Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8472B14A2B3611F0BD341249C4F9AE02.roa
File: 8472B14A2B3611F0BD341249C4F9AE02.roa (raw, json)
Hash identifier: 7EVDVIAfEKmu3pQuV/YzC/aQkwAIMT/Ew6JcmgmCl6k=
Subject key identifier: 5D:F7:95:A9:A4:BF:E2:04:EB:44:13:7D:3A:1D:89:51:C2:B0:74:C7
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 355D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8472B14A2B3611F0BD341249C4F9AE02.roa
Signing time: Wed 07 May 2025 11:29:20 +0000
ROA not before: Wed 07 May 2025 11:29:20 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 153848
IP address blocks: 163.227.16.0/24 maxlen: 24
2001:df5:56c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 May 2025 07:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 7 11:29:20 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681b4410-7e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:bf:68:13:3a:a3:b4:5f:9b:7d:b5:7b:64:
6d:28:7c:f9:c7:26:f3:43:87:dd:5e:70:a2:f4:75:
40:1e:32:ef:ed:6d:85:64:77:fa:b3:f1:87:71:ce:
06:6e:17:63:08:42:a9:63:d7:32:d9:72:be:28:8c:
45:29:91:2d:0e:cf:5f:2e:8c:9c:ec:f7:e7:f5:7a:
d1:fe:9d:18:b1:ef:cd:36:39:76:44:9f:8e:25:5d:
57:53:9a:c1:45:02:db:57:3a:44:64:c8:04:33:3b:
6e:c0:e1:da:50:66:43:9d:4d:60:c7:37:5e:10:d7:
da:f6:2a:8c:35:f7:bb:e0:fd:84:4d:3e:d3:9f:77:
5d:62:fb:35:ab:33:13:d0:03:32:f0:2d:81:45:22:
b3:09:67:f7:e7:ed:3a:4d:ba:e0:b5:1f:6b:89:43:
10:c1:ff:14:fd:c4:be:26:de:e0:8b:61:63:d1:3a:
26:6d:bc:44:9a:f0:a1:32:61:15:7c:5e:3e:f1:61:
09:53:b9:fa:ab:64:a7:4e:e3:fc:20:9c:a3:a4:94:
60:d7:be:2b:2d:c5:a8:25:03:4f:65:1a:c9:42:ea:
af:20:cf:1b:cc:ad:35:0d:d3:42:14:28:b9:2f:29:
90:14:6c:fe:d1:0b:18:0e:bf:19:b7:a3:c3:e7:e3:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:95:A9:A4:BF:E2:04:EB:44:13:7D:3A:1D:89:51:C2:B0:74:C7
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8472B14A2B3611F0BD341249C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.16.0/24
IPv6:
2001:df5:56c0::/48
Signature Algorithm: sha256WithRSAEncryption
76:85:7e:8f:bc:ba:cb:f3:94:f3:79:49:11:af:61:ca:55:23:
8b:79:ac:ee:17:49:f9:fb:ac:b9:57:39:25:f9:64:39:d9:d2:
22:46:e2:0a:58:a4:e0:5c:ab:c0:36:63:dd:e3:75:7a:c6:cf:
ed:8e:f9:ec:c7:f9:57:d6:13:81:47:d5:98:8c:3a:de:2a:ae:
3f:ad:6d:21:5c:4f:50:2c:79:2f:a3:bf:78:66:cb:f1:30:2a:
66:07:b3:5a:30:e1:95:85:1d:41:43:74:e3:45:17:cd:30:63:
f9:1c:00:ca:d0:84:5d:fe:f7:cb:fc:8e:2e:69:be:7f:57:54:
22:c8:fd:2a:1d:bf:14:f7:44:63:ef:5c:46:c7:51:42:0b:d4:
84:e4:c9:ae:25:91:95:4c:d8:14:c3:46:5b:04:ae:be:14:6d:
c8:55:ce:c1:63:d6:59:7d:07:80:0d:2e:b3:15:cf:a0:a2:f3:
85:20:f4:fe:01:30:75:00:3e:c8:74:40:71:5b:01:63:1a:f6:
94:80:b6:ce:d4:63:55:b2:24:52:4b:87:0f:d7:5d:e7:01:63:
36:e3:d1:74:21:e2:0c:01:b3:4e:cb:58:a8:d6:0b:ea:c7:b1:
d3:33:12:e9:8f:f5:8d:48:9b:01:13:05:2e:10:07:a9:95:20:
6e:5b:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:46 2025 by rpki-client