Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D1AD4DBC25A511F0B274BF5BC4F9AE02.roa
File: D1AD4DBC25A511F0B274BF5BC4F9AE02.roa (raw, json)
Hash identifier: KgJlUFLdlsVPy3mG6UW0elGJS0LZ3cjMvdoCV++3pGA=
Subject key identifier: E1:A9:6C:95:31:DD:DA:6F:7E:E3:6B:03:D4:FE:9A:00:D6:07:56:AA
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2672
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D1AD4DBC25A511F0B274BF5BC4F9AE02.roa
Signing time: Wed 30 Apr 2025 09:30:56 +0000
ROA not before: Wed 30 Apr 2025 09:30:56 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 202.92.19.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 05:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9842 (0x2672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 30 09:30:56 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6811edd0-6997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:f5:2a:a2:21:7e:b5:57:18:ae:ee:58:b4:
e6:b7:17:32:10:6f:e2:bf:7c:15:c5:40:ef:fa:a2:
9e:10:e3:8f:fe:b4:04:e5:b5:8e:da:07:44:82:4b:
db:6b:3b:55:5c:7d:1e:b1:ca:97:d5:c8:7e:6e:22:
b2:01:42:93:98:2a:7e:c0:6a:fe:b5:32:ff:b6:f4:
b1:3b:40:fb:a6:d2:15:44:0a:b7:4d:86:5a:c7:8a:
a2:67:eb:84:fd:aa:55:ce:95:6f:41:59:68:52:cb:
26:a6:8e:ed:1c:ab:74:a1:07:ee:6e:eb:b2:52:0d:
71:be:e6:ae:dc:ee:5f:3c:a8:df:41:9d:89:29:6b:
cf:59:a0:1b:97:5d:53:d0:6e:4c:89:c3:59:00:12:
cb:d3:98:16:ba:b9:41:f9:a2:4c:fe:5c:39:c1:f6:
57:7a:93:96:b2:aa:f6:d0:30:cb:dd:41:a5:2f:3b:
2f:40:5e:3c:ae:b3:c9:23:d4:20:ac:4e:55:66:c6:
02:09:6e:63:c4:e0:aa:5e:b8:2e:2a:2f:d5:3a:86:
48:53:35:63:fc:2d:22:e7:6e:63:08:38:3c:1d:44:
e0:d3:e3:f9:18:68:34:7d:87:1e:24:86:ba:65:83:
f0:d7:5a:b1:a5:0c:fc:09:28:7f:66:72:3a:3f:2e:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:6C:95:31:DD:DA:6F:7E:E3:6B:03:D4:FE:9A:00:D6:07:56:AA
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D1AD4DBC25A511F0B274BF5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.92.19.0/24
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
04:98:28:92:e8:a9:d4:b6:f4:82:79:59:b1:59:c2:28:95:fd:
8a:ba:e3:97:e9:9c:cb:61:90:19:27:49:fc:81:62:04:0f:a0:
3c:a6:d2:02:45:43:ac:1d:00:84:21:f2:ac:fd:8d:9e:c3:ba:
ae:a7:64:1c:f2:71:d0:c7:9d:ac:6b:f0:2b:3b:75:18:de:41:
e4:e1:e3:85:5c:d9:fe:1b:9f:bf:24:96:7d:50:ad:0c:7a:78:
e8:b6:92:96:e5:b2:f9:85:06:9e:f1:26:37:56:2a:76:98:5d:
33:bf:6f:8b:07:6a:16:21:c0:06:bc:59:c1:5f:8d:95:51:da:
29:fb:61:68:e1:df:20:ac:61:84:7c:41:72:52:df:e4:dd:49:
21:90:70:fc:11:64:2f:9f:87:4d:06:25:ac:ac:37:bd:0c:e6:
2e:21:85:62:60:45:00:b5:e2:61:5a:f1:24:9e:c8:b7:e7:01:
55:4f:c1:ee:22:19:8b:23:5b:4b:d7:48:03:08:2d:99:62:e4:
1b:b2:4e:9c:1e:22:03:cc:26:0b:0f:26:98:d5:fd:bb:d4:d3:
40:6b:73:5b:5b:51:77:67:1c:9a:70:70:30:61:3d:1a:55:08:
e7:9d:42:18:a5:af:36:2f:0b:33:73:ce:c0:d4:f3:28:27:ed:
a2:22:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:43:47 2025 by rpki-client