Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/288256884F2B11F092D9310AC4F9AE02.roa
File: 288256884F2B11F092D9310AC4F9AE02.roa (raw, json)
Hash identifier: 2oUZ3NEprv486z0KF4ZeGdE3LHUndZ5VSmF6Dk3T9Es=
Subject key identifier: 96:5C:82:00:95:58:A0:0E:93:2D:E5:89:78:75:00:AB:39:96:6F:03
Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial: 79
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/288256884F2B11F092D9310AC4F9AE02.roa
Signing time: Sun 22 Jun 2025 05:50:46 +0000
ROA not before: Sun 22 Jun 2025 05:50:46 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139921
IP address blocks: 160.191.128.0/24 maxlen: 24
160.191.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Jul 2025 19:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Validity
Not Before: Jun 22 05:50:46 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=685799b6-0b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:b2:6b:a0:e1:5f:f1:6e:46:d2:02:b9:ed:
91:e9:c5:e6:2c:c7:ca:82:74:77:52:41:56:d7:2f:
40:ee:a6:85:d8:54:eb:db:a2:1c:b8:15:8f:2c:b2:
0a:83:ba:15:be:c9:30:f7:12:c8:83:ca:fa:b8:3c:
c1:94:bf:77:7d:45:54:ad:8d:e7:ed:70:50:7b:39:
2c:d6:ca:6a:35:84:2b:4f:6f:89:49:9f:8e:d6:80:
c5:3f:98:eb:ea:16:ec:09:21:98:07:85:d5:7f:ce:
4c:e6:c7:f8:0e:71:c2:e1:4d:ec:d9:b2:f0:2f:e1:
c1:c2:61:0f:2d:1a:c8:31:cf:c4:65:5b:1e:46:01:
3c:d2:22:dd:8f:70:5e:39:ac:da:b4:80:af:11:13:
17:86:d5:ef:c7:18:00:85:13:83:72:83:6e:e0:bd:
16:30:9f:84:2b:6a:18:22:27:2d:6c:e5:dc:52:72:
31:06:30:70:43:f5:0a:83:c1:a0:b0:ec:61:8a:0b:
a2:25:32:ca:7c:49:4c:e7:ef:d8:94:7b:fb:2f:8b:
87:73:1c:04:d0:f8:dc:91:9c:82:06:52:1e:c5:d9:
ad:8f:8b:d6:4c:cc:f0:76:51:60:2a:67:87:80:8e:
4e:b0:b3:b5:42:c7:4e:03:14:08:6a:b3:01:e0:b4:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:82:00:95:58:A0:0E:93:2D:E5:89:78:75:00:AB:39:96:6F:03
X509v3 Authority Key Identifier:
keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/288256884F2B11F092D9310AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:b4:92:a1:1e:a9:d2:03:a9:99:d8:52:1c:78:5d:7f:89:5a:
fe:4e:e4:62:11:d8:58:ac:9c:e0:90:4b:fa:28:e4:f0:2d:0e:
ff:02:ba:50:42:2d:bd:d6:19:41:89:29:b9:dc:45:e6:1f:f5:
1e:13:38:e7:c8:fa:30:03:3e:49:4c:f5:32:2d:80:a3:fa:51:
38:0e:13:70:12:0e:c1:30:ce:a2:27:05:27:58:8e:49:36:92:
57:02:57:f9:10:94:45:da:1f:42:77:a0:35:5f:67:ab:d2:09:
47:e3:80:1b:74:70:39:13:9c:d6:f1:b5:66:f1:6c:98:2a:1e:
9c:f2:97:c2:3c:66:e2:35:89:04:95:4b:02:b2:f1:c9:e4:d8:
d2:3a:42:08:d6:e3:a5:81:e8:88:0d:00:d5:4e:de:ad:6f:36:
85:76:1c:55:e6:b7:e5:ef:45:4d:d4:61:9c:b2:95:2b:d7:70:
8d:bf:13:3e:c6:7f:6d:49:b8:2e:8a:31:9e:38:7c:0b:06:21:
f7:cc:b9:46:99:3f:ea:0a:b7:f1:d9:04:76:d6:63:1c:57:aa:
fd:a4:ab:59:85:39:fd:89:fc:0b:50:c0:4b:ed:11:94:5c:17:
43:48:76:b4:3e:1d:58:6e:eb:da:1b:56:a8:fc:8e:62:bd:dc:
62:b7:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:39:40 2025 by rpki-client