Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/96C0D1CCD19C11EF9998F03CC4F9AE02.roa
File: 96C0D1CCD19C11EF9998F03CC4F9AE02.roa (raw, json)
Hash identifier: 5iiKuvdVB1NMLGgn7M/i7wBrWof3QZAoWX5aarp96tM=
Subject key identifier: 0D:9D:C2:AB:0F:5E:6C:B3:F7:65:A7:DC:05:B6:B6:D7:33:6E:44:C7
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 07
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/96C0D1CCD19C11EF9998F03CC4F9AE02.roa
Signing time: Mon 13 Jan 2025 10:53:15 +0000
ROA not before: Mon 13 Jan 2025 10:53:15 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152565
IP address blocks: 161.248.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 12:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Jan 13 10:53:15 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6784f09a-7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:28:99:47:b3:8c:60:3d:af:31:5f:e4:15:
78:f4:80:52:8c:03:32:46:9e:75:e9:30:de:1a:1d:
31:58:e0:61:c5:1a:83:0f:e1:2d:95:69:62:e3:e3:
d7:a5:f1:2d:a3:53:c2:67:8b:85:6f:96:fb:f5:57:
ea:a6:41:41:71:a7:f3:50:11:e1:b2:c6:4c:dc:3a:
81:29:ba:c4:53:6b:9e:b9:13:e5:0e:7a:37:1c:4b:
78:8b:10:94:31:58:4d:86:e0:b6:44:5d:36:f2:5e:
95:e1:65:3b:0b:11:e0:89:c3:4e:eb:4a:74:37:d7:
28:bd:8b:f5:1b:34:bb:d5:77:46:f4:76:78:2b:83:
46:d0:07:5d:2d:b5:d2:ea:65:d6:6e:bd:f3:b0:24:
19:b3:ac:ce:9b:ec:42:b4:43:e8:63:6d:af:ad:7f:
db:04:28:01:50:86:69:0b:92:39:18:66:65:ef:7a:
19:09:de:79:42:49:63:91:b2:2a:b7:04:89:42:a9:
20:3c:51:87:8c:77:a4:09:91:84:b6:ee:b1:48:d3:
6e:91:f7:2f:46:ed:66:92:2d:f2:46:0d:57:d8:52:
61:dd:90:c8:6e:50:53:16:f9:c4:54:e0:86:3a:71:
b3:c7:9a:88:45:11:e5:73:6b:61:b4:1b:db:6e:9a:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:C2:AB:0F:5E:6C:B3:F7:65:A7:DC:05:B6:B6:D7:33:6E:44:C7
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/96C0D1CCD19C11EF9998F03CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.162.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:84:f5:bd:88:36:71:8b:9e:b6:a2:08:da:a7:5c:3a:c9:fd:
a8:6d:c8:46:fd:1b:94:5f:82:68:d9:6d:c1:b1:21:91:8c:c8:
b3:9a:5a:c1:80:b3:91:d7:45:c8:08:5c:9c:28:4f:74:a6:85:
07:9d:0b:fb:16:dd:59:72:64:1d:bd:b5:bc:73:3c:f8:85:75:
dc:68:7a:92:de:e1:72:19:7b:85:11:af:6a:ed:ed:9f:e9:81:
9e:9f:d1:ef:ad:d9:c2:6a:6a:c8:27:5e:cc:56:e5:a4:f3:5e:
1a:f5:a4:d9:d4:34:a5:4f:5a:ee:01:b0:af:96:3c:81:0a:63:
e9:f5:7b:19:e0:55:c0:33:ef:1b:fc:56:c9:75:55:ff:3a:cb:
fc:db:a3:7d:89:c7:0d:46:36:6f:43:83:fd:8d:40:2d:f5:72:
33:13:d9:d0:3a:47:ed:52:35:cd:fb:0a:e4:5e:d3:fb:9c:f1:
2b:db:0f:cf:39:cc:f1:b9:46:46:c4:0d:c5:96:a0:5e:5f:f5:
b6:22:ec:a6:77:15:89:3a:5a:17:5b:e7:e3:f9:67:32:54:55:
d8:07:b7:fb:79:3a:5a:08:c0:44:12:02:bd:f7:36:f7:88:77:
f2:0a:a8:8c:cf:fd:48:34:31:6e:2e:69:8e:b4:1d:3f:a4:83:
6a:1a:7d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:48:28 2025 by rpki-client