Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/CACDE81E294011F0A6641C48C4F9AE02.roa
File: CACDE81E294011F0A6641C48C4F9AE02.roa (raw, json)
Hash identifier: PzREfu78OWSH125VHjyi1nS76m6CdW2+ft1raSXlUVY=
Subject key identifier: 74:E2:44:83:09:97:F6:5F:4D:D5:A0:A9:55:26:C6:C6:9B:97:08:37
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0212
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/CACDE81E294011F0A6641C48C4F9AE02.roa
Signing time: Sun 04 May 2025 23:37:50 +0000
ROA not before: Sun 04 May 2025 23:37:50 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.134.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 00:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: May 4 23:37:50 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6817fa4e-c876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:c6:70:11:ac:cf:f0:cd:b3:27:2a:05:9b:
95:f6:d2:d6:7a:cb:f0:c8:26:fb:eb:2a:65:0f:42:
da:d1:b6:f4:80:b1:09:0f:35:5b:e8:75:8d:9d:bc:
ec:63:be:55:5b:8e:26:7e:8b:4f:23:e4:c4:52:9d:
dd:84:6b:d3:8d:06:94:b3:49:67:ce:dd:e6:81:a6:
8c:0b:0d:d2:38:66:dc:46:12:85:68:e4:92:2c:8b:
15:c7:5b:6f:e6:d9:3d:0f:ee:02:4a:fe:96:47:d5:
b4:c5:14:43:6f:08:0c:7a:60:d4:2c:91:7e:41:50:
a7:3f:7e:23:f5:c8:f5:c2:76:d5:91:2b:25:6d:52:
5b:f5:b8:a4:6c:90:db:62:bb:33:e9:b5:c9:d7:12:
ef:80:6f:9e:2e:28:bd:e4:4c:6d:88:e1:8b:c6:8d:
fc:e1:9b:0d:0f:be:be:5e:0d:db:13:75:19:d7:5d:
8b:ef:b0:5c:2f:de:af:79:c3:2f:4f:a3:76:e6:6b:
36:29:b4:55:66:d9:48:ef:5c:86:fe:c7:a6:d2:cd:
3b:b9:6c:23:1d:da:59:63:f7:aa:66:a8:69:d7:57:
88:b5:dc:db:bc:17:06:d7:a4:d2:fc:72:38:c7:18:
8b:28:50:9f:23:f0:63:31:98:da:02:92:ee:8a:47:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:44:83:09:97:F6:5F:4D:D5:A0:A9:55:26:C6:C6:9B:97:08:37
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/CACDE81E294011F0A6641C48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.249.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e9:6a:18:58:5f:c6:bb:3c:53:91:4f:02:64:c9:ec:04:e4:
fb:da:df:1c:aa:18:86:95:f3:06:fb:85:52:f7:f0:61:86:8a:
f1:ee:c2:a1:9c:e4:1d:7f:85:d5:29:8f:fb:af:70:8b:63:39:
da:c3:3d:f6:6d:d1:20:0d:30:7b:74:b6:a5:4d:18:f2:8e:a0:
4c:2e:a0:1e:79:2f:c7:8c:dd:3d:84:2e:ba:64:e5:d1:eb:84:
ce:8b:6f:1a:cb:66:08:7f:c9:c1:59:7d:1f:24:4e:1b:f2:3e:
d6:67:ce:cf:9d:f3:7e:6a:1a:ef:a8:fa:5b:74:7b:af:fa:87:
5d:35:d6:74:c9:ef:48:df:78:c7:86:5d:81:34:8b:2d:77:e0:
b6:25:84:3e:19:5f:ff:9b:4f:e6:1c:c5:d5:3e:c9:8f:e9:c6:
f2:96:d4:71:38:07:50:46:7c:0a:00:5c:f5:39:23:a6:15:b4:
2d:6e:59:4d:6f:8a:4f:f8:66:cc:56:0e:cb:19:97:d0:fe:fb:
ec:f1:ba:de:45:0b:7c:17:7c:a2:8b:34:4c:23:93:1e:79:f9:
3c:f7:04:59:b1:4e:43:cc:78:12:bd:d6:13:dd:de:11:d1:1a:
0e:09:51:1f:49:d4:c0:80:45:e1:fc:b5:5a:c7:1e:07:ed:fc:
1a:6b:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:37:32 2025 by rpki-client