Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/8A5665EEFBFB11EF9E53996EC4F9AE02.roa
File: 8A5665EEFBFB11EF9E53996EC4F9AE02.roa (raw, json)
Hash identifier: 4JKuVmBhSxsCat12VRctzkMPavX/fHe9E+pE22ixvsc=
Subject key identifier: 1C:E2:A0:4F:CE:39:05:7E:AD:DF:08:70:19:5E:44:D7:F6:E5:BF:14
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 43
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/8A5665EEFBFB11EF9E53996EC4F9AE02.roa
Signing time: Sat 08 Mar 2025 08:58:45 +0000
ROA not before: Sat 08 Mar 2025 08:58:45 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 139716
IP address blocks: 163.61.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 09:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648
Validity
Not Before: Mar 8 08:58:45 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67cc06c5-5bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:4e:70:25:b3:7d:85:24:eb:74:9e:9b:56:
69:63:af:7c:cf:7b:71:7e:b6:18:a0:2d:d7:10:71:
08:16:c5:97:b5:67:13:19:64:58:94:a5:cd:4f:49:
0b:b7:d1:81:49:54:fd:f6:ea:9f:e4:a2:dc:5b:01:
36:77:f0:29:6c:78:e6:1a:33:19:c9:2f:ab:8c:ba:
98:31:74:cf:97:be:de:0c:6c:82:a8:b6:97:b0:81:
18:93:66:55:ee:92:ab:a8:eb:15:f5:7c:ce:0b:bb:
9b:6d:38:df:68:bd:f4:af:6d:2d:35:4d:e7:76:e5:
08:c5:d6:8e:02:83:18:78:61:4e:4a:5d:71:a9:70:
36:2d:ba:33:b5:66:f7:b9:48:6a:5b:45:4a:2b:f5:
a2:4f:80:63:0d:04:b3:55:0b:a4:db:af:ba:ba:15:
1f:52:28:85:61:94:62:3f:ea:42:4f:3c:97:db:45:
c1:73:98:4f:33:72:7a:c8:e1:15:31:21:e6:22:8f:
8c:d6:bb:20:47:9b:88:32:c1:d2:d1:76:41:fe:86:
ca:5f:e4:79:4b:aa:3a:1e:b0:bb:e3:31:dd:20:b6:
63:f7:29:7a:46:71:7b:27:ef:bc:12:21:e1:03:19:
58:70:64:9f:6d:47:75:3b:1b:fc:f6:3b:ba:b5:36:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:A0:4F:CE:39:05:7E:AD:DF:08:70:19:5E:44:D7:F6:E5:BF:14
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/8A5665EEFBFB11EF9E53996EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/24
Signature Algorithm: sha256WithRSAEncryption
01:82:ec:f9:bd:2c:06:34:fa:44:13:aa:ec:42:a1:08:ee:f9:
d0:55:8f:97:32:fc:21:20:56:53:96:be:68:0e:a6:63:65:1f:
61:02:13:91:e7:70:3e:be:bc:0e:c7:d3:18:12:c0:9d:38:34:
95:a7:4a:ec:a0:7c:f4:96:c0:5a:2d:0d:2b:cd:eb:cc:dd:ec:
44:5b:05:85:c9:ee:c9:c0:ef:a9:93:d5:21:b3:de:d6:e6:61:
b0:0e:97:9a:80:a6:84:75:8c:71:39:9a:d0:c3:8a:c0:22:cd:
d7:e0:b8:7f:df:d3:5e:3c:d7:21:7a:72:74:b8:ed:6b:1f:b7:
a3:86:c4:3b:c7:08:dd:76:7f:44:2e:34:b4:81:3f:fa:2b:6e:
87:0b:c5:9b:2d:72:74:f4:c5:51:35:b0:99:21:72:dd:8e:8f:
10:b0:20:e9:93:33:99:c6:48:26:d1:0c:80:3a:14:0f:26:0c:
dc:77:fe:43:a6:89:b8:2c:85:e7:da:dd:af:3b:2b:7a:f2:00:
80:6b:5a:13:7b:2f:38:71:ea:86:4a:c7:8e:3d:1d:84:2b:97:
9d:70:16:ce:3e:58:ed:b3:93:81:28:d3:35:e3:b8:7e:c2:7d:
36:6a:2a:4d:3e:64:cf:e5:40:2c:bd:76:0b:9b:25:ef:e5:e3:
15:7c:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:53:05 2025 by rpki-client