Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/26FA90D0F88411EF911D326CC4F9AE02.roa
File: 26FA90D0F88411EF911D326CC4F9AE02.roa (raw, json)
Hash identifier: bqfcrY+UAURMNbek85uCjjgQ8KbRD72ZmEwlfo9GdMA=
Subject key identifier: 59:17:AB:E9:67:A1:F3:2B:83:89:D0:A3:23:B0:E2:F1:35:54:59:3A
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 02B3
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/26FA90D0F88411EF911D326CC4F9AE02.roa
Signing time: Thu 06 Mar 2025 00:10:18 +0000
ROA not before: Thu 06 Mar 2025 00:10:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.136.0/24 maxlen: 24
202.155.139.0/24 maxlen: 24
202.155.159.0/24 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 23:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18
Validity
Not Before: Mar 6 00:10:18 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67c8e7e9-d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:9b:f5:5f:ac:71:d3:46:a9:19:1a:ed:3f:
cc:cb:03:da:e3:b6:cc:e6:d9:43:ec:4e:a2:e3:d1:
8c:09:95:ae:1e:18:8e:53:b8:64:c2:53:cc:2f:d7:
ac:3a:fc:73:af:3b:4a:9f:ab:38:d8:65:6d:80:04:
d3:5f:71:19:fc:43:74:98:d5:4c:4a:82:77:fb:0c:
22:d3:04:b8:24:1a:57:c3:7b:8f:d6:93:d8:b4:40:
c4:68:ff:ff:03:9c:d4:5d:db:b6:b1:13:e2:1a:73:
d6:72:b2:b6:f5:d4:bd:4d:cf:5d:60:4f:35:90:97:
39:f1:d3:8c:8d:ab:75:b1:27:ff:80:5a:2e:d6:84:
41:0f:87:cb:33:96:28:c8:af:fc:3d:bd:9f:51:8b:
8a:35:a8:e4:54:13:be:d3:be:30:86:c6:1d:6e:37:
4c:aa:c2:fe:a2:dc:59:b7:fd:fc:ec:20:32:1e:84:
8e:1a:0e:d9:b8:d2:1b:fe:a2:e0:40:30:55:39:f3:
26:9b:ca:5d:32:1e:b2:a3:cf:33:ee:0d:48:1a:2b:
a8:7b:d1:69:4a:6f:b5:bf:e5:e8:c4:29:f5:67:ac:
ec:51:58:7f:23:5c:cc:75:df:5a:28:c4:39:77:7b:
73:6d:0c:0a:cb:32:b5:9c:36:23:b3:4d:e7:40:49:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:AB:E9:67:A1:F3:2B:83:89:D0:A3:23:B0:E2:F1:35:54:59:3A
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/26FA90D0F88411EF911D326CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.136.0/24
202.155.139.0/24
202.155.159.0/24
218.33.80.0/22
218.33.104.0/22
Signature Algorithm: sha256WithRSAEncryption
23:af:52:9a:8d:60:43:d8:db:b4:42:37:73:ff:3a:27:89:7a:
a3:a7:c9:b7:9a:f6:86:93:52:e2:4b:ed:f4:71:ff:72:80:ce:
79:55:34:6d:f9:a1:b1:aa:29:22:e3:8d:76:9b:63:54:08:23:
00:97:f1:79:21:e9:cc:98:de:77:ff:a1:83:69:39:50:1c:79:
1e:15:a0:a3:2b:e1:5b:2e:69:ef:bc:8a:ff:b3:a7:08:1a:e0:
27:65:e9:98:04:dd:26:32:27:e6:24:8b:a0:71:ac:f2:cd:d0:
7c:0a:fd:10:fc:bc:b2:4b:9e:6c:69:88:8f:e6:11:15:a5:90:
ac:e0:fc:09:ad:fc:5c:8d:72:e4:48:af:93:a0:29:21:5d:59:
a7:5f:1f:ef:d4:de:d7:b8:97:db:6f:fe:35:ed:5c:18:b7:a0:
cb:dd:fa:21:ea:6b:a9:8e:f7:87:62:0d:f7:d3:3a:93:3b:15:
1f:2f:29:ef:d2:7a:97:9b:6f:c4:93:78:f7:cd:c4:d7:82:c7:
45:1b:b7:77:75:8f:d5:99:93:d3:aa:d6:38:7b:07:b6:8a:2c:
72:72:d0:32:22:0d:5a:51:3b:16:49:29:9c:3b:ee:f5:b3:5f:
f2:db:a3:61:54:90:46:29:8b:2d:7d:89:11:47:39:89:d6:d8:
32:a5:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:17:05 2025 by rpki-client on console.sobornost.net