Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/D3321106F5FB11EFBD7D871BC4F9AE02.roa
File: D3321106F5FB11EFBD7D871BC4F9AE02.roa (raw, json)
Hash identifier: ChkCgCgUe79jphJm/ixlO9k63CgqRwt+i39C1riF+b8=
Subject key identifier: B2:14:EC:9C:00:6F:A3:47:2E:6C:9C:0B:91:F8:0D:5E:FE:E4:83:1F
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: 02
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/D3321106F5FB11EFBD7D871BC4F9AE02.roa
Signing time: Fri 28 Feb 2025 17:45:40 +0000
ROA not before: Fri 28 Feb 2025 17:45:40 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152329
IP address blocks: 157.10.224.0/24 maxlen: 24
157.10.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 06:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Validity
Not Before: Feb 28 17:45:40 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c1f644-c20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:c6:51:32:38:08:8f:65:71:6f:32:09:d1:
16:26:ca:12:8e:85:e8:4e:12:e1:eb:c0:c9:00:dd:
81:95:ed:78:83:d9:da:7e:ae:ef:62:8c:54:cc:86:
79:04:a1:a6:b0:1e:20:5a:9f:25:e5:b0:f0:94:dd:
39:0b:84:69:61:d7:cc:a3:4e:f9:b2:fa:4f:b1:22:
ad:9f:44:85:fd:77:b4:f0:d2:1e:59:71:d0:ac:8b:
18:fc:22:b9:76:d5:04:83:08:26:6f:19:92:13:49:
ed:3e:55:3d:af:7b:20:bd:b1:67:0d:17:54:52:14:
e4:f1:fd:92:d9:9b:cb:80:8c:6d:e3:8c:30:71:02:
a6:97:97:74:de:eb:ca:ea:76:34:f2:29:99:1e:e1:
76:b7:e9:5f:01:f1:03:27:62:fa:76:37:98:9b:ca:
92:1b:9c:48:a4:a6:89:a7:95:4b:77:b2:d4:bb:94:
be:bd:b3:5a:32:8a:7c:1c:cd:86:83:e8:0d:e3:0a:
66:17:51:19:9d:ff:6e:e6:0d:d7:6a:01:15:39:88:
3e:9e:06:6b:1a:af:56:7b:d9:cf:a7:e6:b8:22:44:
a4:86:48:7d:9e:cc:5e:76:96:a1:c6:ad:52:2f:c3:
5f:e5:1b:83:cc:fd:db:7d:b4:f7:ee:9d:c5:f7:bb:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:EC:9C:00:6F:A3:47:2E:6C:9C:0B:91:F8:0D:5E:FE:E4:83:1F
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/D3321106F5FB11EFBD7D871BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.224.0/23
Signature Algorithm: sha256WithRSAEncryption
23:0d:dd:dc:f4:0b:11:e0:8f:d2:29:b8:84:93:a4:e1:39:e5:
9a:98:b3:ef:8d:de:17:d6:7a:e7:73:43:8c:ae:78:87:81:40:
40:af:da:41:14:4c:7b:89:65:d6:cc:0f:03:f9:99:2b:d3:a8:
3f:1d:de:5d:67:5a:58:5e:d4:a2:8a:ee:9c:3c:87:dc:cf:6b:
ae:fd:97:50:af:f1:18:3d:c9:76:f2:4f:f3:da:3e:c7:50:16:
71:e9:bc:53:c1:8e:3a:9e:7e:54:04:49:fd:d1:b2:3a:18:c2:
43:21:8a:a7:ce:b2:02:46:aa:39:09:90:be:62:53:8a:fb:a8:
c7:77:25:b2:2e:d1:0b:46:46:47:e5:b3:f4:d8:e1:8d:7c:c2:
0d:7b:ed:26:49:90:7a:76:c4:bf:88:d0:82:de:77:ad:83:2f:
01:ed:06:cc:e4:ef:a5:a9:6e:fc:8c:49:12:c8:00:22:82:67:
ca:d6:a3:31:32:c3:f0:ea:82:b2:34:9c:d2:16:2e:d2:d7:7f:
72:fc:30:86:3b:2e:0a:eb:c2:82:0d:85:25:fd:4d:a7:42:96:
f6:93:ee:8e:c1:6c:07:c7:7b:3d:2c:2a:4e:f9:0f:a1:95:7c:
41:72:92:b4:1c:1c:2f:ec:94:92:15:35:bd:c3:33:f7:84:4e:
61:06:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:08 2025 by rpki-client