Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8D94D7F0E3FE11EFA9975414C4F9AE02.roa
File: 8D94D7F0E3FE11EFA9975414C4F9AE02.roa (raw, json)
Hash identifier: 4YRSquv5DXlwgwanyEgsO6pw0NoZUCvIiUSsuz/N7hs=
Subject key identifier: A9:29:8E:10:62:A6:E6:8B:50:B3:6A:59:56:E1:2F:FC:34:A5:5B:F1
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0C5A
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8D94D7F0E3FE11EFA9975414C4F9AE02.roa
Signing time: Wed 05 Feb 2025 20:19:51 +0000
ROA not before: Wed 05 Feb 2025 20:19:51 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 62425
IP address blocks: 14.192.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 22:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Feb 5 20:19:51 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67a3c7e7-387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:6e:c0:a8:ef:10:fb:86:ec:e9:46:40:eb:
61:bd:b4:12:b2:70:37:59:c8:7a:09:04:fe:63:68:
a1:19:6d:cc:3f:60:b6:2e:4f:d5:6d:07:e6:fb:68:
02:2d:91:5b:be:94:1c:c4:05:09:ef:4e:e7:c2:b6:
16:42:75:ac:47:96:1d:31:59:f6:8b:77:bc:c7:20:
aa:41:57:97:75:e4:64:41:b6:b8:4b:af:14:34:11:
e1:a1:22:5a:89:2c:87:bf:f1:e6:ea:39:c2:56:30:
38:05:6e:98:f2:6e:48:2c:ac:df:fa:c1:23:51:0d:
28:d8:2c:3d:32:2b:63:36:9b:a0:1d:7c:bd:98:51:
55:44:d1:93:27:74:4c:fd:19:85:a7:5f:3d:6e:7c:
3a:9b:b0:ab:9e:17:92:77:64:85:e0:9b:7e:f8:08:
32:c9:e7:64:4f:c6:43:75:4b:88:d6:52:ee:20:7a:
43:4b:8d:b4:e9:01:e7:21:7a:4e:9d:52:48:ad:60:
53:d0:27:c8:a0:b8:f7:33:21:a5:b2:37:8a:94:48:
08:e2:b3:88:ea:6c:31:ba:cf:c6:25:fc:4e:c7:c9:
89:9e:0e:87:21:2c:0c:d2:fd:4a:cc:2b:75:32:60:
0c:5e:5c:f6:90:a6:dc:b9:5f:a1:5a:02:2c:35:28:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:8E:10:62:A6:E6:8B:50:B3:6A:59:56:E1:2F:FC:34:A5:5B:F1
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8D94D7F0E3FE11EFA9975414C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.132.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:33:52:91:d5:9c:09:e5:7d:2b:5f:3c:53:de:5f:30:43:cf:
c9:87:0f:09:a5:39:27:b6:ef:90:d8:0f:df:f8:92:42:c4:be:
82:19:07:ba:f3:57:6a:60:06:00:72:43:af:dd:a9:28:84:df:
a7:b7:fa:0b:fa:5c:c6:42:3b:da:84:05:4f:8b:81:c2:af:91:
ec:c5:02:73:b5:82:19:d9:7d:c5:9c:23:56:b9:41:93:83:d7:
0c:1a:66:29:13:76:fe:20:df:3a:d2:0c:67:52:7c:b0:26:92:
6c:61:87:5d:8c:6d:26:46:c5:56:1c:67:d1:d2:75:e5:4b:07:
b1:1f:5b:f9:9f:ae:98:5b:b0:83:d4:ce:2c:07:ba:e9:0c:52:
49:20:1d:90:9f:52:60:63:dc:83:e4:77:be:7c:0e:ec:46:aa:
5a:40:fb:4b:31:86:7e:c3:b1:19:67:19:ad:c0:7d:b6:dc:33:
b8:36:42:54:ce:92:28:a7:01:a1:fb:63:ff:a4:d3:38:32:38:
c9:7e:dd:8f:d9:fd:ff:96:c6:6e:6b:16:a2:97:34:c7:e3:8a:
7a:cc:ec:8e:9b:a6:97:cd:b7:5b:7d:d0:e1:10:00:ce:fb:cc:
c9:4e:05:9c:d0:2b:72:35:31:d5:be:28:28:38:54:fb:75:b4:
9a:8e:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:12:34 2025 by rpki-client