Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C244E42E217311F0B1300933C4F9AE02.roa
File: C244E42E217311F0B1300933C4F9AE02.roa (raw, json)
Hash identifier: 2Jb3xwFu0OZVOKXsi8hElnOphqgXaJCugAZyj+W7z8k=
Subject key identifier: 1D:73:D3:8B:5D:3B:EE:05:A3:95:67:22:CB:E9:EB:B1:F5:DC:C0:2E
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 032B
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C244E42E217311F0B1300933C4F9AE02.roa
Signing time: Sun 27 Apr 2025 14:24:39 +0000
ROA not before: Sun 27 Apr 2025 14:24:39 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.137.0/24 maxlen: 24
202.155.141.0/24 maxlen: 24
202.155.142.0/24 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
218.33.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 09:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Apr 27 14:24:39 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=680e3e26-5c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:76:0d:db:25:f1:54:1b:59:1e:4d:cf:25:
9d:ff:37:eb:fe:75:59:01:1c:e3:07:ad:ff:a8:51:
7f:63:e9:b9:ca:4a:cf:e3:91:f1:77:5f:72:c2:dd:
b2:40:1e:13:8f:e5:5f:17:7b:66:16:a8:df:9e:35:
8b:f4:a3:4d:86:17:33:8f:25:fe:de:12:0b:b2:6d:
7e:55:9e:f7:cf:84:f5:19:3e:c8:d7:8d:e8:5b:bc:
be:64:27:cd:9f:b7:bb:dc:6b:23:f9:01:57:24:22:
d9:fd:e2:09:d4:c9:e2:62:0e:68:60:cd:4d:58:e1:
0e:89:62:f4:d7:29:10:3a:00:f6:a2:bf:80:47:3d:
5c:b5:e1:7c:51:11:6d:88:b2:8c:44:18:00:7d:9f:
7d:9b:bb:de:b2:4d:9b:7e:71:42:2c:8c:d2:f1:b2:
1c:40:73:94:ad:d5:5b:0c:92:08:28:36:c5:8d:44:
e1:ae:44:0d:1b:4d:7c:08:42:f6:01:bf:1c:cd:d8:
14:6d:b0:a2:5b:eb:36:fe:f3:f1:f5:2e:78:4e:11:
9a:82:06:28:e0:80:c5:53:02:aa:87:bb:54:3d:96:
e7:11:96:fb:ef:ac:aa:74:8a:cc:78:da:7a:d0:c2:
26:91:59:45:ef:18:99:40:e0:17:1e:6f:6d:78:b6:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:D3:8B:5D:3B:EE:05:A3:95:67:22:CB:E9:EB:B1:F5:DC:C0:2E
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C244E42E217311F0B1300933C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.137.0/24
202.155.141.0-202.155.142.255
218.33.80.0/22
218.33.92.0/22
218.33.100.0/22
218.33.124.0/22
Signature Algorithm: sha256WithRSAEncryption
de:1e:0b:56:54:70:83:0a:72:bc:d2:77:f5:86:e6:0d:b4:cc:
7e:26:7e:67:89:78:95:29:9d:14:58:69:39:76:ef:24:2e:9d:
03:6a:98:90:9f:84:40:71:15:94:69:e5:13:be:93:3c:77:33:
5d:bd:91:12:13:c9:1a:83:f1:c6:85:2a:ae:cb:f5:47:eb:4b:
2a:f9:af:cc:18:70:08:63:a6:98:93:f2:8a:9c:af:fd:9d:18:
7e:26:c5:be:26:e1:78:50:1d:cf:f2:0a:be:dd:2a:03:e2:b9:
91:16:e0:1b:7f:93:03:1f:eb:ba:21:e9:d6:9f:2e:23:e3:2f:
85:ea:d1:98:6e:24:57:07:65:83:d0:30:e6:e1:6b:51:42:18:
9e:cd:98:38:f3:d1:ec:a3:32:b2:48:f3:5b:0c:7b:45:a9:ae:
ac:12:98:ca:fe:45:04:5c:91:e6:7b:99:d0:11:cc:9f:be:bd:
41:11:86:4e:e2:94:5d:32:20:36:c1:66:cd:74:93:61:4a:be:
ab:3d:40:0f:51:6f:8f:c2:32:7c:79:2a:fd:0a:e2:13:b3:1a:
95:62:3c:8b:74:2d:a7:96:01:9d:12:24:6d:da:50:b2:cb:ba:
78:44:1c:23:53:d1:04:58:42:ea:18:f9:83:27:4c:5e:e0:e6:
d9:4c:a9:fb
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwNDI3MTQyNDM5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODBlM2UyNi01YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rx2Ddsl8VQbWR5NzyWd/zfr/nVZARzjB63/qFF/Y+m5ykrP45Hxd19ywt2y
QB4Tj+VfF3tmFqjfnjWL9KNNhhczjyX+3hILsm1+VZ73z4T1GT7I143oW7y+ZCfN
n7e73Gsj+QFXJCLZ/eIJ1MniYg5oYM1NWOEOiWL01ykQOgD2or+ARz1cteF8URFt
iLKMRBgAfZ99m7vesk2bfnFCLIzS8bIcQHOUrdVbDJIIKDbFjUThrkQNG018CEL2
Ab8czdgUbbCiW+s2/vPx9S54ThGaggYo4IDFUwKqh7tUPZbnEZb776yqdIrMeNp6
0MImkVlF7xiZQOAXHm9teLZXFQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFB1z04td
O+4Fo5VnIsvp67H13MAuMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQzI0NEU0MkUy
MTczMTFGMEIxMzAwOTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E
NjA0MDIEAgABMCwDBADKm4kwDAMEAMqbjQMEAMqbjgMEAtohUAMEAtohXAMEAtoh
ZAMEAtohfDANBgkqhkiG9w0BAQsFAAOCAQEA3h4LVlRwgwpyvNJ39YbmDbTMfiZ+
Z4l4lSmdFFhpOXbvJC6dA2qYkJ+EQHEVlGnlE76TPHczXb2REhPJGoPxxoUqrsv1
R+tLKvmvzBhwCGOmmJPyipyv/Z0YfibFvibheFAdz/IKvt0qA+K5kRbgG3+TAx/r
uiHp1p8uI+MvherRmG4kVwdlg9Aw5uFrUUIYns2YOPPR7KMyskjzWwx7RamurBKY
yv5FBFyR5nuZ0BHMn769QRGGTuKUXTIgNsFmzXSTYUq+qz1AD1Fvj8IyfHkq/Qri
E7MalWI8i3Qtp5YBnRIkbdpQssu6eEQcI1PRBFhC6hj5gydMXuDm2Uyp+w==
-----END CERTIFICATE-----
Generated at Sun May 11 19:22:14 2025 by rpki-client