Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/30D374EA253511F0A3783F6FC4F9AE02.roa
File: 30D374EA253511F0A3783F6FC4F9AE02.roa (raw, json)
Hash identifier: KdicOulgvQO/Z8aCNhfz4RXo8pfM0BP5qBvGNHCnWE4=
Subject key identifier: FD:1C:5B:D6:83:E7:C5:4F:85:52:18:C7:F1:EF:4C:61:22:E2:47:67
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0D3C
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/30D374EA253511F0A3783F6FC4F9AE02.roa
Signing time: Tue 29 Apr 2025 20:04:43 +0000
ROA not before: Tue 29 Apr 2025 20:04:43 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 215224
IP address blocks: 111.92.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 12:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3388 (0xd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Apr 29 20:04:43 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=681130db-2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:07:73:10:b7:e4:de:7a:7b:14:ae:77:59:
c7:bf:a3:c8:3d:4e:0b:9d:8c:08:83:c4:3a:15:90:
b1:85:38:0d:39:78:89:b9:4a:b3:2c:fa:a7:a2:34:
c6:42:c1:a1:0b:9b:56:c8:14:3d:0b:a3:52:2d:96:
20:f8:19:2e:1d:ef:28:62:01:c6:9e:fa:f9:bc:1f:
81:09:c4:0e:b3:71:59:1d:d9:6e:ac:9f:69:fb:6a:
d0:86:e5:36:6a:b7:bc:dc:b0:6a:07:31:0a:8c:ba:
6f:68:60:ef:0e:e3:87:4a:75:b4:98:95:90:17:4d:
58:9d:95:2e:6e:8e:05:11:f2:e8:e3:58:11:12:86:
5e:7b:bd:5f:0b:41:43:64:e6:83:3b:9b:8d:75:5b:
6e:10:cd:50:cc:99:f0:c7:5f:f0:e2:70:05:ff:dc:
ee:9a:45:f3:dd:85:b6:9a:b9:fb:9b:1c:47:c2:d0:
27:d5:f0:ef:73:c7:80:c4:54:be:fd:51:02:0e:82:
c1:af:9d:c6:51:c3:64:bf:65:a4:3d:c1:8b:6f:e3:
af:80:69:32:d7:47:3c:9c:d4:50:d0:0b:b3:ba:29:
0c:cc:ca:c0:7e:a9:37:1f:65:c8:78:10:16:69:0b:
31:8c:01:34:15:ef:52:1c:ba:f9:ae:04:fd:7f:6a:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:5B:D6:83:E7:C5:4F:85:52:18:C7:F1:EF:4C:61:22:E2:47:67
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/30D374EA253511F0A3783F6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.92.136.0/24
Signature Algorithm: sha256WithRSAEncryption
14:37:54:06:3d:71:6d:d7:98:04:c6:ab:91:7e:f1:e2:b2:3c:
a8:de:b0:b3:3d:07:b2:54:39:2f:3f:b7:b6:45:11:7d:33:5c:
43:4e:06:62:0f:e3:d1:f4:fb:54:b8:2a:4e:bf:d6:3c:51:c0:
91:e3:26:37:44:9b:17:3e:88:35:3a:c1:7e:e1:0b:85:6a:d0:
62:01:73:f2:27:38:74:e9:73:2f:e6:35:91:d8:cd:cc:7a:f2:
2e:3b:9c:b6:78:ce:e4:38:dd:75:4e:8c:20:70:1b:5e:f9:c0:
3c:29:ab:08:fb:aa:a3:df:ee:61:88:06:1d:df:05:0b:17:3b:
58:61:96:21:6d:09:7f:e9:b9:26:5d:cf:f9:8f:1c:38:07:73:
66:64:cc:55:b5:ce:ea:bd:7d:cd:30:aa:49:0e:99:b2:f7:d3:
be:b1:f6:7e:4c:fd:75:9c:93:36:22:55:2b:ca:63:69:4e:1d:
bb:ad:dd:ea:b6:24:05:4d:3f:e4:7a:eb:73:a3:ed:90:fd:f3:
0e:65:22:8b:9f:fc:04:f8:8b:30:ea:28:9f:12:98:9f:71:9e:
b6:f4:ca:9b:f2:56:da:9b:ec:b3:69:e7:c6:79:fe:d4:62:97:
ff:86:09:48:82:25:36:5d:b8:d0:5c:05:38:36:c3:86:1b:46:
6c:42:1f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:55:36 2025 by rpki-client