Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F2EF49D8003111F0ABEA960EC4F9AE02.roa
File: F2EF49D8003111F0ABEA960EC4F9AE02.roa (raw, json)
Hash identifier: 5q4rrnHG9CNbFEyBAR3EAxfxRJh1SKhNVGtEQs2LRwo=
Subject key identifier: 80:8B:A3:1D:1C:44:A0:A4:73:90:57:1E:05:1A:65:CB:0A:CB:D4:68
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0575
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F2EF49D8003111F0ABEA960EC4F9AE02.roa
Signing time: Thu 13 Mar 2025 17:38:18 +0000
ROA not before: Thu 13 Mar 2025 17:38:18 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153002
IP address blocks: 160.191.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 14 Mar 2025 06:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Mar 13 17:38:18 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d3180a-779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:a5:44:99:a8:46:e6:54:03:57:e6:a5:13:
d6:38:00:0e:cc:9c:d7:db:f4:98:b9:ee:9e:3b:e4:
38:87:f5:19:7a:39:a0:64:1f:83:3c:b2:73:aa:3b:
7e:08:15:ba:c3:02:df:75:bb:23:71:7c:b8:ac:4a:
d7:96:3a:9e:53:d2:0a:d4:89:59:65:52:b9:ad:52:
63:fb:bf:69:b2:d9:28:18:37:08:b2:61:f6:b6:ab:
02:85:2a:c6:d6:cc:39:3f:d4:03:fc:9a:60:fe:85:
a0:0a:d6:62:75:fb:0e:75:34:41:5b:2f:f6:51:51:
fa:d6:2b:a8:47:1d:18:cf:53:16:74:03:ee:81:fc:
6e:c6:d3:16:1a:27:d5:15:21:a2:38:49:93:8c:e0:
95:bd:bb:ea:1d:ee:13:00:5c:b0:51:7f:28:e6:0e:
34:ff:f1:57:00:a1:cb:10:ee:fb:ec:de:a4:de:74:
22:e5:58:14:be:8c:51:c0:12:88:50:c9:3e:44:cb:
8d:b5:e2:44:76:68:44:3c:f1:54:49:07:ae:f7:6f:
46:79:38:0d:85:f2:80:9b:7a:b0:5c:13:70:9c:7e:
9e:c0:a0:02:4e:1f:20:01:e2:a1:a3:27:91:46:91:
4a:be:03:aa:af:3c:e6:ef:71:06:c6:89:fc:dd:23:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:A3:1D:1C:44:A0:A4:73:90:57:1E:05:1A:65:CB:0A:CB:D4:68
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F2EF49D8003111F0ABEA960EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.88.0/23
Signature Algorithm: sha256WithRSAEncryption
26:0b:fa:8d:17:99:ad:56:f4:6f:33:4c:98:26:29:84:5d:f8:
1c:ef:7f:96:e4:55:f7:74:19:6b:42:1c:54:61:86:a3:d3:a6:
65:92:fe:62:9f:2d:0f:9d:2f:5a:8d:53:4a:1f:4e:f9:ae:0f:
f0:f5:6e:8c:9d:4c:1d:5f:a2:5c:24:c0:8c:9b:ef:e8:65:45:
67:67:49:a8:80:e6:57:a1:4c:20:0a:92:4d:02:9d:1e:60:4d:
1a:7b:15:ed:b0:32:db:02:11:ed:64:30:82:d4:33:21:96:5b:
68:f5:f7:49:6e:a1:e8:8e:ef:36:1d:eb:6d:7b:9e:6f:1e:6c:
4c:c0:c2:ee:72:1c:3b:04:a6:2b:58:74:d0:23:d0:1c:3e:d0:
54:dc:8b:37:a3:71:b3:0b:0a:c5:42:a6:a8:03:6e:1a:fc:8a:
87:fa:b3:72:a5:5c:47:4b:af:8d:5c:f2:b2:c8:79:e4:81:d0:
ef:cf:86:5b:09:2a:4b:ab:3b:34:da:d1:4b:cb:f2:e8:c9:fc:
f1:0d:99:9f:eb:84:67:2b:84:83:e6:14:1e:98:8a:51:be:2c:
89:85:fb:9d:44:c5:e8:65:7a:a8:a3:1e:de:7b:e3:19:d7:46:
a4:4b:9e:e5:04:51:a0:b6:b2:e5:69:f5:2a:7e:74:e1:1f:0f:
c8:9c:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:42:11 2025 by rpki-client