Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/AE999E1E7F7F11F0B11FE740C4F9AE02.roa
File: AE999E1E7F7F11F0B11FE740C4F9AE02.roa (raw, json)
Hash identifier: nw7aSOmfctSXRFzgqHRB9cu+Oga8iTgmwsYlL0kZG8Y=
Subject key identifier: C3:BE:CD:F9:5C:18:91:42:75:D0:EC:BD:99:03:4A:E1:0E:16:A1:12
Certificate issuer: /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
Certificate serial: 1F
Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/AE999E1E7F7F11F0B11FE740C4F9AE02.roa
Signing time: Fri 17 Oct 2025 14:07:58 +0000
ROA not before: Fri 17 Oct 2025 14:07:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 55201
IP address blocks: 2404:c640::/32 maxlen: 32
2404:c640::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 20 Oct 2025 06:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
Validity
Not Before: Oct 17 14:07:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68f24dbd-7334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:7a:d2:22:14:ef:c6:df:36:35:04:58:35:
71:84:ce:94:12:93:58:d2:29:e4:78:84:50:e7:ae:
97:65:0d:44:9f:e0:00:53:6d:6b:c0:56:7e:56:30:
a0:08:b0:bb:ac:82:13:27:d7:24:6e:8c:f9:42:21:
79:9d:0a:46:23:9d:6a:da:94:f1:40:0f:5b:6d:c9:
5f:17:eb:38:37:86:84:87:20:17:d0:66:65:15:e8:
62:27:d3:37:a6:10:dc:5b:4f:34:f5:54:ff:78:ba:
1a:39:c5:27:3b:28:a8:b1:47:56:7f:14:2f:2a:b5:
ec:66:f2:63:6a:b2:0d:af:3e:98:4c:ae:75:97:7f:
60:9a:0d:42:2e:02:af:9f:2b:53:78:bf:b4:e0:9a:
12:52:46:b9:fa:5e:ac:1e:7f:fd:80:28:2a:2a:6e:
ef:61:96:bb:d4:2f:14:97:d4:50:1c:a1:ab:c4:65:
21:d0:05:31:ce:4b:43:21:d6:84:ab:3c:b9:27:e8:
cd:21:ac:5e:5c:dc:96:29:45:74:21:fe:8f:a6:c8:
b1:e0:1c:6a:f6:41:89:87:71:8d:f3:7c:da:6a:e1:
23:ad:f0:48:0b:09:ac:8f:8d:34:6b:d5:46:1c:13:
75:82:7a:e2:4f:66:97:63:96:72:04:99:55:be:98:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:CD:F9:5C:18:91:42:75:D0:EC:BD:99:03:4A:E1:0E:16:A1:12
X509v3 Authority Key Identifier:
keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/AE999E1E7F7F11F0B11FE740C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:c640::/32
Signature Algorithm: sha256WithRSAEncryption
a4:34:2b:4a:cc:21:a9:b3:d8:63:ad:f0:16:3f:8d:6d:aa:8a:
f9:7d:f7:1d:02:d2:ed:3d:78:19:b9:f6:e1:2f:6b:1c:66:38:
a1:e2:4d:25:0d:69:1c:59:1e:85:c1:34:fc:ac:0b:c6:bd:51:
d1:69:28:10:1d:99:f6:ef:35:e3:fa:95:b7:00:3d:6f:c9:6d:
16:e9:71:da:07:47:12:cc:93:12:1b:4d:fd:1b:71:aa:2e:c0:
7a:eb:5c:d5:50:df:70:a6:41:a8:1d:88:5a:d3:82:76:b5:3b:
a7:da:b1:b4:f3:68:30:45:80:a7:a6:25:d4:92:65:4c:dc:68:
34:82:57:78:53:83:29:08:84:26:34:0f:96:60:61:7d:b3:d7:
3d:ff:03:8d:88:a4:ae:8e:70:45:e9:c8:04:de:94:6b:89:a9:
9e:13:c9:69:8a:be:3c:34:de:75:a0:91:6d:9e:38:3f:3b:ca:
61:4b:92:a2:bb:56:a0:32:21:e3:00:ab:58:f5:31:86:6f:b6:
e7:88:86:75:cf:f6:7f:a1:17:55:57:8d:a8:95:a9:ba:8e:5e:
1a:51:0c:b0:94:c8:b8:64:1c:e7:36:f7:44:1b:e9:38:b5:f2:
59:9a:f0:bc:8a:5e:c0:ef:21:67:aa:9d:83:73:b8:c0:fa:60:
b4:02:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:30 2025 by rpki-client