Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/128872900FC511F09CB55F87C4F9AE02.roa
File: 128872900FC511F09CB55F87C4F9AE02.roa (raw, json)
Hash identifier: fDj0l315b7FEOvgQc4TJMXL05bJwOuAi+Vyi7Kvhke8=
Subject key identifier: F1:4A:8C:6E:E3:0F:4D:46:5B:C9:8A:6F:5C:CF:E1:04:DA:60:F2:9B
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 02F6
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/128872900FC511F09CB55F87C4F9AE02.roa
Signing time: Sat 05 Apr 2025 02:23:08 +0000
ROA not before: Sat 05 Apr 2025 02:23:08 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.134.0/24 maxlen: 24
202.155.135.0/24 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 17:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18
Validity
Not Before: Apr 5 02:23:08 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67f0940c-9484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:df:70:5e:04:c6:92:3a:e1:90:0f:5f:88:
5d:09:57:4d:61:e9:33:01:24:e0:bd:e1:8d:78:96:
a0:00:2b:96:90:ab:08:46:73:a2:45:ac:d7:9e:89:
8c:e2:c2:12:0a:3e:cf:d5:27:8f:b3:04:13:c8:0f:
af:24:8a:84:94:53:07:b8:c3:db:38:75:b0:91:ed:
5b:89:ba:84:56:ec:43:8c:42:b2:1f:ea:08:c2:47:
49:d6:54:b2:32:6d:5d:b5:44:ed:7d:dd:23:be:cf:
f7:80:30:98:5b:a9:9a:4e:7b:f1:fd:a6:92:fd:8c:
17:0d:70:77:48:09:41:3c:05:ef:da:de:b4:c1:a7:
a3:fa:e1:07:8f:6b:bf:8c:cc:74:d8:bf:09:d0:a0:
ee:9f:b7:72:7b:94:26:99:de:33:93:e9:e0:06:0a:
f1:79:02:a6:44:8a:40:f1:9f:30:54:0a:fa:bc:c8:
3d:53:79:c2:c4:1c:62:7e:f7:89:ad:97:df:e1:1e:
29:cd:a6:1e:5b:cf:52:a4:89:f4:15:3d:5b:fe:b6:
a0:28:f7:25:ac:af:f7:0e:ed:27:d7:a4:6e:7d:b7:
70:59:28:b8:d8:78:0e:ed:cb:1f:3e:f0:19:be:fc:
e3:c9:75:e8:7b:3c:09:3e:4c:42:98:27:aa:8c:63:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:8C:6E:E3:0F:4D:46:5B:C9:8A:6F:5C:CF:E1:04:DA:60:F2:9B
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/128872900FC511F09CB55F87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.134.0/23
218.33.80.0/22
218.33.92.0/22
218.33.100.0/22
Signature Algorithm: sha256WithRSAEncryption
61:e8:1d:60:a4:0f:42:f6:c1:ed:e8:63:b6:f0:9c:18:fa:fa:
ee:f6:35:d1:4c:bd:d1:e8:7d:25:cf:8e:f5:97:81:43:84:61:
51:c7:21:d4:46:4a:7b:7a:ea:09:26:b8:62:c4:03:8d:cb:7d:
4d:b8:40:cc:8f:ce:48:99:80:35:92:05:0a:d2:aa:c0:ee:dd:
19:30:3c:0c:ae:e8:75:98:db:29:99:97:d3:49:01:f7:47:d2:
83:dd:c3:ca:5b:49:5c:3a:8a:94:97:89:3e:d7:aa:03:ee:a8:
b0:3d:6a:b1:e1:17:1f:c2:e1:04:8b:17:b4:b2:a0:62:8c:68:
24:55:52:c4:0e:73:9c:d5:d7:0d:1b:07:2d:31:53:de:04:91:
cc:18:73:c1:9e:86:4b:8b:9b:f8:70:8e:d1:b5:f1:a6:80:ea:
19:78:83:0c:dd:21:6e:32:7b:9e:12:30:c5:ac:39:be:db:32:
3d:fd:24:51:2b:1a:ca:c0:94:13:f3:32:57:9d:c5:85:68:d1:
19:44:ac:24:1b:3d:3e:81:61:b5:6f:e1:fb:fc:e0:0f:2c:07:
6c:16:af:36:47:2f:99:c1:a6:60:1c:ea:80:f3:81:dd:46:e4:
b0:cb:bf:87:16:d1:03:72:93:2c:73:e8:ad:46:91:da:3f:4f:
d1:f3:81:22
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 10 21:28:34 2025 by rpki-client on console.sobornost.net