Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/683B780E2B0411F093A3A681C4F9AE02.roa
File: 683B780E2B0411F093A3A681C4F9AE02.roa (raw, json)
Hash identifier: HeyHYXtLfrsHl9QGZHMqU4ELNXtffSTrrSd8LK5znG4=
Subject key identifier: 1C:98:05:BA:FA:B3:60:58:CF:7E:5F:CF:B1:E7:78:16:1F:42:23:CA
Certificate issuer: /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial: A9
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/683B780E2B0411F093A3A681C4F9AE02.roa
Signing time: Wed 07 May 2025 05:31:04 +0000
ROA not before: Wed 07 May 2025 05:31:04 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 56209
IP address blocks: 150.129.172.0/23 maxlen: 23
150.129.172.0/24 maxlen: 24
150.129.173.0/24 maxlen: 24
150.129.174.0/23 maxlen: 23
150.129.174.0/24 maxlen: 24
150.129.175.0/24 maxlen: 24
202.47.112.0/24 maxlen: 24
202.47.113.0/24 maxlen: 24
202.47.114.0/24 maxlen: 24
202.47.115.0/24 maxlen: 24
202.47.116.0/24 maxlen: 24
202.47.117.0/24 maxlen: 24
202.47.118.0/24 maxlen: 24
202.47.119.0/24 maxlen: 24
202.71.0.0/23 maxlen: 23
202.71.0.0/24 maxlen: 24
202.71.1.0/24 maxlen: 24
202.71.2.0/23 maxlen: 23
202.71.2.0/24 maxlen: 24
202.71.3.0/24 maxlen: 24
202.71.24.0/23 maxlen: 23
202.71.24.0/24 maxlen: 24
202.71.25.0/24 maxlen: 24
202.71.26.0/24 maxlen: 24
202.71.27.0/24 maxlen: 24
202.71.28.0/24 maxlen: 24
202.71.29.0/24 maxlen: 24
202.71.30.0/24 maxlen: 24
202.71.31.0/24 maxlen: 24
2401:a3e0::/48 maxlen: 48
2401:a3e0:1::/48 maxlen: 48
2401:a3e0:2::/48 maxlen: 48
2401:a3e0:3::/48 maxlen: 48
2401:a3e0:4::/48 maxlen: 48
2401:a3e0:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 May 2025 05:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Validity
Not Before: May 7 05:31:04 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681af018-fb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:bb:e7:d9:c3:cf:54:b9:55:18:0d:77:76:
e0:f4:88:03:15:9c:d5:db:71:d7:31:a0:36:43:08:
3b:54:d2:ce:94:1f:57:07:35:55:09:bf:07:d4:8d:
8b:35:5f:65:2c:8d:c3:30:12:ba:02:84:a5:13:f4:
3d:5a:5f:e3:52:a6:cd:d6:b2:41:a8:2f:bc:28:cf:
a1:b6:8b:52:5a:90:2d:5a:75:70:87:95:a1:70:60:
ae:6c:fe:39:dd:ae:e4:66:68:6f:89:b3:57:82:e4:
2b:b9:1e:7c:1f:79:36:81:18:d2:1a:12:f3:f6:d0:
e7:95:e4:aa:f7:18:94:e6:8f:43:04:33:3c:37:ce:
fb:0a:1e:07:14:e3:d2:6d:d3:72:a6:73:88:cf:63:
ae:98:0c:6c:c1:47:78:3e:e5:f1:59:36:91:cc:59:
31:ad:bb:e2:f6:59:76:bf:21:74:92:6e:b9:22:df:
66:87:58:09:1f:15:0b:ea:22:49:6d:f1:fd:29:f2:
75:4b:f3:5b:ce:06:76:cc:ab:91:0c:66:0e:4a:52:
58:7b:8d:ce:2d:13:fc:8e:89:0d:1c:f4:f4:09:f5:
1b:84:9d:c2:04:47:e9:a1:90:ab:a0:9b:99:be:59:
9a:84:96:f6:6a:b7:5e:be:e4:7a:a5:95:2c:e8:c8:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:05:BA:FA:B3:60:58:CF:7E:5F:CF:B1:E7:78:16:1F:42:23:CA
X509v3 Authority Key Identifier:
keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/683B780E2B0411F093A3A681C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.172.0/22
202.47.112.0/21
202.71.0.0/22
202.71.24.0/21
IPv6:
2401:a3e0::-2401:a3e0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:5e:1a:88:68:b1:ea:5a:de:c2:1f:c5:01:db:b0:2a:2d:3a:
b1:3b:9c:0f:ac:6e:2a:2d:1e:1d:77:3e:f5:fe:6f:19:96:0a:
d9:15:21:50:77:d4:64:49:e1:85:ad:41:6e:bf:1b:b8:21:b2:
b6:96:9e:c7:41:84:20:13:46:a1:58:64:6d:6e:ba:e6:30:20:
54:52:b0:7d:9b:a8:b6:66:29:61:00:a5:d3:e1:bd:5f:e5:f0:
63:50:46:a8:21:45:a8:93:d5:33:c9:ce:fa:b0:c7:a1:82:5e:
a2:44:8e:61:09:fe:e9:87:f9:20:30:2f:d6:52:aa:b7:fa:18:
c5:78:da:5c:11:a4:61:f2:cb:b1:9b:77:a6:80:ef:70:42:d4:
b0:47:4a:17:ed:6d:15:23:4f:a8:96:fa:4e:3c:f9:e0:3e:f8:
a8:d3:89:2e:da:e9:4d:2f:a3:97:be:7d:d5:de:7c:57:39:a7:
07:5c:85:0b:7e:bc:d4:16:dc:4e:7a:dc:6c:ca:da:93:10:d2:
ee:3f:93:dd:d3:17:95:88:d4:d9:8a:58:d4:1b:bb:33:b2:cd:
50:09:00:3b:eb:b5:c1:4a:71:a0:42:4d:7f:d1:c2:be:e0:3d:
b0:a7:47:d9:8f:e4:ec:92:34:d8:35:ce:d7:be:44:fb:28:8e:
56:82:42:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:25:35 2025 by rpki-client