Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/424589DE061311F0AFE8992BC4F9AE02.roa
File: 424589DE061311F0AFE8992BC4F9AE02.roa (raw, json)
Hash identifier: BQSE3M8aLU4Oi80fpt5M7R9+YGB9X9QcMoLQoQkUftw=
Subject key identifier: 4F:E2:CB:C8:A8:83:CE:EE:32:F3:C9:C5:B8:A7:C6:A6:FB:4E:57:B9
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 0D
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/424589DE061311F0AFE8992BC4F9AE02.roa
Signing time: Fri 21 Mar 2025 17:31:53 +0000
ROA not before: Fri 21 Mar 2025 17:31:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153725
IP address blocks: 163.223.178.0/23 maxlen: 23
2401:f860::/32 maxlen: 32
2401:f860::/44 maxlen: 44
2401:f860:88::/48 maxlen: 48
2401:f860:89::/48 maxlen: 48
2401:f860:90::/48 maxlen: 48
2401:f860:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 21 Mar 2025 20:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Mar 21 17:31:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67dda289-9b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:d7:af:df:26:03:94:69:24:39:3e:b4:89:
a3:26:6a:a7:7f:24:b0:4f:44:55:be:11:44:5e:40:
a8:0d:b2:e2:bb:aa:72:f1:1e:0f:a5:06:06:37:85:
6a:ed:c7:ef:db:69:03:a5:64:4a:a1:f2:4b:d5:45:
71:53:2e:b4:fc:48:0d:13:88:30:23:db:9c:4a:54:
aa:37:93:ee:47:77:c1:17:c8:e5:0a:3d:fc:86:ff:
b2:d5:ca:fc:63:48:8c:dc:72:98:f4:62:33:15:55:
2b:4a:6e:51:2d:90:de:30:f4:d4:b5:fc:49:af:07:
aa:8a:3c:e5:0b:b7:16:c9:c6:90:57:a5:3d:c1:3c:
03:ce:3e:cc:4d:31:28:d4:ed:54:1e:2b:af:90:cf:
74:11:87:35:a7:be:d4:72:7b:2c:4b:9b:d6:48:95:
80:9d:df:63:26:30:44:ce:9a:9d:8b:e9:0b:04:60:
b1:1f:25:f5:89:08:fd:c8:2d:70:03:69:6a:e3:c0:
30:3e:63:b8:f4:d7:a9:28:08:5e:a2:f6:07:b7:f3:
00:01:53:20:6f:ec:97:29:e6:b5:95:69:7c:09:f8:
39:cf:16:09:65:5e:5b:fb:89:04:96:73:e0:fa:3b:
88:7f:da:9f:ee:24:e2:8c:3f:35:bf:ce:ae:a9:42:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:CB:C8:A8:83:CE:EE:32:F3:C9:C5:B8:A7:C6:A6:FB:4E:57:B9
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/424589DE061311F0AFE8992BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.178.0/23
IPv6:
2401:f860::/32
Signature Algorithm: sha256WithRSAEncryption
d9:18:5d:8e:28:f8:79:18:0f:75:f4:39:7b:d3:39:f3:62:3c:
90:7d:1d:9f:09:18:38:bd:c5:77:ac:e3:b6:97:d1:ba:2e:05:
fd:ff:f5:f2:de:12:86:bf:35:59:f2:82:30:da:3c:c7:1a:fe:
b7:7b:1b:7d:df:ff:2e:8d:31:06:47:50:f6:01:17:38:02:bc:
5c:cc:4b:e9:62:a6:2c:60:67:20:5c:ae:90:59:04:60:66:02:
1b:e7:59:a6:ff:e3:09:4e:ed:23:24:c8:b8:d7:c8:24:b3:87:
43:e0:8f:6e:20:cc:e0:82:f0:b9:da:98:26:c4:98:39:92:80:
08:04:87:08:bd:50:75:62:8a:57:46:20:82:7f:86:4e:f0:7f:
0e:e9:8a:36:35:b8:93:85:17:6c:e7:07:ec:fc:34:1a:31:6b:
0b:ea:77:6b:57:51:a6:0e:a4:59:a4:27:7f:ec:07:41:79:a9:
1a:26:72:bc:b7:60:55:4d:68:56:8b:56:c2:2e:20:68:38:1b:
d5:31:13:7a:19:dc:25:3a:c1:63:70:ac:97:78:57:9d:79:47:
8a:b3:b7:3d:de:d6:34:27:6b:25:5b:27:46:52:1a:f3:17:30:
a5:82:59:37:89:14:c1:7c:0f:08:8b:1f:0a:94:ec:b6:36:6a:
31:5a:c7:e8
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QkM5ODExMC8GA1UEBRMoRkY4Q0NCRTYxODc1NUExRjUxOTlCRDBDODI3NjBFOEVE
QjhGODVCQTAeFw0yNTAzMjExNzMxNTNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZGRhMjg5LTliMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCRM9ev3yYDlGkkOT60iaMmaqd/JLBPRFW+EUReQKgNsuK7qnLxHg+lBgY3hWrt
x+/baQOlZEqh8kvVRXFTLrT8SA0TiDAj25xKVKo3k+5Hd8EXyOUKPfyG/7LVyvxj
SIzccpj0YjMVVStKblEtkN4w9NS1/EmvB6qKPOULtxbJxpBXpT3BPAPOPsxNMSjU
7VQeK6+Qz3QRhzWnvtRyeyxLm9ZIlYCd32MmMETOmp2L6QsEYLEfJfWJCP3ILXAD
aWrjwDA+Y7j016koCF6i9ge38wABUyBv7Jcp5rWVaXwJ+DnPFgllXlv7iQSWc+D6
O4h/2p/uJOKMPzW/zq6pQh6vAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUT+LLyKiD
zu4y88nFuKfGpvtOV7kwHwYDVR0jBBgwFoAU/4zL5hh1Wh9Rmb0MgnYOjtuPhbow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzk4L0FCQUZGNUVBMDYx
MjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhi
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvXzR6TDVoaDFXaDlSbWIwTWduWU9qdHVQaGJvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi80MjQ1ODlERTA2
MTMxMUYwQUZFODk5MkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAaPfsjANBAIAAjAHAwUAJAH4YDANBgkqhkiG9w0BAQsFAAOC
AQEA2Rhdjij4eRgPdfQ5e9M582I8kH0dnwkYOL3Fd6zjtpfRui4F/f/18t4Shr81
WfKCMNo8xxr+t3sbfd//Lo0xBkdQ9gEXOAK8XMxL6WKmLGBnIFyukFkEYGYCG+dZ
pv/jCU7tIyTIuNfIJLOHQ+CPbiDM4ILwudqYJsSYOZKACASHCL1QdWKKV0Yggn+G
TvB/DumKNjW4k4UXbOcH7Pw0GjFrC+p3a1dRpg6kWaQnf+wHQXmpGiZyvLdgVU1o
VotWwi4gaDgb1TETehncJTrBY3Csl3hXnXlHirO3Pd7WNCdrJVsnRlIa8xcwpYJZ
N4kUwXwPCIsfCpTstjZqMVrH6A==
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:00:27 2025 by rpki-client