Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E6D4693436CE11F0B090B225C4F9AE02.roa
File: E6D4693436CE11F0B090B225C4F9AE02.roa (raw, json)
Hash identifier: RJc0icDue7u/glizvg7GHLYBVV1ps7+OYpJhqBUCTQo=
Subject key identifier: 16:56:65:C8:09:D6:01:C2:A0:CD:70:D5:A4:C8:E3:70:20:28:CC:04
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 0225
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E6D4693436CE11F0B090B225C4F9AE02.roa
Signing time: Thu 22 May 2025 05:37:51 +0000
ROA not before: Thu 22 May 2025 05:37:51 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 36530
IP address blocks: 202.155.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 May 2025 06:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: May 22 05:37:51 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=682eb82f-f5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:f2:09:15:a7:fb:e0:ac:b3:0e:4f:12:1c:
5d:34:10:09:6c:a2:bc:44:7d:a8:af:48:ab:90:8e:
88:06:e5:7f:49:2b:55:43:44:7e:bc:9b:bc:5c:52:
0f:d1:b5:7e:24:61:4b:ba:61:f6:90:15:ca:6d:3a:
06:40:c7:0e:8d:27:6f:51:a6:75:d3:3b:2c:12:5e:
f6:85:ca:67:39:c1:95:3b:f3:fa:5e:bd:2b:49:fa:
08:ab:a5:1c:a9:f3:3f:c5:e0:f3:b7:c8:22:cd:3f:
80:ee:4b:36:ad:92:46:8b:01:e0:7d:17:29:31:7b:
94:50:dc:40:49:2e:42:42:87:10:57:3d:ce:f3:b8:
45:1e:9f:bb:d4:c0:fa:a8:62:be:b0:d1:59:81:0d:
ba:c7:66:bc:91:53:60:70:a2:1f:c9:8f:1e:14:e5:
fe:07:83:91:ac:08:ef:ae:a7:d9:4e:4a:7f:ca:41:
20:04:31:4b:41:70:f5:ab:b6:36:14:ea:7f:12:57:
b0:f3:89:8d:63:e7:be:6d:53:5a:5f:fa:c3:7d:d1:
b3:26:24:8b:87:39:69:c7:ae:f0:e2:0e:70:5b:5c:
61:25:a3:68:b8:b6:08:f1:d0:23:60:db:59:c5:e8:
6b:1f:7c:56:b8:fc:5a:f9:ab:d5:39:dd:b2:34:78:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:56:65:C8:09:D6:01:C2:A0:CD:70:D5:A4:C8:E3:70:20:28:CC:04
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E6D4693436CE11F0B090B225C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.120.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e8:e5:1d:7a:89:b0:1b:01:ee:57:99:5a:d4:f3:08:8f:41:
62:25:44:3b:2c:25:e6:f2:61:20:4a:9c:87:6e:76:b5:48:61:
2c:fa:aa:d6:eb:ae:75:81:2f:4a:40:f9:9d:8d:ca:a0:ce:bf:
27:d7:a5:7b:c4:35:1d:8a:f3:17:a1:22:5e:12:da:1b:a1:99:
dd:a5:d5:d8:98:04:6f:e5:01:00:9d:a4:0e:31:eb:56:39:62:
e4:74:b2:af:b6:2f:fa:43:3a:57:82:f1:16:b9:ab:d1:1c:50:
f6:cb:5d:62:95:64:06:b3:47:fe:18:ce:cb:f0:1a:e4:07:c1:
1e:fc:54:2d:a9:e8:26:c9:60:67:14:9a:2d:57:dd:47:7d:40:
35:16:4d:f1:ea:c8:5a:16:bb:a0:1e:82:4d:24:8a:fe:08:b4:
02:a7:9a:96:c2:84:82:a4:d9:22:42:89:5d:4a:4d:bc:5e:8c:
a6:51:4d:1b:5a:c2:68:de:21:38:a6:72:1c:b6:0b:61:17:4d:
eb:77:2a:8e:96:7c:dc:b2:87:33:34:41:f6:e0:60:64:4b:73:
7e:c4:3c:4b:2a:a0:dc:a7:10:05:9a:de:d9:24:6e:a3:9c:0a:
0a:ac:b6:bb:7b:24:f6:52:8a:b7:09:d8:49:8d:5e:96:89:d1:
90:25:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:31:08 2025 by rpki-client