Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/CB82CE644E8911F08C18E516C4F9AE02.roa
File: CB82CE644E8911F08C18E516C4F9AE02.roa (raw, json)
Hash identifier: cvCcGe8bEUcRBqHOOv7h0sIlB+/7dOUdiC8eMlGyMbk=
Subject key identifier: D0:DA:1B:AE:F3:AE:9A:DD:0B:DE:39:C0:D9:1D:A5:AD:0B:93:F9:CD
Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial: 02
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/CB82CE644E8911F08C18E516C4F9AE02.roa
Signing time: Sat 21 Jun 2025 10:23:38 +0000
ROA not before: Sat 21 Jun 2025 10:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153777
IP address blocks: 163.227.61.0/24 maxlen: 24
2001:df5:5b40::/54 maxlen: 54
Validation: Failed, certificate revoked on Sun 22 Jun 2025 07:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Validity
Not Before: Jun 21 10:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6856882a-f748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:0f:bb:ba:25:9c:7d:7e:01:ab:be:ae:46:
93:30:e3:71:2a:1f:ed:b8:cd:55:24:c0:2b:b7:8b:
bd:0d:74:cf:63:75:16:07:8d:ad:5c:32:89:fc:b5:
a8:62:aa:c4:df:c9:5b:a4:f8:ae:7f:0f:e7:84:80:
0e:68:77:85:9e:ad:8f:b9:10:ea:87:1b:11:aa:18:
21:1c:10:44:c2:63:d7:a6:84:55:f4:da:39:cf:00:
80:2a:10:6e:3e:44:ca:05:79:2c:8d:34:63:da:73:
e3:9b:87:5c:1c:df:a2:c6:b1:17:e0:0e:d0:cb:16:
9b:02:23:10:a8:43:80:ab:46:2e:b7:1d:a2:d2:fe:
5d:46:fd:38:20:c2:04:ef:71:1b:8e:0e:e4:7e:61:
db:b2:cd:25:56:9f:3d:19:59:23:32:cd:5e:4d:79:
fa:8b:14:88:97:87:1f:e0:3e:0e:7d:bf:be:5b:9b:
c4:d7:73:b7:5b:18:56:ed:2c:80:7a:87:76:e7:c3:
26:af:55:a5:5c:30:07:4e:9f:b7:c8:2d:57:35:79:
73:68:33:96:c9:4b:65:8f:3b:43:cd:36:08:e7:81:
33:51:d3:dc:51:3a:92:31:5a:df:44:d8:f5:11:86:
27:a3:95:6c:01:e6:d1:1f:fa:05:fc:8b:4d:31:36:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:1B:AE:F3:AE:9A:DD:0B:DE:39:C0:D9:1D:A5:AD:0B:93:F9:CD
X509v3 Authority Key Identifier:
keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/CB82CE644E8911F08C18E516C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.61.0/24
IPv6:
2001:df5:5b40::/54
Signature Algorithm: sha256WithRSAEncryption
49:d2:bf:eb:7b:4c:27:a4:e4:fd:ae:cd:40:41:7a:e4:86:f5:
72:c8:44:ae:f6:b5:e0:a1:82:c9:f2:14:b4:d9:4c:4c:00:a6:
83:a0:0a:d3:81:de:a2:14:ce:ab:3d:63:b5:9b:5e:fd:4f:6e:
cc:b0:a0:49:92:38:23:2f:21:c9:a4:15:74:bd:4f:64:a4:a8:
37:14:2d:fb:6b:67:db:5b:3c:33:3e:2a:a8:b8:bc:09:85:56:
9c:2d:65:03:f6:24:84:25:64:6c:19:07:7f:60:3f:2b:c8:7d:
b3:50:45:27:99:b5:ff:97:ef:81:74:e2:10:f3:67:ba:27:2c:
f1:1b:7d:81:1e:e9:e4:60:10:52:3c:77:10:21:63:47:34:2e:
41:96:a1:d6:a3:ab:c9:35:50:a7:88:7c:78:3b:89:62:e9:b3:
42:40:74:11:2c:67:7e:0a:d4:2a:41:f7:1b:a9:d2:04:62:93:
31:38:25:01:c4:1b:ac:b9:54:fa:81:4f:44:44:0a:ab:f7:b7:
00:6e:a4:67:24:a7:98:a5:d3:ca:de:f4:a2:73:aa:93:26:c6:
f4:3c:58:46:2e:57:50:fb:81:43:26:a4:89:18:e3:be:2c:2a:
98:26:91:b3:ba:96:c5:52:1f:f2:41:d7:3a:a3:7f:2c:8d:de:
54:34:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:16:47 2025 by rpki-client