Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/7A84784436EE11F0BA36D351C4F9AE02.roa
File: 7A84784436EE11F0BA36D351C4F9AE02.roa (raw, json)
Hash identifier: hQ5RafMwQ0PcaE/Lo9obmmJy+GrYqPLOAy/3wFqQF4c=
Subject key identifier: 3D:50:8E:74:93:BE:22:A6:91:9B:9A:42:D9:F1:95:36:10:20:79:D3
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 0189
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/7A84784436EE11F0BA36D351C4F9AE02.roa
Signing time: Thu 22 May 2025 09:23:54 +0000
ROA not before: Thu 22 May 2025 09:23:54 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 13383
IP address blocks: 2402:be0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 May 2025 09:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: May 22 09:23:54 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=682eed29-a861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:4c:a2:0d:32:3b:0f:5a:ff:d7:aa:40:2a:
a9:6d:3b:66:d1:17:62:b0:c5:94:d7:7f:86:dc:76:
eb:f1:70:c6:16:84:1e:d4:cb:a9:b6:df:21:e3:03:
b0:a4:f3:94:d8:96:44:51:6c:19:cf:95:23:25:ee:
d2:63:c4:d0:c2:ad:a3:90:97:0b:48:57:38:df:4a:
b9:71:b0:d7:ad:5a:29:69:a7:96:d7:27:52:80:55:
12:e1:84:a8:d5:fd:9c:2e:26:61:d8:9f:98:d1:a1:
48:d7:6b:28:d0:a9:61:88:32:54:86:6a:22:2f:80:
5b:01:9c:db:26:9c:bc:76:4a:82:a9:2a:f5:7a:11:
5d:02:39:02:e9:f2:c7:26:43:11:bc:3a:ca:8f:db:
ec:4e:25:c0:87:f6:16:be:7c:6a:71:22:6b:7d:0a:
0f:23:84:3b:d7:c6:63:fd:13:77:59:7a:29:0c:82:
73:41:01:0c:b3:e4:f0:82:a0:b7:5e:40:56:65:37:
58:49:66:31:5c:c2:94:f6:16:6c:2b:89:80:bf:0c:
2d:87:41:35:ff:0d:38:e7:89:6e:82:6c:a8:c6:19:
d2:53:bc:ed:65:c2:7c:9b:2d:88:56:82:a9:c8:f8:
f8:07:4c:6a:d7:11:1c:98:65:c0:ea:86:f0:8d:81:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:8E:74:93:BE:22:A6:91:9B:9A:42:D9:F1:95:36:10:20:79:D3
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/7A84784436EE11F0BA36D351C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:be0::/32
Signature Algorithm: sha256WithRSAEncryption
66:0d:99:55:20:b8:04:31:97:a5:89:80:95:ba:92:fa:9c:47:
83:cd:e8:21:22:3f:08:46:5b:f9:87:55:6d:d3:43:37:64:ac:
11:cb:ee:e7:26:de:25:0b:90:2f:25:37:f6:0c:3d:e5:45:b4:
05:97:13:b1:6f:f8:a0:5f:ad:d7:9c:ae:fc:ed:14:6c:5d:72:
d4:79:41:d7:19:1f:c3:c2:af:ab:f8:69:3d:7b:71:39:1c:60:
bf:0a:16:d0:6f:2d:d3:5f:3d:68:01:4d:9e:3d:d1:93:74:3e:
c7:0d:b4:44:69:22:28:43:17:fa:86:b0:8a:04:38:5c:5f:60:
6d:24:07:4d:16:b0:2d:48:e3:2e:7b:3f:91:4a:22:d4:33:44:
9f:4d:33:09:76:6e:b1:bb:33:91:23:39:67:63:58:ea:94:7c:
38:64:6b:ba:fb:d1:71:20:f5:7e:d2:f4:da:ec:08:9e:b7:77:
dc:a9:72:e0:67:f5:ba:1a:44:19:a1:60:30:69:c1:ad:ce:f5:
93:74:70:53:c3:2a:0f:ec:aa:1b:52:55:70:bc:4f:de:eb:97:
d0:c0:5a:eb:86:80:78:1e:e6:7c:95:ca:e6:fc:a4:f4:db:fb:
01:d8:29:e0:a3:2c:4a:4b:d0:47:63:00:06:8a:ae:33:85:63:
59:f2:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:54:10 2025 by rpki-client