Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9602B364FC7511EFA4801046C4F9AE02.roa
File: 9602B364FC7511EFA4801046C4F9AE02.roa (raw, json)
Hash identifier: kUDExOU0jdtQ8k16fWiJtVRZIehX77lT9UQxzO+6aMQ=
Subject key identifier: 10:10:39:3A:17:6F:A0:96:CF:E0:AC:61:F5:C1:88:0C:D3:40:21:BA
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 02D0
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9602B364FC7511EFA4801046C4F9AE02.roa
Signing time: Mon 17 Mar 2025 08:39:13 +0000
ROA not before: Mon 17 Mar 2025 08:39:13 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.136.0/24 maxlen: 24
202.155.139.0/24 maxlen: 24
202.155.156.0/23 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
218.33.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 21:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18
Validity
Not Before: Mar 17 08:39:13 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67d7dfb1-b844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:f7:54:ae:a1:69:ba:63:74:cc:32:aa:5c:
d6:d0:fa:8a:63:22:27:e1:17:56:0a:20:c6:25:39:
e7:e6:13:2f:d3:7d:62:1b:aa:98:6a:79:9c:f9:9d:
01:5f:b1:d5:cd:40:3a:53:a4:93:aa:25:f6:27:c5:
7b:e6:da:21:f1:51:d4:ec:19:a9:f0:8d:4a:93:4a:
65:36:86:4a:0b:ba:a3:ad:8b:a7:04:af:a7:71:ca:
69:75:2d:d6:b6:1c:f9:c3:8e:45:d9:ad:c5:22:22:
bd:dc:c7:82:24:f6:d2:ac:ad:87:4c:db:d3:33:08:
a4:f9:d4:a6:7e:67:3b:7f:de:76:c4:38:8e:09:54:
78:2c:4a:d5:6e:d0:74:8c:f0:59:60:e3:35:41:8a:
2a:ea:e6:1a:15:a3:3c:d8:eb:d2:58:d0:b3:c1:5d:
46:eb:10:b2:62:88:d3:55:c2:00:4e:e2:71:a5:c6:
08:7d:a3:da:bc:f5:68:2f:61:d9:db:b8:d4:d0:ba:
8a:8f:92:33:bd:b9:2c:45:ac:ab:d1:0b:cc:de:db:
29:fb:2a:bf:62:ef:2f:04:af:59:ef:bb:39:eb:f7:
7d:c8:14:00:fa:08:34:3e:ea:d5:13:21:cd:97:f3:
94:65:29:8b:9b:28:bb:ee:d5:7e:90:97:30:c9:1e:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:39:3A:17:6F:A0:96:CF:E0:AC:61:F5:C1:88:0C:D3:40:21:BA
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9602B364FC7511EFA4801046C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.136.0/24
202.155.139.0/24
202.155.156.0/23
218.33.80.0/22
218.33.92.0/22
218.33.100.0-218.33.107.255
Signature Algorithm: sha256WithRSAEncryption
ad:84:a5:ee:62:53:6b:45:1d:50:c1:aa:9e:ba:29:26:3a:ba:
3b:ae:aa:8a:b1:05:1c:b4:99:5c:df:8a:60:20:c6:2f:e7:b0:
72:69:69:34:f9:c9:cc:a8:a2:03:f6:73:cd:14:6c:68:f5:90:
95:40:47:12:89:a3:29:45:8c:23:b6:87:8d:cc:c0:25:dd:35:
1e:83:1e:5f:61:67:15:d7:e4:6e:fc:3c:28:e9:0f:f9:96:8d:
45:2e:1c:10:25:6f:29:23:af:a3:95:a5:d8:6c:28:a0:13:cc:
18:07:1d:88:ae:88:50:83:a6:0b:54:4c:48:26:bf:44:6f:20:
14:fe:0f:f5:1d:3f:13:80:11:ab:ef:54:18:cd:b9:9c:2d:1d:
d8:62:9f:b0:7d:2e:b3:9b:4a:56:a5:e1:e3:07:87:67:48:3a:
75:92:97:ac:9c:87:6c:af:e1:55:e4:09:a6:93:c6:1b:3e:4e:
62:e5:c4:26:75:32:30:c6:2c:11:ec:ec:10:a6:11:66:9d:1f:
28:99:61:19:2f:a7:77:d6:de:0f:a3:ec:33:f6:50:52:76:10:
0b:81:aa:18:e8:01:72:86:52:f6:93:6c:e7:43:42:18:88:0a:
15:65:b9:e5:95:51:03:48:01:85:1a:cc:c5:64:f9:6c:a5:64:
82:9c:0c:a3
-----BEGIN CERTIFICATE-----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Generated at Thu Mar 20 00:42:08 2025 by rpki-client on console.sobornost.net