Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/7A68BD9CE73F11EFB97A5F32C4F9AE02.roa
File: 7A68BD9CE73F11EFB97A5F32C4F9AE02.roa (raw, json)
Hash identifier: x2YCQCfq+bkMVRubjwuT0jpgozRPd8pYn+u0yqv/+ao=
Subject key identifier: 5B:EE:46:5F:DD:87:BC:E9:D4:9D:6D:D7:4D:1D:57:64:11:74:1A:26
Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial: 02
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/7A68BD9CE73F11EFB97A5F32C4F9AE02.roa
Signing time: Sun 09 Feb 2025 23:42:10 +0000
ROA not before: Sun 09 Feb 2025 23:42:10 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 16509
IP address blocks: 163.61.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 01:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08FA
Validity
Not Before: Feb 9 23:42:10 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67a93d51-9daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:34:56:fb:f0:4d:a4:69:6d:92:00:3c:54:
9e:2f:2e:84:5b:96:45:8e:97:bf:32:88:63:53:12:
93:85:7e:ca:e0:6a:3e:2d:fc:d6:0d:5c:1a:f5:75:
9c:88:17:6a:16:d6:72:37:e0:e4:c5:57:8e:02:30:
df:d4:2e:df:b8:4f:86:64:dd:52:18:2a:4d:59:2d:
1b:78:1d:2f:2d:fd:29:71:9b:c5:bb:31:55:6c:1c:
9b:c2:ca:ae:8e:f3:50:37:a5:42:db:6d:ad:19:f6:
05:33:bc:33:93:7d:fd:f9:b8:0f:e0:8f:57:db:3b:
d5:0c:bd:3c:b5:af:94:ce:9a:bd:82:ac:06:32:03:
f1:36:94:a4:71:09:7e:22:b5:76:02:ae:2b:55:84:
12:2e:f7:9e:42:c7:44:fe:08:3f:91:9d:0e:c6:29:
b4:b2:e4:42:fc:19:a5:2a:17:8b:a6:d2:eb:9a:cd:
fd:2b:e6:2d:ad:7e:a5:ca:b8:d8:33:46:b5:ba:41:
ab:b5:08:8f:f0:99:30:b9:d7:57:18:42:69:57:a2:
6d:e0:f9:7a:57:9f:55:e8:fe:64:58:17:86:e4:60:
b9:a3:0b:69:02:11:8c:88:52:75:d5:e3:4c:be:88:
10:61:16:28:f1:4f:55:37:e9:a2:18:18:3f:57:91:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:46:5F:DD:87:BC:E9:D4:9D:6D:D7:4D:1D:57:64:11:74:1A:26
X509v3 Authority Key Identifier:
keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/7A68BD9CE73F11EFB97A5F32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.88.0/24
Signature Algorithm: sha256WithRSAEncryption
46:59:cc:0a:50:96:e3:ee:71:82:5f:df:66:90:cd:27:d8:9b:
5a:fc:63:1a:c8:8d:40:fe:fe:c8:a3:0d:db:13:15:39:c7:74:
f2:68:a4:3e:60:ac:75:00:53:ad:cf:1e:57:f6:b6:e5:4d:43:
e7:94:88:5b:37:0d:a2:59:6d:34:20:3e:06:28:6b:eb:87:88:
8a:cd:79:27:1f:2e:7a:23:e9:32:be:b3:c8:7a:12:6b:1b:87:
b1:e0:e1:30:bd:66:26:ed:45:5e:60:d0:28:b4:84:0e:97:31:
08:22:3f:40:c9:3b:76:16:bf:02:0e:b8:c7:51:66:d8:07:d3:
3f:5c:27:ab:df:f7:3e:cf:a8:1b:fe:20:5c:dc:67:a1:a0:b4:
8a:6c:40:5f:89:40:f1:cd:00:3e:1d:c2:4e:a7:b1:99:f8:bd:
49:8d:1d:b0:6c:98:75:02:52:fb:bc:ce:d2:37:52:11:88:fe:
8f:b9:16:7c:9f:bd:c2:8a:bb:ac:32:7f:ff:c6:94:28:f7:83:
58:b5:a3:4d:06:ad:6e:41:e5:2b:33:b8:21:39:a1:5b:52:60:
dd:a1:49:d3:2c:95:4d:84:af:ac:d5:cd:2f:82:97:33:1b:0b:
10:a5:79:4d:22:83:35:0f:20:12:d0:03:85:c0:ee:30:79:ae:
ee:09:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:30:38 2025 by rpki-client