Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/29559B60018811F0A502B10EC4F9AE02.roa
File: 29559B60018811F0A502B10EC4F9AE02.roa (raw, json)
Hash identifier: K0Fqr8MkL4IuHzvpGi0LdvgF5OldC+7ySC0W/4dBxbI=
Subject key identifier: EE:B5:5E:A4:F8:95:C0:F6:4A:00:6E:1F:64:61:C8:02:43:2D:2A:20
Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial: 0A
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/29559B60018811F0A502B10EC4F9AE02.roa
Signing time: Sat 15 Mar 2025 10:27:57 +0000
ROA not before: Sat 15 Mar 2025 10:27:57 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141386
IP address blocks: 163.223.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 09:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153850
Validity
Not Before: Mar 15 10:27:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d5562d-e224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:5a:40:2d:34:1b:02:fa:27:6d:39:5c:23:
2d:79:2c:12:bd:fe:85:01:92:d6:17:d8:92:80:5c:
b7:40:2b:e5:93:18:cb:90:b7:22:bf:3e:fb:13:bd:
80:02:bf:f4:cf:bb:31:32:bc:2c:9f:d4:e5:0e:53:
2e:2e:30:27:39:52:67:db:6f:60:58:26:59:19:82:
22:27:17:bd:19:37:9f:01:af:cd:ef:a3:2c:31:e7:
e7:c0:bb:b8:48:7b:ed:15:77:41:02:71:b1:5f:38:
0d:86:d4:83:8b:06:67:f9:31:01:18:86:2a:b1:97:
5d:b9:89:41:4d:75:c8:07:1e:05:89:80:e9:92:ca:
33:f9:cc:04:2d:c8:b5:c5:2d:af:73:70:94:df:3c:
ea:42:e4:f3:eb:d6:e2:dd:4f:33:77:5d:19:99:e8:
3e:01:6c:0d:57:1f:3b:5e:26:ea:81:a3:8e:09:e0:
e0:26:f7:88:f3:5e:af:a7:f3:1c:ce:58:c8:5f:8c:
9f:33:91:2b:4e:16:da:92:de:f9:85:16:58:07:79:
12:00:b0:ac:2f:01:91:a6:a7:b4:c4:f3:19:1a:5a:
21:56:c8:c5:5b:0f:4d:12:84:97:83:5d:9e:62:2f:
ce:20:8a:92:b2:e7:06:6a:b8:94:2b:c5:71:0a:c9:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:5E:A4:F8:95:C0:F6:4A:00:6E:1F:64:61:C8:02:43:2D:2A:20
X509v3 Authority Key Identifier:
keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/29559B60018811F0A502B10EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f0:b8:88:af:6c:34:90:db:7d:81:34:4b:bf:de:6e:1b:72:
d8:38:de:12:a5:85:59:57:a6:13:e6:ca:92:77:f8:61:30:fa:
45:c0:bc:c6:8b:fc:58:a5:c1:52:24:2b:b5:44:bb:cd:dc:27:
c0:17:4b:0b:b2:af:86:58:3f:9f:b5:76:4d:ae:7d:35:e2:c3:
cb:9b:be:5b:ba:90:92:4e:d7:44:8c:a7:89:17:59:50:12:0d:
47:b4:f3:77:da:18:d5:9b:ec:0d:16:76:a6:f5:bb:d0:47:e9:
9b:91:94:9a:f9:d2:6f:25:c8:00:dc:4b:c9:88:ba:98:b7:4a:
f9:b2:ad:9c:32:3f:b5:a3:b7:e9:7a:52:4f:dd:e2:bd:79:b7:
60:39:a6:3a:8c:09:03:26:ed:dd:7d:f2:9a:64:ab:b4:e5:5b:
a5:fc:7d:3d:0d:56:2c:78:a6:e9:88:f0:ed:a1:52:ef:f7:8f:
62:d8:b0:84:f2:31:4c:8c:b1:eb:01:00:3c:cb:5a:07:f5:1b:
94:9d:bb:63:12:9e:2e:15:09:bd:db:96:84:6f:1e:14:34:d3:
56:27:f0:41:d3:78:6e:d6:5c:1e:46:29:c5:b7:88:6a:ad:1c:
2f:8e:aa:fd:c5:c9:76:32:02:6b:fd:68:e2:02:9a:3a:9a:27:
5e:75:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:32:46 2025 by rpki-client