Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/822A02B62BA511F0BAA14869C4F9AE02.roa
File: 822A02B62BA511F0BAA14869C4F9AE02.roa (raw, json)
Hash identifier: AUawR3oRz5iYXy55+Q6v1e08hOCrHMviXTaIz0yJ39g=
Subject key identifier: 57:FB:68:52:67:53:E3:25:18:85:49:08:86:DA:24:F7:8F:1A:AC:C2
Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial: 0FEB
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/822A02B62BA511F0BAA14869C4F9AE02.roa
Signing time: Thu 08 May 2025 00:43:50 +0000
ROA not before: Thu 08 May 2025 00:43:50 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58521
IP address blocks: 143.92.112.0/21 maxlen: 21
143.92.112.0/22 maxlen: 22
143.92.112.0/23 maxlen: 23
143.92.112.0/24 maxlen: 24
143.92.113.0/24 maxlen: 24
143.92.114.0/24 maxlen: 24
143.92.115.0/24 maxlen: 24
143.92.116.0/24 maxlen: 24
143.92.117.0/24 maxlen: 24
143.92.118.0/24 maxlen: 24
143.92.119.0/24 maxlen: 24
143.92.120.0/22 maxlen: 22
143.92.120.0/24 maxlen: 24
143.92.121.0/24 maxlen: 24
143.92.122.0/24 maxlen: 24
143.92.123.0/24 maxlen: 24
143.92.124.0/22 maxlen: 24
148.222.64.0/19 maxlen: 19
148.222.64.0/22 maxlen: 22
148.222.64.0/24 maxlen: 24
148.222.65.0/24 maxlen: 24
148.222.66.0/23 maxlen: 23
148.222.66.0/24 maxlen: 24
148.222.67.0/24 maxlen: 24
148.222.68.0/22 maxlen: 22
148.222.68.0/24 maxlen: 24
148.222.69.0/24 maxlen: 24
148.222.70.0/24 maxlen: 24
148.222.71.0/24 maxlen: 24
148.222.72.0/22 maxlen: 22
148.222.72.0/24 maxlen: 24
148.222.73.0/24 maxlen: 24
148.222.74.0/24 maxlen: 24
148.222.75.0/24 maxlen: 24
148.222.76.0/22 maxlen: 22
148.222.76.0/24 maxlen: 24
148.222.77.0/24 maxlen: 24
148.222.78.0/24 maxlen: 24
148.222.79.0/24 maxlen: 24
148.222.80.0/22 maxlen: 22
148.222.80.0/24 maxlen: 24
148.222.81.0/24 maxlen: 24
148.222.82.0/24 maxlen: 24
148.222.83.0/24 maxlen: 24
148.222.84.0/22 maxlen: 22
148.222.84.0/24 maxlen: 24
148.222.85.0/24 maxlen: 24
148.222.86.0/24 maxlen: 24
148.222.87.0/24 maxlen: 24
148.222.92.0/24 maxlen: 24
148.222.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4075 (0xfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Validity
Not Before: May 8 00:43:50 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=681bfe46-76df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:96:18:41:a7:f3:81:d3:8f:e4:72:d2:e3:
93:63:f0:75:f9:dd:ab:6a:63:c0:a2:43:e5:99:40:
71:68:14:25:e0:7b:d3:2e:5e:af:1c:f1:5c:ca:89:
1c:c8:d0:c5:2d:f4:9b:23:18:69:4a:28:ed:63:98:
b6:f8:2c:9d:c9:de:af:a0:2f:ce:4b:86:40:d6:27:
01:1e:e3:a6:d2:6c:65:2a:06:f4:0c:4a:52:8a:06:
20:d4:62:7a:8e:2c:08:e8:e5:17:83:88:7c:20:78:
60:d7:02:49:21:5c:a3:b8:53:8a:b2:d5:3f:ba:b3:
30:40:ad:0a:19:2f:f3:e3:74:89:45:94:b3:d5:c6:
0b:2d:22:54:cc:61:f8:28:76:22:9b:af:ed:03:45:
38:e6:2c:c9:fa:c6:a0:a3:5d:f4:03:17:cd:17:d0:
20:60:73:9a:15:3c:63:42:ba:38:ef:36:68:c7:ec:
be:c2:8b:51:cc:46:7a:8e:8b:f8:b4:c3:cc:a7:2a:
26:fb:36:f5:f7:67:31:78:29:3b:1e:52:23:7a:43:
f0:ea:75:c7:7b:ba:ef:54:99:b2:0e:e8:17:e6:a3:
a6:a6:d0:2b:e6:ad:32:05:c9:ed:bb:c3:eb:d3:55:
15:3e:22:41:b3:a9:5a:f0:a3:f4:28:d0:5c:a2:21:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:68:52:67:53:E3:25:18:85:49:08:86:DA:24:F7:8F:1A:AC:C2
X509v3 Authority Key Identifier:
keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/822A02B62BA511F0BAA14869C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.92.112.0/20
148.222.64.0/19
Signature Algorithm: sha256WithRSAEncryption
07:c2:27:fa:5c:59:e5:12:53:b7:75:1a:97:93:fa:c1:72:7f:
3f:98:c6:c7:65:8d:23:23:34:b6:c8:34:84:33:43:69:17:51:
7b:3e:f2:81:4b:79:d9:a5:2e:dd:f6:b3:14:a5:f3:30:3e:b9:
5f:10:f4:58:0e:28:2c:36:5c:eb:6a:76:9b:ab:18:29:ba:e8:
82:61:68:f7:b4:90:23:13:4d:9a:78:d4:c5:fa:59:84:45:93:
1b:5e:72:4a:b8:64:ff:64:36:a6:84:e8:d1:7a:2b:eb:71:d6:
a1:ed:ac:38:d6:d4:99:0f:47:fa:a8:68:07:4a:37:d1:43:ab:
38:19:eb:1f:5c:f6:97:7d:a0:48:b0:0c:ae:ee:19:0c:f4:22:
a7:ba:87:b0:c2:4f:97:e3:13:af:9f:d4:94:72:25:4b:9d:bd:
1c:b9:5d:a5:71:6e:8f:b6:44:74:85:a5:93:9e:eb:be:0b:ac:
a6:1f:99:10:12:45:0e:8f:9e:6a:fe:75:1c:a1:71:34:76:13:
e8:2b:32:33:8f:d6:f2:c6:76:e5:10:05:06:e6:96:23:f7:71:
1f:a8:f7:0f:96:f5:f7:55:e4:09:eb:18:e1:33:1c:28:f4:e1:
25:f6:25:e7:4c:56:c6:c1:62:fb:b5:a2:86:2c:01:90:27:2e:
61:3a:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 14:10:52 2025 by rpki-client