Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/E4FC4F1CDFA511EF93B65B0AC4F9AE02.roa
File: E4FC4F1CDFA511EF93B65B0AC4F9AE02.roa (raw, json)
Hash identifier: lwxlYfJwBM2WoyisFPS9YFXhsPwv4A9ecH2vc8Qrf5A=
Subject key identifier: E6:F5:35:C2:FF:CC:76:BF:C4:0B:59:DD:F2:C5:B3:ED:6D:A9:48:B4
Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial: 02
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/E4FC4F1CDFA511EF93B65B0AC4F9AE02.roa
Signing time: Fri 31 Jan 2025 07:35:08 +0000
ROA not before: Fri 31 Jan 2025 07:35:08 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 147224
IP address blocks: 163.61.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 20:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Validity
Not Before: Jan 31 07:35:08 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=679c7d2b-f2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:4a:8b:b1:b2:2b:5e:bd:24:4d:7a:1f:bf:
02:5f:9d:09:6b:9a:9c:b6:ce:1f:cc:90:cf:a7:0c:
ff:1b:9a:50:8d:a4:c0:62:30:83:c8:82:1a:60:82:
54:b9:cf:22:25:a1:dd:94:e6:62:8b:4d:b5:16:98:
3d:1b:09:1f:58:b0:c6:75:69:ba:3f:42:ce:06:11:
4b:65:3f:e4:9e:fe:ab:32:28:79:e1:6d:90:9f:41:
0f:73:46:bc:67:23:fc:15:f4:cc:23:60:e3:be:70:
a1:76:b0:c3:67:c9:38:6e:e3:8b:a7:18:a2:94:3e:
db:fd:59:3f:20:bc:ac:42:1a:d6:03:18:43:00:5d:
a6:02:8b:62:08:d7:bc:9b:c7:b5:a0:f1:ef:25:ea:
f0:d4:18:28:bb:b7:6a:e5:18:91:7d:09:f8:76:fa:
e4:53:2e:af:e4:4d:28:ab:20:19:8e:16:57:45:fa:
0d:86:33:2f:04:d1:77:be:80:f1:d2:36:b1:d7:3e:
7c:ce:5d:e2:33:a3:95:9c:5d:ad:bf:a7:91:c0:3d:
ff:09:3a:c1:40:5b:03:d6:6e:30:1f:3f:1c:f5:01:
2c:8e:4c:e3:45:25:7e:e3:5b:51:f7:aa:f0:07:cd:
1b:57:1e:24:63:2e:26:c8:dd:72:3e:b8:57:fb:1f:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:35:C2:FF:CC:76:BF:C4:0B:59:DD:F2:C5:B3:ED:6D:A9:48:B4
X509v3 Authority Key Identifier:
keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/E4FC4F1CDFA511EF93B65B0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4a:6c:fa:0c:7f:c7:d2:7d:b6:73:83:ab:14:dd:66:e5:6d:
9b:c7:af:4e:cf:24:b2:3e:a0:d2:b6:d6:6c:42:37:3e:cd:6e:
c9:25:55:ad:64:22:1a:4e:3f:c9:11:02:21:e5:17:85:ff:20:
0f:16:1e:39:66:1a:17:90:65:f3:7f:51:15:0e:92:5f:2d:fa:
99:d7:cf:45:e7:e9:e0:17:d2:1e:13:b4:34:1e:d6:71:5b:a0:
ff:8d:ae:d8:c9:e1:fa:9c:34:8a:09:60:f0:2f:dc:eb:a9:28:
fc:e5:2f:2c:65:b8:4c:08:f1:b9:6a:00:79:39:7d:6e:cf:f9:
86:b4:94:93:54:fb:06:80:21:35:51:6c:bd:6c:f7:6f:7b:14:
a6:37:9b:5a:fe:86:1a:6e:3d:55:7e:02:38:a7:d2:05:e2:64:
24:c7:3c:cf:49:90:2e:37:34:4d:ed:4f:cd:0b:6e:f1:d8:6f:
e5:44:86:05:7a:f0:d7:af:e5:c3:08:3a:1f:f8:2c:e2:34:d4:
4e:26:83:9e:0f:c7:3a:8d:de:b2:e3:7a:7c:e8:05:89:6d:cb:
0e:70:8d:d3:f3:df:48:3b:6a:d7:50:81:99:fd:c2:47:54:2e:
74:e4:77:11:73:e5:70:f8:62:ab:12:4c:a1:5a:31:fa:29:3a:
d3:78:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:56:50 2025 by rpki-client