Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/77686264317211F0944A2D58C4F9AE02.roa
File: 77686264317211F0944A2D58C4F9AE02.roa (raw, json)
Hash identifier: 9GhfRxmPMkHyMApVQ9rNqBj/tFh9p51RAjwiwOFoMso=
Subject key identifier: 26:F5:6D:40:E8:DE:B3:86:72:3B:49:90:AA:11:9F:F7:EA:44:72:17
Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial: 07
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/77686264317211F0944A2D58C4F9AE02.roa
Signing time: Thu 15 May 2025 09:53:35 +0000
ROA not before: Thu 15 May 2025 09:53:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153884
IP address blocks: 165.99.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 27 May 2025 18:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Validity
Not Before: May 15 09:53:35 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6825b99f-165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:ed:b1:b7:1d:77:e0:6f:9c:66:ac:9a:6c:
29:8c:36:fe:c8:bd:1a:67:ba:cd:ab:c9:2c:8a:61:
b8:55:bf:25:0c:7a:66:ed:30:f9:79:ae:70:79:9a:
35:0d:97:7a:64:63:cf:ad:ff:06:72:9b:22:0b:9c:
9b:9f:ca:f7:f6:8d:d6:f0:69:97:94:ef:11:ab:94:
8a:94:f3:4d:84:c9:73:38:0b:6e:64:fc:22:6c:b2:
80:a7:64:b4:fe:5e:88:98:b2:e6:18:e6:75:8d:ab:
8f:7e:c5:90:42:b8:6d:7a:c0:e4:da:74:e8:29:ed:
89:bb:4d:07:5b:d5:d2:c4:cc:e9:5c:f1:68:c9:a6:
ab:0d:9d:cf:e8:10:21:7d:07:a8:1b:0e:d2:8e:c3:
33:ef:15:ce:3c:4d:a2:b2:d3:99:fa:43:52:01:0a:
ce:86:5f:e7:90:d9:97:cd:60:33:38:11:52:28:0a:
e7:69:29:5e:ed:e2:57:d7:56:1a:ea:f2:82:85:c2:
09:0a:04:ec:e9:41:23:9a:e2:50:a9:88:04:27:ee:
82:f4:55:8c:6f:f1:3c:97:f7:a5:6f:0b:23:54:b2:
af:70:4b:36:4f:d7:37:5a:8c:f3:ea:80:07:cf:89:
62:b8:1a:c3:46:4c:8a:09:e2:71:c9:17:04:e2:b2:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:6D:40:E8:DE:B3:86:72:3B:49:90:AA:11:9F:F7:EA:44:72:17
X509v3 Authority Key Identifier:
keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/77686264317211F0944A2D58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.62.0/23
Signature Algorithm: sha256WithRSAEncryption
00:3a:fe:72:11:57:7b:34:26:2d:ed:46:fc:15:a8:37:f0:39:
a5:02:4f:4f:d1:d2:fe:84:4e:38:0f:5b:95:70:1b:89:74:a3:
37:10:b4:bf:1b:70:92:f7:b0:89:c2:e0:85:c2:14:fc:96:9d:
8f:59:62:dc:3b:ce:b2:08:a7:61:70:81:0a:83:6a:af:62:94:
3b:1d:d4:aa:f5:48:fd:15:14:6a:ee:45:f6:f0:06:6b:4c:17:
eb:cc:6c:d1:6f:59:64:9f:a3:22:94:59:99:7b:83:85:c8:f6:
66:2c:44:ee:9f:01:73:7a:44:28:02:1b:8b:f9:d8:1b:61:68:
e0:9a:da:61:c9:32:65:a5:9c:2d:32:dc:95:89:6a:69:4a:86:
83:08:e4:67:5a:d1:67:2d:9b:79:21:a8:99:bc:ac:4b:52:5c:
ac:3c:c2:fe:ff:90:c1:73:fa:bb:f1:9c:89:9e:fe:a4:c1:7d:
1f:75:26:95:cb:08:12:87:59:ae:09:37:2a:ba:d9:5b:11:40:
df:b3:b8:89:40:69:c7:01:7e:db:38:20:b5:ac:6b:19:ac:de:
00:31:1a:c8:e4:c0:f5:ba:9a:cb:9e:4f:1f:15:c2:91:e3:3f:
78:07:d0:64:a4:c0:ad:c0:19:0a:9f:4e:4b:de:cb:bb:51:47:
11:d6:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:11:57 2025 by rpki-client