Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/697DDBE003A811F0AEA1C709C4F9AE02.roa
File: 697DDBE003A811F0AEA1C709C4F9AE02.roa (raw, json)
Hash identifier: 9mPZKSKufp/dZHe/5e7QEmkx2YPmWrKuyex3qD+V0HM=
Subject key identifier: FA:77:AE:1A:99:70:DA:14:0F:77:3F:B9:09:A1:B2:5B:D6:F2:61:6A
Certificate issuer: /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Certificate serial: 02
Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/697DDBE003A811F0AEA1C709C4F9AE02.roa
Signing time: Tue 18 Mar 2025 03:23:51 +0000
ROA not before: Tue 18 Mar 2025 03:23:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 140631
IP address blocks: 160.191.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 04:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7FC
Validity
Not Before: Mar 18 03:23:51 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67d8e747-73a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:40:42:4f:da:f7:cd:68:46:cf:33:de:ff:
bc:78:cc:85:36:3c:1e:fc:a4:54:6a:23:50:a4:50:
4e:7e:5c:2c:b1:4d:1f:ce:c1:37:25:67:e7:66:d2:
db:c3:64:d7:5a:88:7b:12:96:52:9c:f5:9b:a1:d8:
0b:64:79:a0:2e:81:3f:15:d7:22:a0:55:31:ad:ae:
99:4c:ea:f8:25:48:dc:eb:31:66:ae:cf:70:0f:d0:
66:6f:9e:cd:63:77:f7:eb:e0:b3:79:37:c4:05:7c:
fb:70:60:32:af:3d:11:2b:39:63:21:32:c4:b0:e5:
07:ab:cb:a8:d4:58:c8:93:4d:f0:6b:53:fc:54:1b:
b0:98:f2:a4:fc:ad:2f:0f:86:83:36:d6:d3:74:de:
8e:47:87:85:66:de:3e:d3:b4:9a:f7:5c:a7:29:15:
cd:49:7e:f5:fb:b6:47:45:62:13:cb:1b:15:41:e1:
6c:a2:6b:41:2c:1d:ae:9b:d4:00:80:3f:68:60:20:
45:87:b7:ba:99:e5:76:1e:46:cb:f1:d9:da:03:da:
98:ee:90:68:d6:bb:12:54:78:3c:4e:db:30:2e:1a:
25:ca:c8:8f:3c:47:a3:e4:f6:80:e7:e1:4b:3e:e9:
48:27:7e:4b:c7:0d:08:a6:9c:75:c4:7c:66:f1:ef:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:77:AE:1A:99:70:DA:14:0F:77:3F:B9:09:A1:B2:5B:D6:F2:61:6A
X509v3 Authority Key Identifier:
keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/697DDBE003A811F0AEA1C709C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0a:0f:80:d9:3e:05:b7:e8:87:69:cd:1d:e8:e2:b7:6c:d0:
3d:25:33:6e:73:9a:14:c1:fb:02:0d:e1:cf:c2:2f:29:d7:72:
33:f8:99:19:dc:ed:fe:c1:43:94:b0:29:45:c1:25:e9:eb:27:
03:a3:ae:c4:00:da:f5:8e:10:d0:56:e6:d2:f1:f9:eb:ce:55:
85:e0:5e:d4:84:6c:2a:05:ac:5f:7c:10:fe:72:4b:64:b1:7b:
21:51:34:31:41:92:f8:bb:ab:51:42:f8:71:06:5d:bc:82:99:
b3:93:05:1b:36:17:d9:12:de:0d:27:66:4e:80:72:0c:8b:de:
0a:77:4d:01:dc:55:91:bc:21:cf:fb:bd:29:1d:3a:d8:0d:10:
d9:ad:0c:af:11:45:ae:19:fc:5c:6e:e6:34:bb:1d:0f:4f:a5:
fc:70:59:fb:75:0c:41:cf:92:d1:15:ab:bd:10:ee:f3:f8:44:
af:99:71:79:67:27:fd:c6:ad:a5:cf:71:ff:bb:59:72:0d:a3:
35:8a:49:19:f7:34:97:df:4b:f0:75:78:05:d5:34:46:ad:cb:
e1:bd:76:22:11:67:0c:cb:e7:29:e9:74:e7:bb:4c:f9:55:b7:
be:a6:48:1c:68:f1:8f:d0:0a:4e:52:37:2e:b5:01:44:c7:88:
78:f0:c5:49
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QjdGQzExMC8GA1UEBRMoODU3NTA3RjFEOEIzOTE1Qzk1MTBENTA0NzAwRUNFODkw
QjA2Njg1RjAeFw0yNTAzMTgwMzIzNTFaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZDhlNzQ3LTczYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF4UBCT9r3zWhGzzPe/7x4zIU2PB78pFRqI1CkUE5+XCyxTR/OwTclZ+dm0tvD
ZNdaiHsSllKc9Zuh2AtkeaAugT8V1yKgVTGtrplM6vglSNzrMWauz3AP0GZvns1j
d/fr4LN5N8QFfPtwYDKvPRErOWMhMsSw5Qery6jUWMiTTfBrU/xUG7CY8qT8rS8P
hoM21tN03o5Hh4Vm3j7TtJr3XKcpFc1JfvX7tkdFYhPLGxVB4Wyia0EsHa6b1ACA
P2hgIEWHt7qZ5XYeRsvx2doD2pjukGjWuxJUeDxO2zAuGiXKyI88R6Pk9oDn4Us+
6UgnfkvHDQimnHXEfGbx73J7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+neuGplw
2hQPdz+5CaGyW9byYWowHwYDVR0jBBgwFoAUhXUH8dizkVyVENUEcA7OiQsGaF8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCN0ZDL0M3M0JBMTY0MDNB
NzExRjBBN0ZGOUM4N0M0RjlBRTAyL2hYVUg4ZGl6a1Z5VkVOVUVjQTdPaVFzR2FG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaFhVSDhkaXprVnlWRU5VRWNBN09pUXNHYUY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjdGQy9DNzNCQTE2NDAzQTcxMUYwQTdGRjlDODdDNEY5QUUwMi82OTdEREJFMDAz
QTgxMUYwQUVBMUM3MDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKC/sjANBgkqhkiG9w0BAQsFAAOCAQEADQoPgNk+Bbfoh2nN
Hejit2zQPSUzbnOaFMH7Ag3hz8IvKddyM/iZGdzt/sFDlLApRcEl6esnA6OuxADa
9Y4Q0Fbm0vH5685VheBe1IRsKgWsX3wQ/nJLZLF7IVE0MUGS+LurUUL4cQZdvIKZ
s5MFGzYX2RLeDSdmToByDIveCndNAdxVkbwhz/u9KR062A0Q2a0MrxFFrhn8XG7m
NLsdD0+l/HBZ+3UMQc+S0RWrvRDu8/hEr5lxeWcn/catpc9x/7tZcg2jNYpJGfc0
l99L8HV4BdU0Rq3L4b12IhFnDMvnKel057tM+VW3vqZIHGjxj9AKTlI3LrUBRMeI
ePDFSQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:13:32 2025 by rpki-client