Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/662F856AEC5611EF8E131812C4F9AE02.roa
File: 662F856AEC5611EF8E131812C4F9AE02.roa (raw, json)
Hash identifier: 7PzVMNF/x4cKfoWFNfU/IO6N18De/72AlGuoMUOVZJ0=
Subject key identifier: 03:C0:02:CE:2E:7F:62:06:C0:27:61:62:70:A5:C3:D4:18:AD:9A:16
Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA
Certificate serial: 0C3D
Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/662F856AEC5611EF8E131812C4F9AE02.roa
Signing time: Sun 16 Feb 2025 11:08:50 +0000
ROA not before: Sun 16 Feb 2025 11:08:50 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137967
IP address blocks: 43.230.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 11:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3133 (0xc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA
Validity
Not Before: Feb 16 11:08:50 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67b1c742-3c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:7b:ea:da:6a:25:4c:c4:93:af:c4:c4:ae:
bb:bc:05:d1:14:35:e0:44:e4:18:07:68:e4:05:71:
15:1f:ed:dd:a1:18:29:33:14:42:a8:b5:cd:44:82:
c0:5a:89:23:ab:22:5b:53:d2:e2:0f:2b:04:df:68:
bf:4f:24:27:eb:47:ae:e4:dd:ab:1a:95:2e:89:70:
b5:8a:69:67:37:93:96:57:a0:31:a9:bf:b3:0b:7e:
3d:8b:d4:15:97:d0:b9:15:b8:27:a4:34:82:a4:23:
55:8b:53:a2:33:01:52:15:3f:ed:c1:b4:01:8f:fc:
bb:20:67:25:1c:ed:97:fc:c9:b3:71:61:4d:89:b6:
ac:af:24:08:30:16:0e:7c:df:b8:45:17:5a:33:51:
74:65:83:23:c4:1c:ea:b7:30:cd:d3:42:ad:df:51:
d1:c9:1e:57:93:94:ec:55:d4:1a:78:e7:8f:29:bf:
f1:32:f8:6f:07:e6:27:5a:d7:49:39:b1:91:82:2e:
6f:3f:90:3c:db:41:ff:0e:72:eb:45:2d:64:df:90:
3a:5a:6e:03:56:bb:58:a7:7d:88:bb:9b:7e:6a:09:
0b:73:2b:3c:bd:a4:c4:d6:1a:d2:80:ff:6d:b9:98:
d3:9d:9c:a9:69:29:33:c9:4f:63:45:c2:ed:0f:15:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:02:CE:2E:7F:62:06:C0:27:61:62:70:A5:C3:D4:18:AD:9A:16
X509v3 Authority Key Identifier:
keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/662F856AEC5611EF8E131812C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.210.0/24
Signature Algorithm: sha256WithRSAEncryption
73:31:40:57:90:4c:e7:89:1d:d5:ad:37:85:bc:78:20:a3:1a:
e4:06:10:54:d0:6b:f4:1c:9e:87:3c:e9:69:98:54:bf:dc:0c:
f4:84:77:64:aa:5d:60:45:e2:ab:31:9b:b2:a7:6d:8d:63:e7:
f6:bb:42:86:85:54:2b:10:50:e8:95:96:67:12:9b:fd:b5:fe:
2b:1d:f5:8c:19:b0:ac:84:64:e0:58:49:42:a5:1e:06:e7:4f:
41:49:29:ce:44:12:9b:bf:7a:0f:56:21:ff:50:cb:a1:71:74:
04:a7:83:90:b7:0d:cf:e8:ee:9c:e9:9d:f8:d8:a2:01:b4:b3:
f0:09:7d:f4:6e:34:39:bf:9a:70:af:01:8d:86:7b:e0:04:5c:
e9:8d:6e:8d:01:5e:c2:16:8d:dd:35:f3:2b:53:3c:2e:04:73:
04:c6:04:dc:14:53:57:59:19:71:de:3e:49:92:ac:33:87:20:
bf:6e:4f:0f:cf:9d:7a:a7:db:3c:00:cc:87:09:c6:ab:0a:f7:
5c:df:01:43:20:1d:90:60:7a:f2:61:36:f0:64:67:dc:47:fd:
cc:0c:50:cf:77:da:49:b2:f6:07:dc:8c:c7:39:9d:61:b8:7b:
7e:a5:6c:65:7b:14:f8:bb:26:9f:78:ca:f2:88:4a:b3:5d:7e:
72:a1:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:11:03 2025 by rpki-client