Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/45A22FF203C411F087720A1FC4F9AE02.roa
File: 45A22FF203C411F087720A1FC4F9AE02.roa (raw, json)
Hash identifier: FHU5TxD/Wv2NT/tSMafImY6a1mu7LmRImyeTBK5mBHU=
Subject key identifier: 4D:D2:CD:5F:6F:06:97:10:AF:C8:39:AB:23:99:8C:FA:BE:03:1B:4B
Certificate issuer: /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Certificate serial: 02
Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/45A22FF203C411F087720A1FC4F9AE02.roa
Signing time: Tue 18 Mar 2025 06:43:17 +0000
ROA not before: Tue 18 Mar 2025 06:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153685
IP address blocks: 163.223.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 20 Mar 2025 06:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Validity
Not Before: Mar 18 06:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d91604-3b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:46:dd:32:3a:b6:7f:5a:a9:b9:dc:5a:0e:
e3:23:96:fc:de:17:51:9b:e5:d6:89:36:cc:b5:fe:
2a:4b:11:fd:fd:51:c3:6d:0c:41:59:49:04:00:05:
0b:1b:d5:20:ab:23:8b:6b:d2:38:f4:65:3e:30:a0:
d1:94:63:9b:76:5d:83:25:76:0e:6c:bc:cd:3d:99:
92:fd:21:a5:32:3b:25:57:70:96:99:c4:27:bf:b8:
d4:3b:21:b6:3a:f7:b5:5a:41:85:5b:e5:fc:62:bd:
ea:c9:50:40:1d:30:e7:97:a2:ee:b4:e2:8b:6c:6b:
f9:56:ef:fc:e2:37:61:dc:8f:00:64:07:48:10:d0:
df:8d:84:1a:0e:78:9b:fc:69:5d:b9:4f:c7:dd:b9:
b5:31:6c:29:91:45:c5:40:bd:91:ae:40:bc:7f:b6:
29:c4:31:da:bf:97:05:96:25:68:6b:9a:5c:7b:59:
1f:ed:42:8e:b3:f3:b6:a2:aa:08:c9:42:25:91:2b:
ff:36:b4:1e:aa:0e:d4:4e:13:93:34:a3:0a:7a:72:
18:82:31:50:ee:ab:a3:a5:bc:8f:c1:80:7c:a8:bc:
62:17:da:8e:cb:93:fb:16:e9:d2:fa:5d:7b:f1:ff:
74:76:d7:89:6a:c1:fa:bc:1d:d3:cd:cc:ca:55:cb:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:CD:5F:6F:06:97:10:AF:C8:39:AB:23:99:8C:FA:BE:03:1B:4B
X509v3 Authority Key Identifier:
keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/45A22FF203C411F087720A1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.92.0/23
Signature Algorithm: sha256WithRSAEncryption
78:d1:f8:3b:b0:38:05:be:3f:64:2e:ec:de:3b:19:36:36:d6:
1a:fe:ba:93:15:9e:e2:80:9e:ad:64:fe:c5:45:fb:c5:c9:24:
ed:f4:be:92:34:34:6f:94:3f:db:34:74:46:6a:b8:8d:72:31:
fe:5f:d3:91:08:aa:94:c9:09:10:c7:a1:bc:ad:53:2c:da:fb:
e8:e3:cf:ed:73:3c:12:1b:e4:27:f4:07:df:94:30:ff:bc:fe:
3e:cb:72:74:7d:5d:e3:9f:17:c1:d1:4b:12:61:c8:ed:d6:91:
32:07:28:54:12:3b:b1:c1:2a:44:60:d2:f0:33:77:b5:e2:b6:
90:12:9b:05:5f:21:d4:db:d0:eb:f7:cc:46:e0:2b:b9:a2:14:
cc:1d:a0:e0:67:60:46:b4:33:21:6a:29:a6:61:44:74:05:9e:
13:d9:db:11:28:a3:35:66:c1:c6:23:c6:10:cc:15:d6:fc:76:
a3:de:ed:cc:d2:c3:15:ad:fa:b0:b5:b3:ff:0d:6f:af:0e:f6:
1b:5a:5f:83:53:df:74:be:59:57:d4:9c:52:61:6b:58:2e:91:
2b:78:73:a6:a3:13:7b:a3:98:fc:66:37:2a:bf:95:f6:49:36:
7a:cb:7a:2c:a1:ac:a5:76:30:c0:da:78:72:1f:5c:91:fd:cf:
1d:68:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:56:48 2025 by rpki-client