Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/0DE52EDE347511F0B44D201AC4F9AE02.roa
File: 0DE52EDE347511F0B44D201AC4F9AE02.roa (raw, json)
Hash identifier: NwwsL8/8Jxze4cOZgQE4dVRwSLBSURFqWoVF6mtjUfY=
Subject key identifier: E9:FA:32:CA:04:E8:83:08:69:3C:73:73:17:F3:11:F4:C7:6B:D9:38
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 8F
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/0DE52EDE347511F0B44D201AC4F9AE02.roa
Signing time: Mon 26 May 2025 08:23:50 +0000
ROA not before: Mon 26 May 2025 08:23:50 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 141385
IP address blocks: 163.61.16.0/24 maxlen: 24
2001:df5:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 17:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: May 26 08:23:50 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=68342516-a951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:bb:ec:5f:bd:83:3e:eb:69:c8:ca:5b:bd:
9c:45:59:de:9f:9f:9b:da:7d:16:a1:64:a6:c9:ac:
ab:d9:6c:7a:be:c8:de:f8:a3:0b:a4:f0:57:fb:1c:
45:73:0d:e0:07:20:95:59:9c:e0:3a:6b:9d:10:ef:
17:bc:07:ab:a3:74:bf:68:39:8f:c3:68:ad:0f:06:
69:09:a0:ab:8d:00:3a:9b:4a:a1:96:5a:f6:16:b7:
9a:18:11:0b:a9:88:1b:e3:41:88:6c:96:fb:6d:6b:
dd:dd:1d:61:99:0b:e2:d0:67:8d:bd:34:66:b8:1d:
22:be:ee:c4:d1:8e:61:69:de:6c:90:e4:c9:7f:d0:
f5:f6:3e:75:3f:f9:d7:ca:0c:cc:45:6f:c0:43:bc:
60:a0:24:ab:ae:4c:08:05:db:2c:eb:74:49:53:7a:
8c:23:af:4e:a4:36:49:dc:89:5c:4e:64:a1:48:a5:
0a:b1:0d:3b:b3:13:bc:3b:36:6d:e0:aa:9d:96:0f:
a8:4f:c5:be:b1:00:78:6f:73:b1:b0:72:63:e0:3f:
1d:b9:ab:45:d5:e8:41:58:22:88:64:bb:39:b2:be:
0e:51:35:81:55:c3:9a:61:d7:36:8f:68:37:83:84:
cc:70:1b:d9:df:3b:0f:5b:41:b1:66:3f:48:e9:aa:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:32:CA:04:E8:83:08:69:3C:73:73:17:F3:11:F4:C7:6B:D9:38
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/0DE52EDE347511F0B44D201AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/24
IPv6:
2001:df5:c0::/48
Signature Algorithm: sha256WithRSAEncryption
13:58:ba:9c:68:79:1d:71:b7:bd:c2:b3:ab:fa:63:69:72:e8:
82:ce:3c:d4:33:1b:2e:06:b7:98:4e:70:0e:7a:d5:55:d8:0b:
a8:f6:a6:1a:d2:82:56:2a:03:18:c6:9a:a8:dd:b6:1c:e6:55:
5d:f4:1d:66:cd:90:a6:7b:09:99:e8:b4:d9:a2:b1:d8:ca:35:
e2:9b:1a:93:95:3a:22:fa:6e:33:28:2a:8a:5b:99:f2:c9:93:
02:f3:dd:8c:40:0a:ff:9b:37:08:59:80:a0:15:c5:06:9d:0f:
55:58:6d:b5:93:84:69:af:2d:0e:b1:48:1c:06:48:7d:8c:8f:
94:17:61:e5:8b:c3:04:48:8c:49:76:8b:57:65:14:08:3c:08:
4e:00:91:cf:3a:72:19:fd:c3:94:d8:ff:d1:1f:83:a6:c7:b7:
e8:6e:5a:aa:58:e7:1c:81:05:6f:9a:48:48:f0:02:9d:e9:08:
d8:45:91:b9:5a:3c:54:d5:77:22:92:1f:3c:15:97:e7:c9:3f:
63:e0:a5:96:18:84:96:f0:71:cb:f6:1c:bd:c7:98:a9:c1:09:
f9:a9:55:94:4f:b8:b6:00:e2:5b:67:3e:e0:0f:46:84:6f:fa:
ea:d4:ab:29:55:26:ac:b9:f1:d7:63:5e:e5:75:dd:1f:ec:16:
39:77:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:20:19 2025 by rpki-client