Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6C0759FC068411F089CE4043C4F9AE02.roa
File: 6C0759FC068411F089CE4043C4F9AE02.roa (raw, json)
Hash identifier: M7LuQ+XuNuLg/AxXbWsvLt7AVD3ITpFZk5GBoZYbnGA=
Subject key identifier: 48:A1:A6:CD:2D:63:C1:F5:49:D6:1F:C1:AC:03:A7:31:63:B4:04:05
Certificate issuer: /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial: 0D
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6C0759FC068411F089CE4043C4F9AE02.roa
Signing time: Fri 21 Mar 2025 18:58:36 +0000
ROA not before: Fri 21 Mar 2025 18:58:36 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153533
IP address blocks: 163.61.0.0/23 maxlen: 23
163.61.0.0/24 maxlen: 24
163.61.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 20:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Validity
Not Before: Mar 21 18:58:36 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ddb6dc-0214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:d4:1d:55:92:5d:92:0d:03:30:65:a3:12:
35:a8:3c:0c:17:1b:9f:2b:10:93:1a:9a:c1:9c:52:
6b:6f:68:83:54:8b:06:1e:b3:7c:b1:53:73:6a:5d:
a1:08:e4:fc:0d:4f:27:3d:f4:6a:87:76:c1:81:5d:
40:0f:b2:0a:b5:e3:c8:fe:f8:b3:89:1f:c5:64:40:
be:dd:1e:b0:63:aa:d1:53:38:af:46:e9:00:1b:ca:
9c:13:b8:f7:f5:4c:50:d4:42:0f:9f:08:d8:69:d0:
72:06:15:9a:f7:f0:9f:9f:41:3f:8c:99:87:08:83:
91:42:4f:97:68:09:89:49:58:23:2c:fe:6f:87:4e:
d4:8d:4a:6f:72:a0:b9:27:b0:9c:77:7c:3f:54:f5:
1a:a6:fb:a8:89:1c:a8:8e:05:1c:ea:6e:c8:1c:b8:
d7:00:fd:de:da:41:8e:90:c1:84:fa:22:52:13:0c:
d3:9a:e2:e3:00:d1:93:a1:15:24:8b:0a:8d:31:e3:
ad:cf:25:65:e0:b4:5e:b9:d7:88:c1:d6:d1:f5:77:
9a:d3:eb:f6:75:58:db:2d:ec:5a:9e:ba:be:dc:6c:
c5:97:83:3d:fb:06:ef:68:c3:ec:39:d3:24:59:7a:
80:a4:50:b5:c4:d1:22:91:5e:8d:c7:5f:73:2b:cf:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:A6:CD:2D:63:C1:F5:49:D6:1F:C1:AC:03:A7:31:63:B4:04:05
X509v3 Authority Key Identifier:
keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6C0759FC068411F089CE4043C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.0.0/23
Signature Algorithm: sha256WithRSAEncryption
67:18:5a:dd:ca:e7:ed:e9:8e:4f:64:96:1a:7c:64:19:a2:8c:
32:47:63:ad:f0:47:a6:f7:11:6e:bf:40:07:69:15:05:62:44:
09:a4:5d:f8:48:56:12:15:98:bb:d4:06:10:93:40:e7:62:40:
c5:e6:2c:36:c7:76:05:fa:2b:9c:f3:7a:60:65:53:db:24:55:
fa:56:fb:ce:72:03:5b:b3:88:cf:fd:c4:d9:2b:67:1c:0b:7b:
d2:30:6c:fd:5a:4d:d3:61:82:8e:0b:1f:7d:97:a7:c9:30:40:
6f:68:08:fe:69:f6:4b:9b:8f:5a:6b:5c:ef:28:5e:ca:64:75:
e3:6a:95:25:f1:b9:16:4c:b5:5a:ba:18:9c:54:c7:e9:a7:5d:
5f:f7:97:cc:bc:54:8e:35:03:6a:c9:72:6e:6e:15:16:9a:ed:
56:37:89:18:04:e8:25:38:b4:78:01:af:a8:f6:94:43:9d:18:
49:70:96:67:43:88:6d:fb:6a:1a:38:fb:94:bf:d7:e6:9e:ed:
5e:43:aa:ea:d5:c0:0e:05:22:a5:11:6e:33:1e:b7:fd:7e:44:
03:d2:39:66:0c:c7:ba:de:9c:d2:e6:a3:cb:7b:10:9e:f2:48:
ab:df:33:b7:17:5b:af:cc:be:49:a0:88:8c:26:f1:b6:26:3e:
ae:e1:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:33:21 2025 by rpki-client