Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa
File: 425C78E48DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier: Jsh3F+SRNKBqY52aW+NwLa5q6gQv+u52pDqTp9IFfXY=
Subject key identifier: CE:EC:2E:D9:85:AB:DA:7B:6D:1D:D9:7E:F0:2F:1C:39:15:6D:87:1F
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 34DE
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa
Signing time: Mon 22 Jul 2024 14:40:26 +0000
ROA not before: Mon 22 Jul 2024 14:40:26 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 17980
IP address blocks: 203.209.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 02:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13534 (0x34de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 22 14:40:26 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=669e6f59-e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:a1:dd:11:d2:d8:d6:4b:93:75:39:a2:d3:
e1:a8:18:a7:22:11:05:8e:3c:63:2f:09:db:09:8e:
90:8e:33:6c:79:ca:5b:e6:a2:1d:5b:1d:d8:93:28:
7e:d7:02:6b:9d:b0:24:82:56:21:c4:a7:b5:fa:6a:
07:05:bc:f0:36:48:48:d7:14:91:36:2c:4d:18:ea:
92:bc:c4:51:40:e9:1a:e5:74:8b:f1:e4:27:c9:6d:
13:9c:34:df:51:aa:0d:69:0b:1c:5b:b0:e3:69:6f:
ae:a8:b6:2f:84:5a:d1:cf:4f:f8:84:01:70:ec:32:
4d:77:78:f1:e6:9e:44:0c:d3:33:32:5f:d4:47:16:
6d:e7:9b:35:72:7b:04:5c:44:a9:ea:bc:cb:59:3b:
a1:86:1b:06:07:ba:c8:42:22:84:ca:96:b8:80:c7:
b3:86:bb:7c:c4:42:45:c1:6a:44:43:4a:38:67:c2:
3c:14:99:a9:19:e4:f2:f6:0d:92:9a:81:19:65:14:
bc:f2:7d:4b:29:3e:73:f8:60:94:b2:f4:39:95:c4:
d9:79:a4:04:e2:57:d2:81:fe:79:a2:eb:7a:cf:af:
4e:ab:1c:ae:95:53:8b:91:03:02:33:7c:22:bc:a1:
8b:6c:14:74:c1:06:03:2b:7b:75:56:e8:ff:e7:59:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:2E:D9:85:AB:DA:7B:6D:1D:D9:7E:F0:2F:1C:39:15:6D:87:1F
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.209.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d7:5d:5d:0a:dd:c5:65:63:b7:22:96:89:ee:28:62:52:54:
f1:04:04:c0:95:43:49:6c:99:51:22:02:b2:28:33:b6:79:64:
50:43:a2:f1:83:e0:1e:f5:f9:e3:87:de:20:1f:67:f8:dd:e4:
38:0d:8f:0d:31:61:e8:65:47:0d:6a:3a:4a:4f:c5:c0:2c:88:
41:92:74:d9:ee:19:9c:f9:4b:fa:66:e1:19:22:97:74:dc:89:
e7:7a:7b:e3:fa:47:59:b3:8c:9b:00:9d:19:b5:22:90:13:fa:
b0:90:7a:d0:31:20:7c:17:5c:47:23:43:e2:90:74:bb:2b:5e:
01:f9:25:54:a9:0c:7f:67:64:07:6c:9c:50:dc:08:51:32:c3:
3b:e1:c9:65:8e:94:c2:7c:c8:f5:88:c3:62:60:e3:7b:2c:be:
4b:8a:8a:a9:82:32:f8:9d:68:fe:27:db:d4:9f:53:34:50:7e:
47:5f:3b:d7:87:a2:e4:e9:e1:8c:ba:09:d7:5b:e5:cf:2c:f2:
05:74:16:cc:75:be:64:f9:c2:10:07:a3:fd:c1:f6:d6:29:69:
77:54:ac:44:da:7d:ac:7a:d6:d9:f4:b3:33:58:5d:78:4b:db:
35:cf:f5:3c:a9:d9:05:69:8d:d9:ee:8c:f6:6f:79:fb:7c:48:
1e:5c:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:41:25 2025 by rpki-client