Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/78F169A4DD3611EF95C91540C4F9AE02.roa
File: 78F169A4DD3611EF95C91540C4F9AE02.roa (raw, json)
Hash identifier: 3844VvzQ3rK5bYUtvprhDMOXyi2B25paUWSe2A5eois=
Subject key identifier: 5E:B1:39:AC:C6:E3:B6:5D:00:69:48:D1:4F:DA:F6:C1:BE:FF:29:03
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 0A
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/78F169A4DD3611EF95C91540C4F9AE02.roa
Signing time: Tue 28 Jan 2025 05:12:30 +0000
ROA not before: Tue 28 Jan 2025 05:12:30 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153558
IP address blocks: 163.61.16.0/23 maxlen: 23
163.61.16.0/24 maxlen: 24
163.61.17.0/24 maxlen: 24
2001:df5:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Feb 2025 11:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648
Validity
Not Before: Jan 28 05:12:30 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6798673e-e567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:84:21:a8:4d:ab:c9:0c:0c:1d:84:e1:bd:
f2:68:c7:5b:d9:5a:84:b4:88:a2:af:01:b7:a9:c4:
9e:f6:58:c2:33:c9:f4:32:73:21:80:e8:b8:62:f5:
6c:e0:6a:2d:f1:81:52:53:01:5f:65:0a:1d:9f:c7:
52:39:85:90:ce:20:7e:b9:d3:26:fc:ad:47:bf:4b:
e8:e0:30:01:e9:42:6f:57:cb:be:e3:c6:0e:8b:bf:
d8:bb:87:0e:8d:d7:4e:38:4c:db:1f:7d:45:f1:64:
b2:6e:04:c6:a7:77:18:45:df:b7:68:1e:b4:89:7d:
3b:2d:14:33:80:06:0a:fa:43:86:00:61:c9:77:5a:
a5:ee:20:45:13:96:af:fe:12:46:7e:01:3a:c5:d7:
eb:17:7b:50:16:42:94:f7:4d:ae:c0:8b:7b:f6:df:
25:17:e9:dc:ef:9c:83:b5:c6:e3:0b:fa:3d:19:7c:
91:8c:e5:2a:7f:c0:1c:36:d0:3a:89:47:3e:94:6e:
9e:a8:49:a6:cd:dc:b9:38:c4:20:15:15:8d:88:19:
ca:ee:89:71:26:95:ad:0d:4a:f5:6e:c5:ec:c1:aa:
6f:21:2b:5b:1e:26:78:30:58:f9:c9:fe:d3:99:89:
eb:c1:59:a6:82:30:86:3c:97:f6:b6:9e:f4:26:aa:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:39:AC:C6:E3:B6:5D:00:69:48:D1:4F:DA:F6:C1:BE:FF:29:03
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/78F169A4DD3611EF95C91540C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/23
IPv6:
2001:df5:c0::/48
Signature Algorithm: sha256WithRSAEncryption
0c:e8:ac:3b:f3:01:64:7d:52:a2:a5:a1:49:a4:a9:49:ad:5a:
de:13:84:60:df:e0:b4:fd:94:2e:fe:d0:33:11:2f:e9:09:3c:
fc:ba:d9:87:19:3d:15:4d:3d:27:05:5a:1e:57:54:96:fc:d1:
f3:1b:29:bb:37:83:17:38:31:36:99:70:c7:10:fd:1b:77:26:
02:8e:7b:3e:08:68:1d:7f:a6:68:92:5e:03:4b:5b:e4:a6:a4:
c7:ac:21:31:28:4a:f8:db:da:70:bd:fc:da:ed:c7:84:32:70:
8a:47:d4:8f:27:54:13:9b:8c:4a:24:20:b0:c3:c5:b5:d0:66:
d9:82:78:a9:6c:28:a9:a4:fa:da:49:b2:30:55:41:d1:30:84:
f4:57:08:43:e1:a5:51:21:7f:b8:1a:bf:b9:d5:9f:05:dc:79:
30:dd:d4:e1:a8:9c:74:4e:6d:4e:12:cb:a0:9b:8b:a2:33:25:
63:a3:c8:48:fa:12:d5:09:a0:a6:d4:c1:b6:83:4b:d3:4b:07:
d7:43:f8:f6:1d:2e:bd:43:06:4f:d2:cb:fb:ce:bd:78:49:ab:
ea:59:69:c5:63:a5:f7:38:e6:89:87:e9:63:95:09:3d:f4:18:
d4:fe:47:a6:9e:3d:03:f0:67:5a:7b:77:84:87:fb:3f:e1:94:
1a:be:73:3e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NTY0ODExMC8GA1UEBRMoMkMxQzA3RDE1MTI3MTk2OUUxM0UxQ0ZEMTYxQjFGNjA3
NzBFMjkwRDAeFw0yNTAxMjgwNTEyMzBaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3OTg2NzNlLWU1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2ZYQhqE2ryQwMHYThvfJox1vZWoS0iKKvAbepxJ72WMIzyfQycyGA6Lhi9Wzg
ai3xgVJTAV9lCh2fx1I5hZDOIH650yb8rUe/S+jgMAHpQm9Xy77jxg6Lv9i7hw6N
1044TNsffUXxZLJuBMandxhF37doHrSJfTstFDOABgr6Q4YAYcl3WqXuIEUTlq/+
EkZ+ATrF1+sXe1AWQpT3Ta7Ai3v23yUX6dzvnIO1xuML+j0ZfJGM5Sp/wBw20DqJ
Rz6Ubp6oSabN3Lk4xCAVFY2IGcruiXEmla0NSvVuxezBqm8hK1seJngwWPnJ/tOZ
ievBWaaCMIY8l/a2nvQmqvdZAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUXrE5rMbj
tl0AaUjRT9r2wb7/KQMwHwYDVR0jBBgwFoAULBwH0VEnGWnhPhz9FhsfYHcOKQ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NjQ4LzIxOEYyNjhBREM5
RTExRUY4QjYyREQ1RkM0RjlBRTAyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tR
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTEJ3SDBWRW5HV25oUGh6OUZoc2ZZSGNPS1EwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi83OEYxNjlBNERE
MzYxMUVGOTVDOTE1NDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAaM9EDAPBAIAAjAJAwcAIAEN9QDAMA0GCSqGSIb3DQEBCwUA
A4IBAQAM6Kw78wFkfVKipaFJpKlJrVreE4Rg3+C0/ZQu/tAzES/pCTz8utmHGT0V
TT0nBVoeV1SW/NHzGym7N4MXODE2mXDHEP0bdyYCjns+CGgdf6Zokl4DS1vkpqTH
rCExKEr429pwvfza7ceEMnCKR9SPJ1QTm4xKJCCww8W10GbZgnipbCippPraSbIw
VUHRMIT0VwhD4aVRIX+4Gr+51Z8F3Hkw3dThqJx0Tm1OEsugm4uiMyVjo8hI+hLV
CaCm1MG2g0vTSwfXQ/j2HS69QwZP0sv7zr14SavqWWnFY6X3OOaJh+ljlQk99BjU
/kemnj0D8Gdae3eEh/s/4ZQavnM+
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:58:00 2025 by rpki-client