Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/BD2567981A7A11F0BB3E0451C4F9AE02.roa
File: BD2567981A7A11F0BB3E0451C4F9AE02.roa (raw, json)
Hash identifier: /RZ1uIuElgfKj6BXQWNB5gN7khpnzmJfDHy74KonzPw=
Subject key identifier: 7A:77:C5:4A:24:6C:76:87:3A:5B:35:2D:51:3D:51:E9:D0:62:73:D6
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 07DB
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/BD2567981A7A11F0BB3E0451C4F9AE02.roa
Signing time: Wed 16 Apr 2025 04:24:51 +0000
ROA not before: Wed 16 Apr 2025 04:24:51 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 18000
IP address blocks: 118.107.144.0/21 maxlen: 24
175.184.216.0/21 maxlen: 24
202.146.6.0/23 maxlen: 24
203.148.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 04:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Validity
Not Before: Apr 16 04:24:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67ff3113-c768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:90:be:94:bf:0f:e5:5a:80:de:05:bf:0f:7e:
3d:37:da:04:74:f7:ba:93:99:58:d0:c9:50:b8:b2:
97:52:d2:3c:ba:b9:05:87:4e:b6:5d:78:9c:da:fc:
18:eb:8d:65:ca:ae:18:8f:06:43:ec:f3:28:18:6a:
e0:52:35:23:09:d9:c1:0d:8a:af:a9:ec:8d:be:7f:
37:ab:95:15:91:e6:8e:b1:d5:5e:47:c0:12:8a:48:
39:30:77:3a:a8:a4:07:43:a2:cd:36:0f:8f:e1:c1:
5b:84:e5:67:4f:b1:fa:64:6d:0b:9c:b3:de:15:34:
55:40:db:67:5a:09:b7:28:ca:2f:bd:1f:66:c2:e0:
5a:65:40:10:78:d3:49:b2:e3:b2:22:19:03:a0:06:
f1:d0:c5:2f:79:96:39:5f:8e:4b:bf:c3:69:ec:66:
d9:e8:15:ea:09:9e:4c:e8:4f:a3:90:e0:68:97:eb:
d9:78:bf:1c:a3:a5:08:2e:8c:5b:aa:9a:c7:8c:e9:
14:95:19:07:1a:fc:80:57:fe:38:63:ff:89:5d:b4:
10:25:7d:33:df:b0:ad:ce:54:f7:43:e9:42:63:41:
c1:0a:18:40:27:60:5e:da:4f:ce:e8:4f:28:93:9e:
7f:3c:9b:36:1d:6c:8d:7c:50:92:0d:81:05:c0:de:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:77:C5:4A:24:6C:76:87:3A:5B:35:2D:51:3D:51:E9:D0:62:73:D6
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/BD2567981A7A11F0BB3E0451C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.107.144.0/21
175.184.216.0/21
202.146.6.0/23
203.148.94.0/23
Signature Algorithm: sha256WithRSAEncryption
74:7d:04:24:bd:52:7a:50:78:fd:50:b6:75:59:1e:21:b4:0f:
ad:c9:0d:13:5d:0a:1e:28:c5:37:ac:5e:3a:83:f3:f5:7d:cf:
0d:60:12:6c:fa:c4:c1:64:28:2c:64:64:0f:cc:b8:37:cd:66:
51:2e:6d:92:2d:29:0d:5b:49:ce:06:0f:e4:66:77:19:bc:ed:
4e:ec:d6:d2:95:25:5b:89:4f:0d:91:df:71:17:86:f2:dd:39:
e7:51:2b:1e:b7:82:b6:16:1d:c9:ca:2e:32:76:4b:2e:75:15:
c2:5b:af:b8:b1:17:59:be:c2:d3:96:73:97:29:08:93:cf:45:
cc:d1:0f:bf:5d:10:73:e7:44:0d:e3:a7:0f:cd:c8:33:60:5a:
44:05:aa:a6:7a:43:44:0c:09:24:7a:b3:2e:61:81:50:a4:f9:
b3:f2:9a:a1:30:f6:f2:a3:98:0a:8b:7c:d0:f2:50:80:60:a1:
41:66:5a:e4:48:9b:b5:1f:6c:9d:4f:ff:c6:50:8b:81:c6:2d:
6f:f5:27:d1:5e:1f:1e:4b:b8:84:e1:75:4e:3f:24:04:86:87:
09:f0:30:bc:7e:11:f8:91:ba:4d:ef:a8:5d:74:b1:97:e5:88:
eb:85:1b:d6:17:6c:3e:45:7b:3f:80:db:8d:b7:90:a5:5c:e2:
96:7b:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:05:12 2025 by rpki-client