Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CD843242EF5D11EFA15B580DC4F9AE02.roa
File: CD843242EF5D11EFA15B580DC4F9AE02.roa (raw, json)
Hash identifier: ighwwoIoB/hqwC6NEB1yaB5MkiB7uZW6ja95rSu/mC0=
Subject key identifier: 72:15:CA:DA:BD:C5:26:85:95:34:75:34:09:41:36:42:76:EA:2F:13
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0BC2
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CD843242EF5D11EFA15B580DC4F9AE02.roa
Signing time: Thu 20 Feb 2025 07:39:23 +0000
ROA not before: Thu 20 Feb 2025 07:39:23 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136908
IP address blocks: 117.121.230.0/24 maxlen: 24
117.121.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 05:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Validity
Not Before: Feb 20 07:39:23 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b6dc2b-9776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:13:8f:c2:99:c0:c2:a9:57:60:5a:26:50:
97:0d:ac:10:3a:e0:0a:3d:80:c9:d9:c2:a6:80:ca:
ca:7c:02:3c:41:35:d7:59:ed:b7:fc:07:15:de:7c:
18:79:75:7f:e0:f7:c6:35:10:6b:65:ae:45:72:a0:
c6:d0:1c:20:d0:db:d2:05:81:0e:31:c3:ee:74:70:
21:8a:78:fd:8c:63:c0:1e:4e:0b:9a:96:6b:e2:57:
c5:fc:90:33:cc:9b:9e:e4:e2:44:bc:3f:30:f0:46:
bc:08:18:d1:6b:5f:6b:23:49:35:5f:74:4e:f0:b9:
af:76:cc:93:01:41:04:16:6b:fc:d9:a7:be:bf:ed:
52:6c:b8:20:b6:70:b1:ff:8f:05:44:28:42:61:2b:
8b:e8:b6:61:5e:74:0e:3a:6b:fa:84:80:7f:9d:27:
35:24:d8:55:95:45:d3:3d:fc:e7:a7:20:b6:d8:9b:
9f:2b:68:e8:b1:fc:65:76:16:e3:b0:fd:3e:41:b1:
ce:74:c1:ff:72:fa:31:f2:55:6b:f5:c1:71:5d:71:
8c:fe:7c:b1:51:5b:fa:00:3e:8a:d8:3a:49:f6:61:
e4:c9:9e:7c:a4:dc:a9:e3:55:75:d4:f7:ac:f5:fc:
d3:4f:bc:a3:a1:ef:2e:17:a6:23:b1:f0:60:98:13:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:CA:DA:BD:C5:26:85:95:34:75:34:09:41:36:42:76:EA:2F:13
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CD843242EF5D11EFA15B580DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.230.0/24
117.121.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:db:5b:01:10:3e:c4:1d:33:4e:8c:e7:27:f3:83:26:bd:44:
d2:38:4e:34:8a:82:2d:85:c2:b7:d2:8b:ee:e3:f2:db:fa:a8:
80:80:4f:d3:4d:1a:43:e4:b0:ce:fe:da:1f:45:bd:ff:a9:d5:
bc:cf:1e:0a:83:a2:a3:5f:c1:96:85:77:73:1a:1e:dc:1d:ee:
76:52:13:d0:88:32:64:41:33:9d:e3:1d:c3:b0:e0:1d:df:61:
ec:e7:ac:44:5a:db:8e:ed:16:b2:9d:b2:04:aa:80:9a:64:ed:
7b:70:06:76:ff:af:69:6a:9c:9a:cc:b3:97:75:2d:81:7a:04:
f7:10:fe:c2:ee:38:8c:be:3c:96:34:34:72:cc:68:a7:ba:27:
89:c4:c0:b1:0d:bf:72:84:59:48:d5:57:dd:4b:8c:47:1e:c3:
41:dc:28:00:9b:d4:4b:0a:22:e6:32:d0:f4:41:1d:5b:77:a0:
88:88:b5:ae:21:bf:ca:d5:76:21:38:9e:f3:de:0b:07:a9:a9:
35:02:12:26:05:c2:63:84:54:58:02:11:60:03:07:82:70:c2:
d6:07:d4:0c:07:e0:38:aa:28:d0:e8:57:20:38:81:a1:dd:4c:
c7:4d:4e:9d:97:c4:17:fc:8e:1e:5c:bc:75:3d:21:54:a9:89:
c7:31:d6:3b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD
OUJDQTgzOTIwHhcNMjUwMjIwMDczOTIzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2I2ZGMyYi05Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSgTj8KZwMKpV2BaJlCXDawQOuAKPYDJ2cKmgMrKfAI8QTXXWe23/AcV3nwY
eXV/4PfGNRBrZa5FcqDG0Bwg0NvSBYEOMcPudHAhinj9jGPAHk4LmpZr4lfF/JAz
zJue5OJEvD8w8Ea8CBjRa19rI0k1X3RO8LmvdsyTAUEEFmv82ae+v+1SbLggtnCx
/48FRChCYSuL6LZhXnQOOmv6hIB/nSc1JNhVlUXTPfznpyC22JufK2josfxldhbj
sP0+QbHOdMH/cvox8lVr9cFxXXGM/nyxUVv6AD6K2DpJ9mHkyZ58pNyp41V11Pes
9fzTT7yjoe8uF6YjsfBgmBPFKwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHIVytq9
xSaFlTR1NAlBNkJ26i8TMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD
QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M3MUUvQzc4RTRBNzIxQ0E4MTFFQThDQkI0NTQzQzRGOUFFMDIvQ0Q4NDMyNDJF
RjVEMTFFRkExNUI1ODBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB1eeYDBAB1eewwDQYJKoZIhvcNAQELBQADggEBAA7bWwEQ
PsQdM06M5yfzgya9RNI4TjSKgi2FwrfSi+7j8tv6qICAT9NNGkPksM7+2h9Fvf+p
1bzPHgqDoqNfwZaFd3MaHtwd7nZSE9CIMmRBM53jHcOw4B3fYeznrERa247tFrKd
sgSqgJpk7XtwBnb/r2lqnJrMs5d1LYF6BPcQ/sLuOIy+PJY0NHLMaKe6J4nEwLEN
v3KEWUjVV91LjEcew0HcKACb1EsKIuYy0PRBHVt3oIiIta4hv8rVdiE4nvPeCwep
qTUCEiYFwmOEVFgCEWADB4JwwtYH1AwH4DiqKNDoVyA4gaHdTMdNTp2XxBf8jh5c
vHU9IVSpiccx1js=
-----END CERTIFICATE-----
Generated at Mon May 12 13:26:47 2025 by rpki-client