Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/8053AA2636D811F09CCD873CC4F9AE02.roa
File: 8053AA2636D811F09CCD873CC4F9AE02.roa (raw, json)
Hash identifier: ZGgismIyas7KEpQmuto/IPjjvUYB8YVovnOfWvZX4Vk=
Subject key identifier: 8B:8F:1B:79:C1:9A:5E:2F:69:54:60:5F:2D:64:E6:F9:28:C1:F0:F6
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 0184
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/8053AA2636D811F09CCD873CC4F9AE02.roa
Signing time: Thu 22 May 2025 06:46:34 +0000
ROA not before: Thu 22 May 2025 06:46:34 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 13383
IP address blocks: 2402:be0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 May 2025 07:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: May 22 06:46:34 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=682ec84a-9aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:9e:92:63:9b:ee:b0:52:61:1b:6d:b2:2c:
13:ee:4e:5b:d0:b1:db:97:9d:15:c2:ac:83:00:b3:
32:1c:9d:d7:91:da:24:4a:f5:fb:c0:b3:c5:df:13:
95:0a:95:38:2d:27:2e:4b:9e:29:4a:0a:35:33:55:
f9:3f:15:1f:7a:b2:d7:a1:a4:19:6c:3a:12:62:4e:
08:64:85:cc:a4:b1:7d:85:71:23:30:16:4b:ba:bb:
b4:e2:1f:4e:ac:be:18:a3:5e:51:6c:83:5e:f9:5e:
5c:c3:b9:ae:bd:73:cf:16:25:52:39:50:35:d7:cd:
03:8e:e7:c1:1a:af:6c:0a:01:36:72:a7:e5:07:83:
9e:1b:44:d4:b7:d0:73:97:a7:77:5d:ba:90:8a:db:
0d:c4:14:28:a7:83:7d:5e:33:70:5f:68:92:b3:4f:
6f:ce:bc:9c:4c:e9:59:a1:f6:9f:ba:01:73:f8:51:
3a:97:2c:7c:9f:b6:b9:72:5b:5e:67:51:0d:14:e1:
2d:98:cc:18:da:64:d8:06:01:bb:55:47:eb:b5:c4:
a8:39:42:dd:04:b2:2d:ec:b6:d1:64:16:97:e5:b7:
e1:26:ea:0a:3a:c1:3d:5b:f5:40:77:1a:6d:8b:fd:
7d:bb:77:10:50:b3:10:b4:4e:0e:aa:22:47:f0:da:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:1B:79:C1:9A:5E:2F:69:54:60:5F:2D:64:E6:F9:28:C1:F0:F6
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/8053AA2636D811F09CCD873CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:be0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:72:e0:55:d4:ef:a8:87:bf:bf:5d:97:82:45:6a:3c:7c:42:
ee:69:5b:5b:bd:fa:07:15:dc:8d:ea:40:c1:57:9a:45:13:e1:
f9:64:b1:60:16:f3:b1:8e:9e:71:67:4e:ce:de:0f:23:8f:b7:
af:98:02:87:d7:da:bb:ac:e5:d7:0c:c1:ed:18:b1:e0:cc:42:
e5:f1:8c:b2:07:a8:0e:06:46:85:38:5d:c1:2a:f7:6f:2d:05:
d7:af:a3:a7:3a:c6:5c:f2:ff:fc:6b:a7:55:c2:cd:d3:f7:df:
43:47:ca:7e:82:4c:22:db:66:aa:b2:9f:05:d0:aa:22:d2:1a:
3d:b7:d0:d9:79:ab:52:fd:e9:45:25:89:19:cd:f1:e2:31:1d:
e1:d9:cc:97:b7:c0:de:30:f8:b9:39:c5:21:bb:38:b7:87:3e:
f3:9f:73:c6:cc:f6:29:9e:94:8b:9c:bf:d2:75:80:27:87:c4:
80:8b:d7:bc:91:c2:3d:92:57:7c:d7:66:e8:63:b6:c5:88:d6:
53:ed:d2:bc:4f:24:98:76:ca:bd:1a:dc:14:c3:2c:f6:e9:e3:
46:b5:84:f1:3b:1e:4a:d7:fc:a5:68:45:1b:e4:fa:9d:d3:58:
37:93:42:42:50:b3:07:31:6d:1a:3b:35:7c:86:33:a3:d5:16:
3d:26:06:fa
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjUwNTIyMDY0NjM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJlYzg0YS05YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqGekmOb7rBSYRttsiwT7k5b0LHbl50VwqyDALMyHJ3XkdokSvX7wLPF3xOV
CpU4LScuS54pSgo1M1X5PxUferLXoaQZbDoSYk4IZIXMpLF9hXEjMBZLuru04h9O
rL4Yo15RbINe+V5cw7muvXPPFiVSOVA1180DjufBGq9sCgE2cqflB4OeG0TUt9Bz
l6d3XbqQitsNxBQop4N9XjNwX2iSs09vzrycTOlZofafugFz+FE6lyx8n7a5clte
Z1ENFOEtmMwY2mTYBgG7VUfrtcSoOULdBLIt7LbRZBaX5bfhJuoKOsE9W/VAdxpt
i/19u3cQULMQtE4OqiJH8NrBawIDAQABo4ICljCCApIwHQYDVR0OBBYEFIuPG3nB
ml4vaVRgXy1k5vkowfD2MB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvODA1M0FBMjYz
NkQ4MTFGMDlDQ0Q4NzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAgvgMA0GCSqGSIb3DQEBCwUAA4IBAQA7cuBV1O+oh7+/
XZeCRWo8fELuaVtbvfoHFdyN6kDBV5pFE+H5ZLFgFvOxjp5xZ07O3g8jj7evmAKH
19q7rOXXDMHtGLHgzELl8YyyB6gOBkaFOF3BKvdvLQXXr6OnOsZc8v/8a6dVws3T
999DR8p+gkwi22aqsp8F0Koi0ho9t9DZeatS/elFJYkZzfHiMR3h2cyXt8DeMPi5
OcUhuzi3hz7zn3PGzPYpnpSLnL/SdYAnh8SAi9e8kcI9kld812boY7bFiNZT7dK8
TySYdsq9GtwUwyz26eNGtYTxOx5K1/ylaEUb5Pqd01g3k0JCULMHMW0aOzV8hjOj
1RY9Jgb6
-----END CERTIFICATE-----
Generated at Fri Jun 20 09:48:07 2025 by rpki-client