Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/46EA2E9EF67911EF89986938C4F9AE02.roa
File: 46EA2E9EF67911EF89986938C4F9AE02.roa (raw, json)
Hash identifier: mFqMMs6BZ6WhmVvYJv1EXI2JKl1CUvvHUpbQXff/fK4=
Subject key identifier: C6:AF:A4:CC:38:B0:AB:15:D7:A8:6B:F7:FC:2C:7D:25:51:42:8C:55
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 32
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/46EA2E9EF67911EF89986938C4F9AE02.roa
Signing time: Sat 01 Mar 2025 08:43:42 +0000
ROA not before: Sat 01 Mar 2025 08:43:42 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 141385
IP address blocks: 163.61.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 16:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648
Validity
Not Before: Mar 1 08:43:42 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c2c8bd-da2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:a1:1a:37:1b:bc:2e:45:df:69:9a:91:d4:
94:39:f2:84:a4:b3:2d:c3:7b:75:99:6f:64:ae:e5:
50:1b:9b:de:8a:4f:fb:34:28:4b:0e:27:5c:cc:36:
cc:d7:3b:c2:fc:91:d4:4e:6d:2d:b1:f8:1f:89:3e:
1f:f9:59:43:87:1d:c0:19:fb:96:03:ac:6a:58:c2:
98:c8:35:d8:6a:b9:22:c0:5e:90:e7:8b:85:94:01:
a4:b7:31:2a:91:5d:bd:ba:1e:75:5b:89:60:76:cf:
3a:83:f3:b3:94:3f:d4:e4:0d:56:a0:69:4f:55:21:
e2:10:2b:da:e3:b1:2b:e3:a6:6f:8b:ea:ee:d6:4b:
00:81:2b:1e:6b:c1:d5:20:54:97:26:95:dc:78:a0:
c3:43:b5:30:9a:bd:4e:1c:bb:99:0b:be:0f:f0:c1:
3f:5c:7c:f4:24:c5:19:11:2e:fc:6b:a2:81:bd:12:
63:ea:44:e7:27:e3:29:7c:84:75:6e:63:ff:35:f1:
36:24:75:2a:d0:be:36:2f:4c:6a:11:d4:70:72:4b:
63:d5:02:01:a1:da:85:bb:24:0a:9f:fc:6d:81:7d:
a1:13:a3:78:8b:19:b4:bd:ef:9d:cf:ef:2c:88:b0:
ca:24:9d:3d:1c:4b:64:f6:9b:90:9c:53:1a:f0:91:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:A4:CC:38:B0:AB:15:D7:A8:6B:F7:FC:2C:7D:25:51:42:8C:55
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/46EA2E9EF67911EF89986938C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8f:0b:52:18:ee:c1:0a:bd:e1:c7:31:ec:0d:85:a2:2e:1b:
91:9b:b2:07:a3:7a:d7:d8:1c:3d:ce:ab:30:02:36:25:53:c1:
ed:a8:df:26:5e:83:27:01:a2:3d:56:00:c2:7a:7e:65:a6:1a:
d5:81:3f:43:e0:0e:64:b9:84:37:6c:8d:c1:9d:09:45:0b:f3:
c9:ed:89:18:2f:12:4f:fb:bd:2c:6d:cf:38:3d:22:63:a3:03:
ec:a0:71:05:09:e2:fc:df:4c:d8:09:d5:cb:e4:74:40:1c:15:
ae:05:2c:fb:72:0b:5a:c3:c0:90:25:18:b8:39:bb:ef:ba:87:
3f:bf:05:8e:d8:27:5c:2d:94:df:79:3b:77:c4:96:ca:9d:77:
40:d7:cc:ba:85:c7:ef:2a:42:73:c9:92:a9:d8:80:c1:93:9d:
fc:ca:f7:5d:b7:31:68:25:0e:79:4e:c6:b0:5c:77:32:28:5a:
fa:bd:aa:b0:ac:1e:c1:46:40:00:d4:58:96:6e:ff:41:40:76:
0e:c2:53:b8:ce:cf:b9:93:c3:08:69:a1:f4:29:01:2e:09:56:
8c:3c:3d:48:ef:c0:c3:7d:35:92:57:02:c8:0d:18:4a:36:a4:
77:45:d9:bb:e6:e7:dc:14:3c:04:d3:e9:27:11:9d:f6:8f:8d:
49:7a:ea:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:58:01 2025 by rpki-client