Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/560E5330099011F0ABFB6B0BC4F9AE02.roa
File: 560E5330099011F0ABFB6B0BC4F9AE02.roa (raw, json)
Hash identifier: BmOt/wN8l2VJDARt1K7XjZQBHg+TXVWNhXvAws5uRsA=
Subject key identifier: A1:CE:96:5F:9F:FB:7F:D8:12:56:89:8A:90:32:88:13:60:13:3C:AC
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 2B
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/560E5330099011F0ABFB6B0BC4F9AE02.roa
Signing time: Tue 25 Mar 2025 15:47:29 +0000
ROA not before: Tue 25 Mar 2025 15:47:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153725
IP address blocks: 163.223.178.0/23 maxlen: 23
163.223.178.0/24 maxlen: 24
163.223.179.0/24 maxlen: 24
2401:f860::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Apr 2025 17:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Mar 25 15:47:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e2d010-6af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:d8:83:2c:38:50:68:93:8e:c2:40:c3:ed:
c3:85:c4:84:7a:79:99:a8:81:d6:4f:a2:bd:2c:26:
0a:2c:10:24:a4:f2:41:43:a2:ce:3c:34:9b:56:fa:
83:dd:f7:38:c8:7c:ae:ff:4f:6f:2c:be:86:92:d3:
f8:b5:a0:70:d7:1b:05:43:04:f9:af:a6:81:ff:ce:
c3:11:34:61:0c:9b:48:3b:15:44:36:95:f4:48:c1:
ca:98:2d:c5:44:8c:66:ab:59:d1:bd:0b:e7:f0:2a:
08:de:e4:6f:8c:12:10:bf:04:4b:8c:7e:5f:4a:cd:
59:75:1a:b6:b4:ba:4e:ad:5d:3d:5d:64:cc:ea:91:
be:0d:7e:2f:04:08:e0:c0:9f:1c:63:ca:d9:44:d5:
6c:fc:18:97:31:61:62:d7:97:cc:e7:cd:9d:f6:b3:
0e:67:3e:e3:63:71:ef:f5:b4:52:a4:b2:c4:fa:2a:
99:84:cd:a8:df:20:71:8d:b6:4d:d7:c3:bd:a5:76:
b4:78:5e:6a:b2:f9:26:97:b6:64:df:97:53:b8:f6:
37:5c:df:fd:53:6b:02:48:86:49:ad:42:cb:df:3a:
7d:3d:7d:2d:39:35:44:9f:e5:50:03:e0:16:c8:de:
58:3c:3c:34:82:48:21:7b:1c:d7:35:d1:4e:0b:aa:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:96:5F:9F:FB:7F:D8:12:56:89:8A:90:32:88:13:60:13:3C:AC
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/560E5330099011F0ABFB6B0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.178.0/23
IPv6:
2401:f860::/32
Signature Algorithm: sha256WithRSAEncryption
38:33:9f:78:8e:e0:fd:44:06:19:a9:47:84:5b:1f:c1:7d:de:
3d:eb:e2:b7:ba:56:49:3c:03:6d:a5:f4:5f:7a:29:bb:6f:66:
a6:1f:88:05:14:6a:7f:ac:94:1c:4b:0b:1e:8e:39:6e:58:e2:
29:36:c9:95:be:50:8b:9b:6d:68:c3:cf:11:fa:81:d0:dc:b4:
6f:d2:3d:7c:bd:be:40:8f:16:3a:cf:17:74:56:a5:28:70:36:
27:3c:74:2c:21:a0:9f:e4:88:aa:54:6a:e4:88:88:cf:68:77:
a5:96:89:05:7a:7b:68:3b:7d:ac:38:dc:52:e5:5d:95:fc:ed:
5d:c1:27:42:da:e4:6b:90:4f:cb:34:08:af:7b:62:60:3d:02:
ae:af:53:ef:90:f6:b0:f0:9f:e7:83:8f:58:28:fb:21:44:59:
80:13:d3:ea:af:c8:87:d3:b8:37:4a:30:8f:eb:2a:6e:7a:e1:
ae:bf:97:47:e3:29:6c:a6:35:b0:19:6f:16:17:12:5b:e1:6f:
ca:8a:4c:7d:7f:b1:90:b9:2f:70:b7:90:50:ad:c1:87:70:aa:
e1:7e:c1:50:bb:5b:96:50:61:cc:bc:85:f7:e3:77:0c:2c:71:
b3:25:df:d9:ce:10:e1:1c:5c:e7:6b:79:91:d2:54:f7:5b:4c:
87:a5:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:00:25 2025 by rpki-client