Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2562774A3A1211F08110E80BC4F9AE02.roa
File: 2562774A3A1211F08110E80BC4F9AE02.roa (raw, json)
Hash identifier: W16Wwtv4NU5/iVFcBaOefbkKkucuuJ9zH+9Wu4fM/lM=
Subject key identifier: FF:3A:2A:46:7B:4C:78:7B:76:14:A5:2B:5B:A8:57:74:07:38:F4:B0
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0258
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2562774A3A1211F08110E80BC4F9AE02.roa
Signing time: Thu 05 Jun 2025 03:10:45 +0000
ROA not before: Thu 05 Jun 2025 03:10:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 208063
IP address blocks: 202.134.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 00:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jun 5 03:10:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68410ab5-a5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:df:4f:65:be:c5:bb:8b:f6:96:8e:15:6f:
b4:57:05:25:31:ed:7b:15:c2:11:7a:d5:e2:d8:c3:
d7:54:d6:5f:37:6b:82:7c:64:3f:47:56:96:ee:35:
3f:d4:c1:0d:01:2c:d2:9d:c3:f6:ae:61:c2:42:4a:
31:cb:1d:d8:34:3e:ce:3f:16:f2:ee:53:a3:f2:8c:
a1:a2:86:c4:2c:c3:69:75:9c:c1:70:f9:88:1f:d7:
c3:ca:9f:6f:ff:20:18:71:f9:34:04:4c:97:cc:6f:
05:dd:54:da:90:f9:ff:f5:a8:a4:6b:60:bd:0a:41:
6d:40:13:98:59:7d:21:75:4a:96:8a:b9:f1:9a:21:
c8:cc:ac:a7:a4:cb:91:89:6d:b3:31:89:10:bc:9d:
e0:51:0a:9c:74:af:0c:87:db:fb:b8:a5:fe:da:99:
77:89:55:6b:0e:88:5e:29:35:cd:7e:f9:9b:c0:a4:
0b:3c:3e:9b:b9:82:12:d1:c7:e9:bf:21:3a:72:c5:
fe:96:e6:f6:39:d5:a0:04:75:0a:0d:18:10:b3:dc:
06:12:5d:21:56:29:d7:c7:94:3e:89:96:e1:da:a5:
9a:3a:8d:ba:2a:8a:30:fc:74:1e:c7:f7:68:f3:cd:
12:70:f6:6d:59:1d:00:f0:f0:39:1e:13:02:42:b7:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:2A:46:7B:4C:78:7B:76:14:A5:2B:5B:A8:57:74:07:38:F4:B0
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2562774A3A1211F08110E80BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6f:89:3b:e4:a8:c1:3a:7b:28:96:3c:58:66:7f:a7:b1:4c:
6d:d3:7f:22:c0:cf:c8:a3:4a:44:ba:ce:97:64:03:e0:84:1d:
86:62:5f:d6:55:7d:62:63:16:b1:2f:15:f9:2b:3e:5f:5e:a8:
7f:72:1d:a9:a8:8b:e2:4d:77:fe:c7:36:7f:e5:ac:ca:d3:61:
6b:89:e0:da:5b:d8:b7:d5:3b:8f:9d:14:90:b4:da:b3:23:ce:
d1:fd:79:c1:b1:c4:c9:f2:72:c5:76:98:13:78:52:26:3b:cb:
51:d0:ec:70:46:1f:a8:5c:7c:fe:33:89:ce:b3:39:82:06:8d:
e5:bc:16:1c:09:8a:29:10:b9:8c:75:1b:35:6a:9b:92:3c:08:
eb:48:5e:62:9a:04:07:f8:91:a3:35:73:26:b4:22:e4:4c:5a:
2f:13:06:e4:cb:12:10:90:61:8f:63:bb:b4:2e:e5:d4:62:9b:
e9:b4:c6:55:71:e8:a0:8f:b9:17:bb:c1:53:75:c0:2e:eb:0f:
b7:7a:9d:40:41:a9:44:7d:a0:b3:ef:9e:87:ee:76:45:c2:1d:
de:f4:27:5c:95:2b:8a:c9:f2:85:91:c8:76:e7:0b:2d:97:bd:
57:cd:1d:b1:a6:a2:82:a8:78:9f:cf:36:5f:67:24:09:75:57:
32:58:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:26:07 2025 by rpki-client