Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
File: E47A5F706C3211EF8D285C31C4F9AE02.roa (raw, json)
Hash identifier: /rAi23lwcJ1pINtlriHjZX5e9T8CthBIRKjo83KtMlM=
Subject key identifier: 17:07:1B:D6:9A:5E:E1:A7:13:DA:CC:A1:FD:A1:9F:E9:1B:82:D9:F2
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1E3D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
Signing time: Thu 08 May 2025 15:55:51 +0000
ROA not before: Thu 08 May 2025 15:55:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9830
IP address blocks: 160.30.216.0/24 maxlen: 24
160.30.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 06:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7741 (0x1e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:55:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd407-0de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:97:db:c8:37:b9:f2:9d:c4:f5:39:ef:4d:
77:3f:d6:ab:e7:fe:f2:b6:ff:1b:a3:eb:a2:f9:32:
5f:7e:37:fa:e0:4a:2f:1e:e6:cb:d6:47:a2:9f:77:
46:14:9c:c4:d3:5c:6a:31:0e:a1:32:56:6b:b6:ca:
47:a9:b4:c2:4c:a6:0f:e4:04:b2:38:73:97:ab:85:
3f:7e:a1:9b:e7:7f:e0:dc:5f:37:92:3d:86:d9:10:
34:f5:71:a4:69:97:9c:68:ce:2a:4d:fa:3f:69:00:
8d:d0:5b:21:19:5d:15:36:89:1c:d8:71:3d:12:c7:
35:64:b8:99:9a:07:9d:94:93:b9:e2:31:8f:0c:9f:
ac:87:de:66:c9:18:d5:87:c8:d5:5a:3e:f9:e7:6e:
b7:d1:93:a1:4e:3d:6e:b9:9d:22:48:f9:f4:3c:2a:
6d:9a:6d:91:60:66:2d:71:ac:05:16:69:69:8e:b0:
11:80:2f:83:d3:5b:a5:33:77:34:4f:6e:66:77:3a:
10:74:07:12:f6:a4:7b:8e:2d:64:26:ad:94:3e:4f:
e9:02:15:0f:b8:d6:07:4d:84:ca:2f:fb:6a:fa:08:
38:cc:b1:5d:9a:79:49:6f:53:de:a8:50:9b:69:3f:
5f:6a:5f:68:ec:39:98:33:67:17:fa:9a:1d:4b:cf:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:1B:D6:9A:5E:E1:A7:13:DA:CC:A1:FD:A1:9F:E9:1B:82:D9:F2
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.216.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c1:44:85:01:71:f2:28:58:a2:05:34:a9:3c:1d:ad:6b:6c:
d7:b8:a4:3d:f6:17:00:c2:ed:77:c5:00:4e:36:b4:bf:55:01:
fd:ae:ae:35:a8:e0:f4:a1:63:0d:11:11:b6:47:5d:8e:e5:72:
4e:28:74:e5:1e:6c:5b:07:d6:7d:e2:5a:4f:e5:7a:88:62:03:
2c:62:08:b8:54:de:0d:09:96:76:d7:5e:13:a1:ba:cb:f9:89:
08:5c:ab:ed:cc:80:6f:a7:e7:11:3f:5f:43:33:31:83:cf:30:
d7:2b:ca:6a:39:8a:ae:b2:b7:0a:68:87:64:de:c8:58:9f:12:
7c:5b:76:8b:8e:5c:36:8b:54:94:be:80:60:2c:14:c9:5a:7b:
ea:71:31:7f:ad:a9:5a:8b:09:23:90:ef:c5:58:2d:81:01:c6:
b7:81:b8:67:a6:5a:5f:5b:51:87:9e:47:2f:ed:13:f3:f6:0b:
35:85:db:de:14:8b:4d:fb:77:d8:0a:f0:ab:71:ed:fd:3d:31:
2c:41:c6:d9:eb:3e:73:f9:c5:05:bf:53:3d:a3:91:fc:59:4a:
d2:2d:cd:21:52:6c:56:7b:50:c7:e3:e6:a1:cb:95:74:3e:d4:
04:c0:ae:c9:a8:cd:7c:de:46:f5:ce:2e:19:60:e7:3f:3a:e9:
03:d8:a0:4a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NTUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFjZDQwNy0wZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1YOX28g3ufKdxPU57013P9ar5/7ytv8bo+ui+TJffjf64EovHubL1kein3dG
FJzE01xqMQ6hMlZrtspHqbTCTKYP5ASyOHOXq4U/fqGb53/g3F83kj2G2RA09XGk
aZecaM4qTfo/aQCN0FshGV0VNokc2HE9Esc1ZLiZmgedlJO54jGPDJ+sh95myRjV
h8jVWj7552630ZOhTj1uuZ0iSPn0PCptmm2RYGYtcawFFmlpjrARgC+D01ulM3c0
T25mdzoQdAcS9qR7ji1kJq2UPk/pAhUPuNYHTYTKL/tq+gg4zLFdmnlJb1PeqFCb
aT9fal9o7DmYM2cX+podS891mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBcHG9aa
XuGnE9rMof2hn+kbgtnyMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTQ3QTVGNzA2
QzMyMTFFRjhEMjg1QzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHtgwDQYJKoZIhvcNAQELBQADggEBAHPBRIUBcfIoWKIF
NKk8Ha1rbNe4pD32FwDC7XfFAE42tL9VAf2urjWo4PShYw0REbZHXY7lck4odOUe
bFsH1n3iWk/leohiAyxiCLhU3g0JlnbXXhOhusv5iQhcq+3MgG+n5xE/X0MzMYPP
MNcrymo5iq6ytwpoh2TeyFifEnxbdouOXDaLVJS+gGAsFMlae+pxMX+tqVqLCSOQ
78VYLYEBxreBuGemWl9bUYeeRy/tE/P2CzWF294Ui037d9gK8Ktx7f09MSxBxtnr
PnP5xQW/Uz2jkfxZStItzSFSbFZ7UMfj5qHLlXQ+1ATArsmozXzeRvXOLhlg5z86
6QPYoEo=
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:16:14 2025 by rpki-client