Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/3D61340AEC3111EF94115E39C4F9AE02.roa
File: 3D61340AEC3111EF94115E39C4F9AE02.roa (raw, json)
Hash identifier: lLzOsxx2NpO50oe/Yl2ghvScYH7yiTqzg3vJh8anvo4=
Subject key identifier: 4A:71:8A:06:4A:17:ED:87:0E:00:98:39:22:4E:88:54:F5:1E:E9:EA
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0106
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/3D61340AEC3111EF94115E39C4F9AE02.roa
Signing time: Sun 16 Feb 2025 06:42:50 +0000
ROA not before: Sun 16 Feb 2025 06:42:50 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 873
IP address blocks: 43.231.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 12 May 2025 09:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Feb 16 06:42:50 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67b188ea-a679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:84:37:4d:29:43:1f:e6:04:af:63:57:14:
01:6d:f2:4c:5d:9b:bd:b0:0d:5d:19:93:ee:0a:ee:
6d:59:d2:2b:69:99:a8:e6:29:83:f7:1f:fd:6b:0c:
b3:27:a9:1e:01:a9:23:cd:70:9c:47:c8:5e:7d:8b:
f1:ca:72:4c:12:4c:3a:92:d9:00:8f:08:2e:1f:da:
98:4a:0a:14:19:1c:53:1d:10:dd:15:f1:bc:38:c0:
f0:9c:5e:4b:8d:56:6a:eb:ae:f3:4f:36:fe:7c:2c:
27:67:ed:e5:35:0e:8c:a9:b6:07:29:79:10:fa:ba:
23:ee:2e:10:32:bd:62:d8:a1:ac:cc:b6:ad:f6:9a:
9b:ab:83:d1:cc:fa:07:11:e4:7a:1a:29:03:9c:24:
55:30:12:21:e6:e6:b3:6e:d1:d2:86:f3:30:c4:1a:
b0:92:f5:aa:1c:e2:3d:9d:d4:dd:4d:8a:80:ef:5f:
0c:10:2d:b0:88:b3:e0:e6:9a:ce:05:21:5b:c0:d3:
dc:cc:b1:dd:9b:b3:58:98:50:7a:82:d5:a3:c2:e9:
ce:83:ef:fa:75:e2:9f:88:8b:c6:ae:b4:23:74:57:
56:0c:44:0c:af:e1:88:00:dd:7f:7f:b3:e9:33:50:
05:d1:21:d2:24:59:86:a7:49:3c:80:4c:b0:1c:91:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:8A:06:4A:17:ED:87:0E:00:98:39:22:4E:88:54:F5:1E:E9:EA
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/3D61340AEC3111EF94115E39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:2b:dc:ef:cb:02:7b:c2:60:34:00:1c:a8:0d:97:fc:de:9d:
f5:6d:ad:d6:91:2a:ff:1f:06:16:f8:76:59:91:b3:d8:c4:d3:
2d:49:18:25:9b:6c:bb:30:09:78:36:59:14:87:1d:34:d8:8e:
5e:4c:47:99:f6:55:33:56:bf:48:82:4d:af:8c:aa:91:ac:71:
bf:90:69:29:02:e4:de:9f:d3:80:a8:ba:04:b0:24:91:a5:72:
64:2c:42:91:85:8a:dd:5d:eb:8f:83:e9:a1:27:29:8f:a0:db:
7e:eb:c6:42:25:83:a6:6f:51:2a:59:6a:ae:d7:f1:37:bd:6c:
12:36:a7:fd:00:64:ca:04:4c:da:97:85:e7:3e:1e:9f:a0:09:
50:c5:e9:ac:de:45:c0:13:7a:4a:77:3c:eb:03:e2:1f:d2:f3:
de:e0:1f:94:55:cf:77:05:42:5c:e2:35:21:67:c8:a9:87:c9:
1f:f9:4d:75:03:15:1c:b8:3e:75:4c:d6:b0:93:dd:d6:ae:a0:
69:4f:0a:8a:e1:b0:49:bd:39:9a:a0:1a:03:87:64:dd:c2:26:
6d:67:84:bf:f5:87:1d:55:83:d8:b7:42:c0:f7:2f:f2:d6:64:
38:c1:d2:12:a1:8e:67:b6:6b:a1:75:30:14:a5:20:20:6d:54:
f6:07:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:12:57 2025 by rpki-client