Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/E051D150541011F0B6603436C4F9AE02.roa
File: E051D150541011F0B6603436C4F9AE02.roa (raw, json)
Hash identifier: evVfFPTpHGvgyVqKD8wYTv0WdWvTjGwHFa3Fr1o+v4A=
Subject key identifier: 96:64:CA:34:C0:76:B3:7E:9A:E7:59:A3:24:39:E7:8D:E9:63:D1:AA
Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial: D6
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/E051D150541011F0B6603436C4F9AE02.roa
Signing time: Thu 03 Jul 2025 06:10:10 +0000
ROA not before: Thu 03 Jul 2025 06:10:10 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 9825
IP address blocks: 2401:a0e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Jul 2025 09:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Validity
Not Before: Jul 3 06:10:10 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68661ec2-5ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:dd:f0:97:22:32:42:9b:25:5d:ae:bf:d2:
5e:e8:f2:63:b2:a2:2c:07:dd:75:78:a9:3c:02:95:
d4:07:ea:08:2c:4f:33:59:c1:88:39:06:db:6d:d0:
c8:cc:9d:00:c4:18:a5:41:4a:5c:5f:14:6b:5d:28:
c6:67:19:5f:22:a8:40:fa:d0:d9:c7:81:ef:65:33:
b2:83:fc:94:a7:74:b6:67:8b:a1:66:75:8e:55:3f:
a0:07:3c:b9:dc:53:e7:85:68:8e:90:f3:03:ea:ec:
55:d7:b1:36:ae:4b:33:7e:9a:e8:c5:0a:ea:3f:45:
46:f6:0e:f9:ed:bc:23:ab:a7:65:c9:31:77:b6:ae:
63:c5:12:86:20:87:87:74:40:33:2f:75:c4:c5:23:
ba:73:01:6b:81:fd:28:23:73:a4:88:fa:0f:94:17:
1b:50:41:91:10:8b:a5:52:9a:33:f4:2f:9a:a6:c8:
df:7c:ae:58:0c:a9:e5:6a:5e:ed:ca:06:76:f4:08:
a2:08:42:e6:2f:51:27:e0:2b:b1:0a:46:8c:c2:5c:
cd:fb:69:65:00:b0:81:b2:4e:36:57:3b:54:0f:4e:
03:14:aa:45:f4:32:66:35:ac:5e:22:5c:81:b2:1b:
19:c7:99:42:e0:cf:22:ca:e1:74:56:62:42:db:09:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:CA:34:C0:76:B3:7E:9A:E7:59:A3:24:39:E7:8D:E9:63:D1:AA
X509v3 Authority Key Identifier:
keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/E051D150541011F0B6603436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a0e0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:bb:56:d7:19:da:ed:4a:c6:33:1d:25:0d:75:4c:98:2e:4d:
52:0e:4c:43:6a:99:41:ee:cd:2c:02:54:b5:94:85:aa:16:e1:
34:c4:a2:fa:2f:7c:37:86:16:54:e4:91:af:26:76:17:6c:20:
c2:89:83:ea:58:f8:bc:57:ac:3d:bf:f2:fb:06:c9:73:be:6a:
f1:8c:b6:df:bc:8e:44:a2:80:ae:30:8b:7a:e1:ec:68:bc:b9:
fb:17:75:0e:4a:ed:cc:a7:b0:7f:35:87:a6:d3:9b:85:27:3b:
f5:88:50:ad:d4:80:f3:6a:de:28:41:51:44:fe:29:ff:c3:d0:
9c:d2:d5:f1:f5:a7:46:9d:2b:c9:6e:3c:dd:01:4a:bd:d8:b7:
56:07:2f:2f:01:e5:d9:40:37:45:1b:ea:66:b4:a2:a8:85:ba:
5c:70:1e:c4:b7:f2:d8:bf:cc:11:6f:c7:3b:0f:77:fd:f2:f6:
da:8b:23:73:bf:28:11:66:20:c5:65:cb:3e:cc:a4:2c:53:1b:
c2:71:c9:30:73:02:1c:94:d4:b8:92:18:de:56:a9:72:64:e2:
e8:7c:f3:48:80:fe:bd:e4:22:2a:5c:93:91:83:f4:85:46:5e:
f9:2d:93:64:e2:3f:37:b0:49:c9:d5:4a:86:c6:d5:57:43:68:
b0:66:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:39:27 2025 by rpki-client