Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/75F3526EF9D611EFB90CFF61C4F9AE02.roa
File: 75F3526EF9D611EFB90CFF61C4F9AE02.roa (raw, json)
Hash identifier: PiiKpU1SaOOCNqHC1o4b7sfYOAAX71YJbR7MDgM8b7k=
Subject key identifier: A5:99:2D:90:C9:21:95:0E:78:80:D1:77:D1:36:C0:64:A6:51:4F:F8
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 055B
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/75F3526EF9D611EFB90CFF61C4F9AE02.roa
Signing time: Wed 05 Mar 2025 15:28:17 +0000
ROA not before: Wed 05 Mar 2025 15:28:17 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45538
IP address blocks: 157.10.198.0/23 maxlen: 24
160.191.248.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Mar 5 15:28:17 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67c86d91-82d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:2f:a2:7b:89:26:d9:5d:60:e2:df:51:37:
1a:63:ea:19:b7:aa:32:65:b4:87:20:b8:e7:11:8d:
e2:7f:97:d6:2b:ae:d8:d0:ff:f6:83:44:a0:f6:2c:
90:5e:6f:a9:c8:fd:bf:f1:1a:b3:6c:7d:c5:07:5e:
70:64:63:72:d3:d3:18:78:33:71:11:58:1b:18:39:
24:03:3a:c9:28:10:45:6a:46:77:e7:4a:8a:fb:5a:
98:21:9f:b4:97:60:0a:d2:35:0f:da:3c:a9:da:47:
05:58:93:a8:84:f2:f5:f4:5e:a1:e7:34:98:1d:50:
00:4e:f4:20:26:6b:ab:86:bb:c7:45:bd:a9:68:c9:
04:08:e5:ce:1b:29:10:82:9a:e7:47:d0:f8:d3:8b:
c0:68:43:ef:5e:cb:ad:3f:c2:66:57:6d:17:5c:02:
45:d4:0b:5f:b8:45:dc:3a:71:3c:82:72:a2:7c:fd:
9d:4c:2d:95:27:8d:2f:3e:86:87:5c:8b:92:30:f6:
17:99:9f:02:1e:f6:7a:52:58:81:1c:28:f0:3e:11:
a6:67:48:2b:e8:e5:62:3b:79:ac:70:f9:a6:56:d1:
81:ea:19:cd:22:b8:4c:04:f0:49:9e:5f:e4:7d:61:
ff:bb:f3:25:9b:5b:fb:c2:53:cb:d7:82:dc:52:32:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:2D:90:C9:21:95:0E:78:80:D1:77:D1:36:C0:64:A6:51:4F:F8
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/75F3526EF9D611EFB90CFF61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.198.0/23
160.191.248.0/23
Signature Algorithm: sha256WithRSAEncryption
85:cf:c8:81:a1:e0:d8:fb:3d:67:71:b6:ef:0a:35:87:ee:3f:
9f:0a:97:29:74:26:63:8d:db:89:ff:9b:11:0e:af:01:7e:1c:
21:6e:7d:8e:89:e8:b1:fa:ed:c5:1f:ee:ed:32:4d:8b:e3:1b:
9d:09:90:36:47:42:95:bc:59:fa:f3:f0:11:dc:1d:2d:6b:ca:
0d:fe:cf:a8:16:24:b4:4c:9d:12:af:90:70:71:f9:cf:9c:8e:
26:1d:28:4c:93:f4:63:ca:50:8d:07:3b:a6:ab:d0:72:b4:0f:
e4:5c:c8:c8:d8:5b:cd:76:51:d2:21:de:6a:0d:da:32:3a:1c:
eb:11:b8:ec:b5:b8:3d:4c:11:b1:45:44:7d:8b:80:6b:85:15:
72:02:32:4e:9a:3d:18:63:79:c9:b1:cd:ac:b1:a3:6d:a9:d1:
5b:51:5a:72:a7:5f:06:d4:39:93:e3:d5:0e:67:8d:8b:fc:b7:
b5:8f:1f:06:c5:60:d1:48:d1:53:6d:ae:b3:c2:c6:a6:ec:f5:
86:12:30:7f:cb:81:44:3b:ee:73:60:98:3a:45:2d:8f:c1:75:
de:b1:03:3d:98:92:d4:ca:f2:b4:7e:e4:f1:ca:b3:be:f6:ae:
49:90:e5:ed:b6:99:56:e9:7c:c1:46:a7:16:d3:1c:83:58:4e:
98:50:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:57:08 2025 by rpki-client