Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0947BCE0144811F0B182D33EC4F9AE02.roa
File: 0947BCE0144811F0B182D33EC4F9AE02.roa (raw, json)
Hash identifier: tOkJpDWgLgXHLjU+3mMo2yQwTvxWKITNn5phWp6SRBE=
Subject key identifier: 4D:EF:D8:26:4C:6F:DD:6C:74:76:F5:0D:01:DB:10:1E:87:CB:CB:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ADD2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0947BCE0144811F0B182D33EC4F9AE02.roa
Signing time: Tue 08 Apr 2025 07:06:48 +0000
ROA not before: Tue 08 Apr 2025 07:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149182
IP address blocks: 2001:df1:8dc0::/48 maxlen: 50
2001:df1:8dc0::/51 maxlen: 52
2001:df1:8dc0:2000::/52 maxlen: 52
2001:df1:8dc0:3000::/52 maxlen: 52
2001:df1:8dc0:4000::/50 maxlen: 52
2001:df1:8dc0:8000::/49 maxlen: 52
Validation: Failed, certificate revoked on Tue 08 Apr 2025 08:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44498 (0xadd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 8 07:06:48 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f4cb07-d136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:e2:ce:ab:1e:f9:c8:fd:98:71:57:f1:91:
7a:e1:3e:db:43:d7:93:76:92:ba:01:e1:6f:d4:dc:
ca:25:53:b3:b4:07:06:1b:0d:27:3f:89:92:c9:62:
c1:ed:ac:67:e9:5e:b4:3b:8e:aa:1c:ab:95:e7:cf:
c2:dd:d8:f6:fb:14:3c:c4:cc:2e:e3:f8:54:e6:76:
3f:6b:8d:ce:93:71:c4:7b:46:23:fb:46:4c:22:16:
2b:d5:88:43:06:dd:19:19:d3:93:5e:3b:0a:35:fb:
27:a1:1e:2c:42:dd:01:60:51:2c:6c:60:da:42:56:
3c:fd:6e:d8:63:93:e9:af:ab:c6:76:5a:fa:3f:b9:
f0:28:b1:3c:1c:a2:91:45:c7:07:85:6c:8e:dd:db:
ff:3a:8f:2a:b0:e0:5a:98:7e:ae:0a:d5:d0:41:fa:
9d:81:26:da:c8:34:75:5c:f9:f9:9e:3e:c8:ab:ce:
54:67:7d:7e:d4:bc:57:c0:4b:87:ed:40:14:b7:4e:
0b:d9:d4:56:91:24:0c:3e:29:ff:fc:cf:a3:04:f6:
91:f0:98:55:a5:cc:db:dd:f4:94:58:1a:43:1e:9a:
d5:86:de:92:3f:1e:e7:c6:ea:d8:c9:5c:7d:ab:d6:
94:f4:ec:91:ea:bc:7d:08:f6:3d:d0:af:4b:2f:22:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:D8:26:4C:6F:DD:6C:74:76:F5:0D:01:DB:10:1E:87:CB:CB:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0947BCE0144811F0B182D33EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:8dc0::/48
Signature Algorithm: sha256WithRSAEncryption
0d:40:cc:9d:8f:34:fd:54:b4:a8:82:ed:d7:17:1f:d7:c0:60:
d5:b1:26:40:0a:91:75:bd:9d:74:8b:d3:73:13:31:3a:e2:e2:
03:22:60:23:a3:5e:95:b3:5f:f7:c2:67:03:cb:69:b7:dc:fe:
d7:0e:65:a1:03:5f:91:a1:46:56:fa:d8:c0:bf:d2:aa:55:e1:
bd:c6:da:c7:df:ce:31:10:32:0a:dd:80:69:ca:71:db:0c:c4:
ae:6c:a1:ce:1e:3b:d8:40:fe:56:9e:b3:73:71:c1:9d:9f:2e:
7c:72:eb:4b:b2:df:12:46:e7:98:c5:5b:a0:86:89:04:1d:4f:
7e:14:98:4e:cd:1f:5d:04:9e:5b:7a:61:3a:4e:85:5a:d0:5d:
67:de:28:3b:17:97:e8:5f:d3:b5:d4:f0:d6:ba:f2:60:02:0f:
65:3d:b4:3a:ec:39:02:58:ff:60:52:90:59:e7:32:2b:ec:31:
f2:d5:37:48:8c:bd:d0:5b:bf:e1:0f:91:11:2e:3c:fd:1b:ec:
e3:c6:f9:a7:46:3f:1d:c8:f7:73:61:5b:ae:e7:05:0e:46:e1:
aa:68:cf:1e:c6:63:18:98:13:00:8f:d0:1e:f4:cd:fa:28:23:
03:f9:99:33:72:ce:ab:25:9c:ff:da:4a:3d:81:ca:08:8a:10:
30:87:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:36 2025 by rpki-client