Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B30858BC2B3511F085F71545C4F9AE02.roa
File: B30858BC2B3511F085F71545C4F9AE02.roa (raw, json)
Hash identifier: bcGQ8RvHC03flSOJoa/34SVaF5Z0AwcEGZ1AN1uSZDA=
Subject key identifier: DC:B9:1E:32:D0:40:AE:2F:B3:B0:85:67:0F:32:31:B4:E8:DE:64:22
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3556
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B30858BC2B3511F085F71545C4F9AE02.roa
Signing time: Wed 07 May 2025 11:23:29 +0000
ROA not before: Wed 07 May 2025 11:23:29 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 153699
IP address blocks: 163.223.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 07:37:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13654 (0x3556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 7 11:23:29 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681b42b0-c930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:06:d8:89:7d:a3:50:b9:20:60:fb:d3:a1:
ed:24:cd:fe:16:73:9c:54:8a:26:ad:af:6b:8f:60:
ae:61:3d:04:66:62:25:34:4f:d5:21:59:0e:0c:22:
ca:fa:d1:6d:26:48:b8:77:87:e4:dd:5e:36:4d:20:
1e:22:0e:51:5b:15:57:3a:a0:d5:fb:b4:70:6d:85:
e5:f8:70:fd:94:5e:8d:ef:ad:3c:f2:51:bd:b0:a4:
b8:a5:79:4a:43:2a:55:60:c8:b4:0b:48:1b:22:c2:
4a:59:11:89:2e:88:1d:4d:47:a7:4b:21:bc:f4:87:
7b:31:ee:ca:9a:8c:fb:3e:7b:c0:84:73:3c:0c:d2:
8d:2e:4d:86:98:5e:9d:eb:c6:1a:6b:15:bf:28:10:
78:02:64:79:85:9d:29:86:c6:71:0c:ff:bb:6c:b8:
55:8d:a2:f6:11:f2:8d:c1:45:07:d7:91:c8:9b:78:
4b:a0:20:aa:31:e5:d3:4c:79:dd:19:48:1f:e2:1f:
0b:6f:d1:57:80:30:da:99:0d:6a:ad:02:30:7a:07:
42:7a:35:5c:ed:bc:7b:7a:a1:1c:cf:89:b3:c2:66:
85:78:8f:02:da:5e:63:c8:6d:ab:da:fe:4d:b5:c9:
53:10:5e:74:9a:6d:a4:4c:dc:0e:64:61:49:73:21:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B9:1E:32:D0:40:AE:2F:B3:B0:85:67:0F:32:31:B4:E8:DE:64:22
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B30858BC2B3511F085F71545C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.113.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a9:3e:8e:25:f1:a7:4c:a2:d6:a7:fb:5e:63:5e:b7:bd:aa:
3f:5a:11:d4:d7:7e:40:50:74:22:dc:3c:4b:40:0a:0d:e6:1b:
03:c7:81:24:e5:57:5c:b1:52:3e:62:64:7c:07:99:00:0a:aa:
af:f9:25:07:28:7b:16:9b:4f:b7:4a:1f:70:84:1a:58:be:f8:
9b:5b:57:d8:ef:fd:d8:91:91:e7:b2:06:38:c7:1f:5e:0d:71:
79:b1:b2:11:25:60:b1:e0:c2:66:9e:1f:5f:d4:81:74:ab:5e:
09:a0:c9:1b:cd:21:43:82:ae:93:e0:d6:83:b6:fa:3b:13:c5:
90:34:ca:94:8a:2f:83:71:34:3e:b0:82:94:8e:5c:0b:9c:3e:
f6:e4:b8:8f:03:61:f1:3b:18:65:60:1a:a4:75:ee:64:0b:19:
7f:eb:21:53:45:9d:16:93:d0:6a:ad:d3:78:dc:21:5c:b4:18:
78:a7:01:08:9f:2e:2b:89:71:52:e2:42:8d:44:bc:6c:51:0a:
73:2b:08:2a:64:8c:1c:52:b7:ab:04:94:60:44:30:c5:29:e8:
22:e0:81:06:d7:47:c5:ed:a6:54:a5:d7:87:c8:58:b6:97:6d:
6d:70:1c:41:4b:c5:49:80:0e:38:9e:cb:f2:d6:ae:e5:f0:a0:
e7:a4:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:01 2025 by rpki-client