Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa
File: F4995362191A11F0B13E9A6EC4F9AE02.roa (raw, json)
Hash identifier: 9YxYIN4P6Jw/HNtC1TN2JPmjeaEJ7PA+60oFtqzexnI=
Subject key identifier: 47:C7:92:9F:92:D8:65:E5:E5:B1:14:52:E5:BD:06:99:EA:4A:40:8A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 26A6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa
Signing time: Mon 05 May 2025 14:56:22 +0000
ROA not before: Mon 05 May 2025 14:56:22 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 115.167.9.0/24 maxlen: 24
115.167.62.0/24 maxlen: 24
115.167.63.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
175.110.80.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 06:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9894 (0x26a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 5 14:56:22 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6818d195-afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:06:64:d2:c2:bc:2a:f9:6b:5f:a9:5d:92:
77:86:40:02:3e:07:ab:8f:5f:93:f1:ca:f4:4f:8e:
c8:7e:b9:af:7b:4b:e1:0c:cb:ab:da:07:86:bc:17:
09:e4:cc:64:09:86:40:74:9b:83:f2:9f:43:c1:20:
9a:8d:83:c9:b5:f3:4f:da:df:64:73:34:cb:8d:03:
9d:f2:9c:16:1a:f0:ba:a2:6b:1b:93:d4:e2:d6:58:
23:be:cd:bb:34:4d:a2:2d:40:85:e1:74:a3:0e:f6:
58:a2:05:e7:a0:76:ac:74:b6:58:99:75:75:5a:dc:
b1:12:9c:7c:a1:02:b4:32:b8:07:9f:52:03:35:cd:
af:7f:9a:22:21:85:fe:cd:ff:41:f5:ca:b9:05:ab:
2b:ff:36:49:bc:0f:7b:e1:17:05:94:a1:af:4a:d1:
a2:e9:5a:a7:09:a6:c7:66:51:fc:b9:66:2b:a4:15:
42:14:2c:9e:34:76:f0:9d:fb:a6:38:a1:e2:63:08:
c0:c6:66:6e:b1:13:29:49:fc:70:e8:58:f1:d4:49:
26:4d:2e:19:fb:21:f5:7e:d4:92:e7:0e:13:84:7b:
40:4c:33:20:0d:ab:fc:00:48:09:20:2c:15:73:ce:
c6:5c:55:ef:26:36:61:24:ab:7b:49:0d:fa:f6:22:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:92:9F:92:D8:65:E5:E5:B1:14:52:E5:BD:06:99:EA:4A:40:8A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4995362191A11F0B13E9A6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.9.0/24
115.167.62.0/23
115.167.76.0/24
175.110.80.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ae:63:2a:5c:a0:df:ab:dc:56:bd:df:18:bc:09:57:35:e5:
9e:69:9c:aa:96:24:b8:a4:1c:e1:6d:fa:e8:da:51:06:9b:c7:
37:a3:db:70:d3:17:47:7f:35:92:09:14:91:b1:1e:83:77:6b:
19:cf:03:95:10:3a:b5:b2:ae:dd:3d:b8:86:99:ed:12:98:34:
f5:17:17:6a:ad:89:3a:a1:85:32:d6:73:2d:09:f4:dd:97:a0:
60:c3:54:bd:fe:8f:0f:73:74:73:ec:f5:fc:9a:a6:20:80:03:
69:c5:1c:5e:35:33:8b:15:3a:21:12:8e:c4:3b:3a:b0:9e:55:
98:b1:ba:04:de:e7:df:03:21:de:18:d6:a3:5b:84:d6:50:44:
f8:73:33:fb:04:3b:82:7c:52:cb:92:f9:1e:c4:49:41:a4:62:
4c:ca:de:d4:50:ca:7a:a2:cb:f0:f0:63:b1:48:08:e3:75:58:
04:22:db:53:88:53:f8:36:25:74:ec:67:1b:bd:c3:a2:c2:08:
90:95:9c:d2:bd:38:da:66:62:a8:0b:52:1e:03:09:47:93:5c:
df:9d:50:68:5e:92:b2:1d:99:fa:15:92:0f:22:9f:8a:32:0f:
45:45:c9:f5:ed:f4:c0:da:fe:bb:75:48:a8:d6:15:56:0d:c2:
a4:f1:8c:81
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICJqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNTA1MTQ1NjIyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE4ZDE5NS1hZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3G8GZNLCvCr5a1+pXZJ3hkACPgerj1+T8cr0T47Ifrmve0vhDMur2geGvBcJ
5MxkCYZAdJuD8p9DwSCajYPJtfNP2t9kczTLjQOd8pwWGvC6omsbk9Ti1lgjvs27
NE2iLUCF4XSjDvZYogXnoHasdLZYmXV1WtyxEpx8oQK0MrgHn1IDNc2vf5oiIYX+
zf9B9cq5Basr/zZJvA974RcFlKGvStGi6VqnCabHZlH8uWYrpBVCFCyeNHbwnfum
OKHiYwjAxmZusRMpSfxw6Fjx1EkmTS4Z+yH1ftSS5w4ThHtATDMgDav8AEgJICwV
c87GXFXvJjZhJKt7SQ369iJrkQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEfHkp+S
2GXl5bEUUuW9BpnqSkCKMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjQ5OTUzNjIx
OTFBMTFGMEIxM0U5QTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBABzpwkDBAFzpz4DBABzp0wDBACvblADBADfHe8wDQYJKoZI
hvcNAQELBQADggEBAAOuYypcoN+r3Fa93xi8CVc15Z5pnKqWJLikHOFt+ujaUQab
xzej23DTF0d/NZIJFJGxHoN3axnPA5UQOrWyrt09uIaZ7RKYNPUXF2qtiTqhhTLW
cy0J9N2XoGDDVL3+jw9zdHPs9fyapiCAA2nFHF41M4sVOiESjsQ7OrCeVZixugTe
598DId4Y1qNbhNZQRPhzM/sEO4J8UsuS+R7ESUGkYkzK3tRQynqiy/DwY7FICON1
WAQi21OIU/g2JXTsZxu9w6LCCJCVnNK9ONpmYqgLUh4DCUeTXN+dUGhekrIdmfoV
kg8in4oyD0VFyfXt9MDa/rt1SKjWFVYNwqTxjIE=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:47:38 2025 by rpki-client