Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/935707803BE711F09494D037C4F9AE02.roa
File: 935707803BE711F09494D037C4F9AE02.roa (raw, json)
Hash identifier: sUvFI1ThLO+1x+twcVX9G3LivgWoRWPZEnX4aPcDvN4=
Subject key identifier: 6B:59:72:A2:AA:C2:28:52:67:25:A5:EE:95:45:11:FA:15:36:1C:07
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: BC
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/935707803BE711F09494D037C4F9AE02.roa
Signing time: Mon 07 Jul 2025 08:41:07 +0000
ROA not before: Mon 07 Jul 2025 08:41:07 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 141385
IP address blocks: 163.61.16.0/24 maxlen: 24
2001:df5:c0::/48 maxlen: 48
2001:df5:c0::/50 maxlen: 50
2001:df5:c0:4000::/50 maxlen: 50
2001:df5:c0:8000::/50 maxlen: 50
2001:df5:c0:c000::/50 maxlen: 50
Validation: Failed, certificate revoked on Wed 09 Jul 2025 05:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Jul 7 08:41:07 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=686b8823-78fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:96:a1:fe:9d:74:55:b5:cb:ea:45:60:fe:
ca:c7:a6:22:b4:63:8b:30:df:5f:07:90:44:4e:97:
43:7e:26:ad:cb:86:6b:61:cd:ab:53:72:ee:78:8e:
84:55:d0:e9:f1:1a:34:25:98:ba:04:3d:1b:1b:4b:
ed:55:35:72:58:10:04:92:c7:30:e0:3f:d1:f3:34:
96:e5:d1:b7:2a:2a:b1:ea:02:fa:eb:da:dd:a7:3e:
ad:82:ff:b4:9d:70:14:73:60:4f:41:47:95:a3:0c:
39:53:34:30:7d:c1:a4:3e:99:2f:f4:36:71:c8:68:
06:76:d6:57:71:eb:78:c4:85:a1:79:d4:aa:97:ce:
42:b3:18:d1:e5:05:d2:36:90:71:c5:93:19:83:9d:
74:46:ff:31:c8:08:ee:c6:e2:31:9e:08:a5:15:59:
6a:2e:6f:26:44:42:9b:2d:a4:a8:dc:52:d7:33:60:
ab:67:6d:e5:3f:35:ab:7a:ad:b2:37:6c:06:58:cd:
e7:5d:c2:b5:dd:8d:e4:ee:92:8c:b4:74:b8:2c:34:
9b:48:97:99:76:75:d5:64:6e:7c:bb:23:40:af:82:
f9:8d:cf:ba:2d:8b:b3:8a:26:38:14:2e:4a:c3:20:
ab:ec:7c:1d:6c:b9:35:50:aa:e0:76:cb:c0:44:d8:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:59:72:A2:AA:C2:28:52:67:25:A5:EE:95:45:11:FA:15:36:1C:07
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/935707803BE711F09494D037C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/24
IPv6:
2001:df5:c0::/48
Signature Algorithm: sha256WithRSAEncryption
32:ec:2f:d5:c1:24:7d:63:42:a6:51:44:c0:95:f8:f6:82:5b:
b3:35:45:62:3c:ae:8d:ea:30:b3:39:85:1c:37:b9:3f:2b:7f:
40:53:56:56:94:7a:5e:82:e7:57:9b:83:09:06:cc:fb:7f:cd:
a3:55:83:18:5c:77:99:27:7d:2f:5d:4a:19:fd:23:f5:41:9e:
ff:ca:29:9c:80:88:8f:2b:4d:52:77:9b:de:30:a8:3e:29:25:
54:91:1f:c4:b6:e2:f2:71:89:c6:7d:ac:e6:d3:4b:80:fd:4e:
3a:ae:f4:78:19:ae:8a:73:83:1c:a1:ae:8b:dc:a2:a8:48:cd:
4a:e4:4e:95:60:38:ef:3a:19:4d:8d:e1:1a:da:c3:55:19:4b:
b5:12:14:2a:55:21:73:ff:de:39:ac:a0:a5:ed:97:57:df:65:
9a:47:8f:d5:09:37:46:7a:c2:fb:5f:c2:b3:7e:ea:06:27:0a:
7e:7f:f4:1c:85:56:ec:50:19:2f:d2:90:2e:cf:c5:ce:7d:81:
25:aa:83:66:10:0f:83:69:06:dc:bb:3a:ff:ce:f9:f7:3b:6e:
b3:46:99:3f:42:8d:fd:71:cf:b2:c7:c9:1c:25:61:c1:a2:72:
33:79:15:3b:b3:87:60:ea:d3:b8:ef:3b:21:7a:0a:d4:f6:79:
c4:dc:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:22:08 2025 by rpki-client