Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/49815502EA0211EFA616F37AC4F9AE02.roa
File: 49815502EA0211EFA616F37AC4F9AE02.roa (raw, json)
Hash identifier: +95wH12mTYtgD5o5EmCJV+AmRM5CIh9AFa3QrGZZSv0=
Subject key identifier: 3A:57:B0:27:92:E7:AA:88:D1:EF:9B:1E:02:F3:C0:62:0B:03:0E:C0
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 19
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/49815502EA0211EFA616F37AC4F9AE02.roa
Signing time: Thu 13 Feb 2025 12:07:09 +0000
ROA not before: Thu 13 Feb 2025 12:07:09 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153558
IP address blocks: 163.61.16.0/24 maxlen: 24
163.61.17.0/24 maxlen: 24
2001:df5:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 23 Feb 2025 09:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648
Validity
Not Before: Feb 13 12:07:09 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ade06c-ca99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:2c:1f:15:f9:15:d6:48:74:3f:94:c6:82:
13:51:39:61:60:20:86:29:57:84:75:a5:bd:18:f6:
d3:be:dc:3f:fa:8a:1c:17:66:a9:ed:55:6d:0a:07:
85:03:93:11:05:c2:4a:4b:01:54:6a:4f:fe:00:9c:
35:2b:4f:92:cd:9f:f7:2f:c0:2a:93:3b:ac:13:0e:
9e:95:22:b7:fe:c5:29:f7:ff:83:49:e4:8a:43:14:
2a:72:42:69:27:50:3e:33:fd:52:a1:59:3d:a6:ba:
aa:6a:7b:71:b4:e6:4b:80:a9:57:4d:51:d5:ac:aa:
8e:ae:19:01:ed:16:22:05:85:c3:0f:ea:ac:c1:cb:
0d:8c:67:bf:ac:4e:d2:03:45:d7:0f:21:ce:bb:d2:
a2:bc:73:ab:15:45:4f:c7:da:d1:8a:df:e3:32:1e:
e4:72:0e:57:5e:75:95:ff:4e:7b:f3:37:04:ad:0c:
53:7e:d8:d7:78:55:60:c7:79:d0:d3:03:59:c8:09:
52:ff:ed:8f:7b:24:43:b5:40:ed:cf:e0:5d:cf:45:
b2:57:1c:76:18:6e:ce:0e:3c:87:56:dd:a9:8c:2e:
31:b1:be:bf:aa:20:6f:6a:da:79:a8:2b:89:b7:f8:
a5:9b:ee:9a:39:e1:bb:07:ac:46:c8:2d:cf:bb:1e:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:B0:27:92:E7:AA:88:D1:EF:9B:1E:02:F3:C0:62:0B:03:0E:C0
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/49815502EA0211EFA616F37AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/23
IPv6:
2001:df5:c0::/48
Signature Algorithm: sha256WithRSAEncryption
07:7d:38:6d:f0:69:cd:de:4c:25:aa:de:4b:23:a0:e4:4e:ef:
be:e4:29:64:ac:9e:d6:18:f8:d3:0b:8e:24:40:22:43:d3:01:
0c:91:f4:38:17:a9:c3:34:f2:af:c2:e7:66:19:f2:13:5f:4a:
06:83:df:77:ec:30:e9:74:9d:a4:56:93:57:14:04:b7:1a:f0:
2f:58:ed:fa:ef:7b:18:ab:16:c1:83:12:22:be:5c:d1:c0:f2:
d2:28:32:ea:27:7e:28:51:36:f2:97:fe:1e:56:cb:b6:93:04:
64:70:c3:b6:b5:75:dc:52:88:ff:ee:e5:d0:53:1e:99:be:0f:
4b:f0:3c:75:64:c8:dd:23:1e:1b:34:dc:18:00:ff:09:f0:5f:
c9:9b:a8:39:12:4f:0d:ab:93:7f:8b:50:1e:05:29:a3:8a:4b:
01:f9:24:53:6f:fd:49:57:13:47:74:01:31:a0:cc:e0:91:c8:
6c:d5:9f:ec:20:6e:da:20:c7:e4:64:38:0b:8a:63:78:ef:32:
20:0e:58:0b:62:ae:50:56:06:76:46:60:38:c1:ba:60:da:f1:
5c:27:f5:37:f8:9b:bf:2d:8f:ed:db:fc:d5:36:2d:67:1e:0f:
66:ce:0f:e9:24:ef:b1:56:3d:c9:6b:70:05:d9:42:89:41:8f:
06:4c:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:49:53 2025 by rpki-client