Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/82FF3C9E660E11F0A0C6757DC4F9AE02.roa
File: 82FF3C9E660E11F0A0C6757DC4F9AE02.roa (raw, json)
Hash identifier: gArujQRDg7K7DGxinUrIeusidyeNehD+yViONHrdud0=
Subject key identifier: 69:B1:9D:BB:87:6E:CD:43:CF:D6:3D:9C:71:02:86:DE:87:5B:D8:F9
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0DA2
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/82FF3C9E660E11F0A0C6757DC4F9AE02.roa
Signing time: Mon 21 Jul 2025 08:41:36 +0000
ROA not before: Mon 21 Jul 2025 08:41:36 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 18811
IP address blocks: 14.192.133.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 04:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3490 (0xda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Jul 21 08:41:36 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=687dfd40-92fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:ec:d0:fd:04:1b:d8:d7:c0:be:f0:ba:5e:
0e:8f:4c:7f:59:9c:b2:16:49:ec:5f:0c:bd:17:f9:
7c:ce:0a:ad:a6:19:47:06:aa:f8:d5:54:34:f6:58:
be:23:f6:4a:b5:6a:50:a6:58:e4:21:4d:69:41:84:
79:d4:19:da:af:d2:4b:ae:60:7f:73:3c:06:d1:1e:
29:d1:7b:d7:3a:b7:c7:31:92:86:cc:f4:37:f5:be:
a8:3f:d5:e8:96:6b:26:8b:55:87:bc:a0:af:59:45:
8b:45:16:12:de:b2:65:44:31:e9:bc:1a:4c:29:6b:
63:43:51:0c:77:60:ce:f4:41:04:16:64:e5:5d:ee:
30:42:00:d8:2f:45:f7:3d:31:46:f9:8b:0f:8b:10:
37:40:6d:5b:30:1f:fc:b6:cd:95:07:6a:14:29:e8:
d3:cb:3c:cc:8b:14:a9:92:cf:04:ba:f0:fd:b0:4d:
9d:33:6a:00:16:02:ac:d6:96:72:e3:ec:e5:6f:42:
91:0b:43:90:0d:53:9e:66:18:d7:51:e3:87:17:a7:
f8:b9:ab:55:bc:08:0b:60:18:ec:4b:0f:d8:37:b6:
60:0b:31:af:3c:d0:67:69:a9:23:ed:72:df:60:5c:
fa:04:ab:5b:a1:12:3b:5d:8e:4c:b2:fc:9e:4f:df:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:9D:BB:87:6E:CD:43:CF:D6:3D:9C:71:02:86:DE:87:5B:D8:F9
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/82FF3C9E660E11F0A0C6757DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.133.0/24
14.192.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c1:76:9c:82:a4:dd:2a:2c:37:05:cd:4e:2d:4e:7a:6a:7c:
8f:59:34:2d:23:a8:cc:f3:d4:16:8e:1b:b0:3d:30:1c:34:30:
f8:ea:ae:4e:75:d9:24:a4:49:e3:ac:30:cc:76:52:88:a1:29:
d1:2e:61:4a:4d:58:90:87:9c:8b:37:81:28:e1:5c:24:40:df:
d3:85:9d:85:0b:e9:4c:f8:f9:2d:05:03:2a:ea:15:e7:97:1e:
56:53:84:f6:6c:1a:39:d4:79:3c:b6:65:33:7e:7f:27:88:75:
63:32:a1:5c:6a:88:5d:b7:17:73:69:c2:6e:fc:ae:b4:9d:54:
cd:e4:04:97:25:b3:bd:32:5c:49:0d:94:22:0b:fb:87:0b:44:
f4:67:c4:df:0a:7f:a3:50:b5:98:29:be:b4:ee:4e:d8:7f:48:
54:34:b7:37:2a:e7:ad:e4:12:94:52:58:57:c4:17:90:dd:c8:
47:72:7f:ff:88:6c:44:58:47:10:2e:d1:0a:33:46:f1:59:4b:
b0:90:fd:34:3e:35:2a:b0:d6:ac:3f:a8:cb:14:7f:b0:fd:2a:
af:1d:75:e8:b9:46:9e:fe:fc:df:82:78:19:a9:bb:89:b4:a7:
2e:7b:7a:4b:f2:27:15:a9:da:d2:1b:91:76:53:0b:a7:cd:1e:
c1:aa:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:22:42 2025 by rpki-client