Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7C3B57D48FBE11EA9797847DC4F9AE02.roa
File: 7C3B57D48FBE11EA9797847DC4F9AE02.roa (raw, json)
Hash identifier: MCDNaP/Y035HRGRnh3BKuHh/se5rBFzO2TlKPseAhco=
Subject key identifier: 8C:22:61:0C:D8:98:67:45:5B:E6:ED:6B:2D:01:74:4E:1D:0F:C0:F0
Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial: 094C
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7C3B57D48FBE11EA9797847DC4F9AE02.roa
Signing time: Mon 06 Jan 2025 20:09:36 +0000
ROA not before: Mon 06 Jan 2025 20:09:36 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 17557
IP address blocks: 43.225.98.0/24 maxlen: 24
43.225.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 06:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Validity
Not Before: Jan 6 20:09:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677c3880-e386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:d0:93:4d:0d:ab:5e:4a:78:e8:8a:d9:b4:
43:a3:fe:62:df:34:64:71:0f:05:52:21:49:f9:38:
7f:60:6c:63:b4:4c:a6:53:38:e3:32:0a:78:63:cc:
f4:65:1b:7c:28:78:96:47:40:42:d0:e8:8d:ed:47:
6c:1c:e3:4b:49:91:47:69:b2:5a:58:ed:b8:75:72:
8d:6b:de:58:e6:d7:f5:b7:e9:7b:ec:4d:5e:ab:d5:
c8:1b:6a:a8:d9:b3:6e:b5:25:38:bd:6a:6e:34:ee:
bd:09:d0:30:56:01:ce:e5:f8:8e:66:97:0d:c8:2a:
4a:85:a0:c8:7d:8a:44:f9:72:95:c9:c9:51:57:4e:
67:e2:c7:52:41:4d:21:b5:6d:e3:63:d6:0b:f1:05:
a6:83:0c:8f:d7:df:69:14:f8:d9:23:e4:4f:22:28:
17:18:bb:34:93:a6:64:48:95:38:88:2e:2a:11:c1:
c6:b9:53:be:60:52:ad:c8:66:3f:fd:b5:90:5d:26:
26:3e:81:24:f8:4e:44:6f:3a:44:49:3d:f7:c0:ab:
c7:16:e2:31:fd:c5:86:fe:be:d9:0d:f8:65:de:6d:
48:ef:f8:c9:93:ef:a4:82:4b:e8:f8:02:71:cb:9a:
cc:b6:eb:c1:c5:1f:e0:f9:c2:0a:a2:bf:5b:b0:1c:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:22:61:0C:D8:98:67:45:5B:E6:ED:6B:2D:01:74:4E:1D:0F:C0:F0
X509v3 Authority Key Identifier:
keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7C3B57D48FBE11EA9797847DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.98.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:c4:d4:84:4e:ba:f9:c6:6a:d8:2a:cb:f1:23:7c:8a:e7:88:
f6:3e:c5:95:f0:b5:c7:52:82:b5:88:57:d1:e9:bf:cf:a4:2f:
9c:41:ca:c2:ec:12:b6:32:33:63:bc:cd:58:a1:d4:81:73:21:
7d:80:8a:c5:1e:91:fe:63:d3:c4:ce:71:6c:ca:5d:2e:23:0d:
0f:e6:31:a0:5b:ac:e9:b6:ac:d7:18:e0:45:cc:de:36:83:58:
87:f1:fd:6e:b9:84:ba:44:8f:10:86:fe:85:76:76:c7:3b:56:
f7:4d:11:fb:b1:bf:24:a5:68:36:a3:d4:9f:4a:26:4d:ef:43:
b4:30:69:bb:85:7f:7f:59:86:eb:4e:94:98:a9:a1:60:34:eb:
cc:a0:e3:e4:64:d8:bd:93:f1:db:77:08:44:48:04:0e:03:1c:
71:74:cd:32:9c:4c:2c:d9:8d:56:a5:61:e6:db:80:aa:ea:bd:
cd:86:55:87:dd:be:f9:f1:8e:fc:c6:ff:f1:35:b5:8e:a5:dd:
4c:a1:36:3f:00:31:74:cd:d8:9c:05:4e:04:13:d3:2c:9e:3b:
c4:d9:c9:50:c4:11:d8:d1:ec:6c:d6:47:e4:b6:3e:1f:6c:4e:
26:d2:f6:45:e0:54:91:37:2b:59:db:56:dd:54:3b:07:3a:d0:
f5:cc:37:f1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx
QTYxRDY3MDgwHhcNMjUwMTA2MjAwOTM2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdjMzg4MC1lMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2vQk00Nq15KeOiK2bRDo/5i3zRkcQ8FUiFJ+Th/YGxjtEymUzjjMgp4Y8z0
ZRt8KHiWR0BC0OiN7UdsHONLSZFHabJaWO24dXKNa95Y5tf1t+l77E1eq9XIG2qo
2bNutSU4vWpuNO69CdAwVgHO5fiOZpcNyCpKhaDIfYpE+XKVyclRV05n4sdSQU0h
tW3jY9YL8QWmgwyP199pFPjZI+RPIigXGLs0k6ZkSJU4iC4qEcHGuVO+YFKtyGY/
/bWQXSYmPoEk+E5EbzpEST33wKvHFuIx/cWG/r7ZDfhl3m1I7/jJk++kgkvo+AJx
y5rMtuvBxR/g+cIKor9bsBySMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIwiYQzY
mGdFW+btay0BdE4dD8DwMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG
QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzFBMTQvRjdFODY0NDY4RkJDMTFFQUE4QzMxMjdCQzRGOUFFMDIvN0MzQjU3RDQ4
RkJFMTFFQTk3OTc4NDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEr4WIwDQYJKoZIhvcNAQELBQADggEBAGzE1IROuvnGatgq
y/EjfIrniPY+xZXwtcdSgrWIV9Hpv8+kL5xBysLsErYyM2O8zVih1IFzIX2AisUe
kf5j08TOcWzKXS4jDQ/mMaBbrOm2rNcY4EXM3jaDWIfx/W65hLpEjxCG/oV2dsc7
VvdNEfuxvySlaDaj1J9KJk3vQ7QwabuFf39ZhutOlJipoWA068yg4+Rk2L2T8dt3
CERIBA4DHHF0zTKcTCzZjValYebbgKrqvc2GVYfdvvnxjvzG//E1tY6l3UyhNj8A
MXTN2JwFTgQT0yyeO8TZyVDEEdjR7GzWR+S2Ph9sTibS9kXgVJE3K1nbVt1UOwc6
0PXMN/E=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:14:03 2025 by rpki-client