B9:E7:28:50:28:B1:07:2F:B4:3A:EF:85
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 26FD
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/35703D9A356A11F0A39ADD83C4F9AE02.roa
Signing time: Tue 20 May 2025 11:07:24 +0000
ROA not before: Tue 20 May 2025 11:07:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.77.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 06:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9981 (0x26fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 20 11:07:24 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=682c626b-62f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:2f:20:21:6d:01:50:d7:51:30:9b:6e:da:
23:d6:c1:df:12:d0:19:6e:5f:7d:de:b2:2c:b9:f6:
59:5c:04:3e:57:1b:36:be:c4:a3:00:25:bc:a8:bc:
08:31:1a:a8:03:9c:b8:ae:70:23:ab:65:9f:bb:68:
15:77:04:99:70:5e:82:b5:68:97:b6:9f:21:57:38:
3e:0a:15:00:b8:ba:5f:f1:51:03:95:cd:80:74:f0:
b2:3e:ec:40:93:a4:ea:16:cc:52:36:41:16:6c:56:
c9:fc:d0:f9:2a:52:7f:e5:c6:1a:59:77:c4:ca:74:
ee:3a:c4:01:af:5e:e6:e7:0d:8f:be:76:bd:d9:5f:
f7:d4:57:c3:be:ff:e0:87:c9:9e:65:55:5b:3c:8d:
34:53:ba:cf:08:95:76:a4:d8:fe:4e:5f:71:f6:eb:
37:a1:48:05:3a:54:10:72:40:05:fa:4d:2e:4b:e7:
04:5d:2f:9a:d4:5e:a8:bc:12:01:f5:b0:81:54:67:
e7:16:99:e1:7c:2e:56:9c:8e:2c:ae:8b:c0:37:f8:
63:b6:5f:d4:aa:73:a7:f6:09:da:c9:f4:e4:3b:36:
b2:b6:87:bc:e3:16:9b:0f:62:f8:30:ec:61:4e:83:
59:9c:40:0d:82:1e:8b:f8:20:c9:3f:db:06:b7:a1:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:C1:46:2B:7E:62:D3:B9:E7:28:50:28:B1:07:2F:B4:3A:EF:85
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/35703D9A356A11F0A39ADD83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.77.0/24
175.110.81.0-175.110.83.255
Signature Algorithm: sha256WithRSAEncryption
38:67:89:ad:c7:84:e8:02:f3:6b:7c:d8:14:06:f5:0b:57:40:
de:e7:9a:b3:22:67:da:b3:db:1f:30:55:1a:24:64:f2:90:e2:
41:b4:66:79:e2:08:bf:47:ae:b5:71:2e:81:b8:53:c0:78:d8:
18:ea:4b:9b:6d:f0:3b:bf:76:3f:a2:2e:1a:3e:0c:67:f6:3e:
4d:18:5d:77:d2:dc:d0:a3:3f:6f:f2:42:07:ef:4e:fc:ee:32:
49:3b:eb:f3:24:d7:84:b3:57:5f:c0:96:c9:26:cc:ac:9f:01:
7c:2c:b3:78:68:a9:d5:7e:5a:38:ac:4f:f0:32:5f:4e:c4:27:
bf:8b:49:fa:23:33:e3:e0:e8:da:d3:7d:4b:50:26:d4:a9:da:
12:46:92:9a:ad:92:87:93:2d:77:6c:d7:86:c3:18:e2:b7:72:
3a:9f:b6:ce:d2:43:d9:b0:4c:d5:06:52:c6:58:ef:1e:8b:d6:
68:f3:6b:1f:81:f1:45:ba:e4:1f:80:53:72:f5:d7:52:9d:e4:
a2:b2:b9:17:e1:af:ef:a1:ed:67:4e:22:dd:8f:2c:b4:32:a0:
58:be:f4:02:82:46:52:b4:e9:1c:9f:d8:29:f8:27:9f:46:56:
fe:75:a4:4f:94:31:b4:d2:d0:30:52:39:9b:d9:57:f5:fd:e4:
2c:6d:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:52:26 2025 by rpki-client