Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0167584C3A4411F0B5A12451C4F9AE02.roa
File: 0167584C3A4411F0B5A12451C4F9AE02.roa (raw, json)
Hash identifier: 8VHsT6nuYBZy6vOa3omxw2CwYfO9bZi7D13s4/a3tRg=
Subject key identifier: C0:2E:3F:38:79:56:08:31:FB:65:C5:A4:59:51:A9:B0:9D:3C:89:62
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4B58
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0167584C3A4411F0B5A12451C4F9AE02.roa
Signing time: Mon 26 May 2025 15:13:40 +0000
ROA not before: Mon 26 May 2025 15:13:40 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140825
IP address blocks: 59.153.216.0/22 maxlen: 24
103.12.76.0/23 maxlen: 24
103.81.84.0/22 maxlen: 24
103.173.254.0/23 maxlen: 24
103.184.112.0/23 maxlen: 24
103.186.146.0/23 maxlen: 24
2001:df0:5b40::/48 maxlen: 48
2001:df0:5bc0::/48 maxlen: 48
2001:df0:90c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 03:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19288 (0x4b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 26 15:13:40 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=68348524-07a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:c5:3d:75:54:39:9a:19:44:87:c1:08:b9:
0a:1d:94:54:98:db:76:e8:d9:b4:b2:77:f1:1a:a9:
27:81:49:22:e4:88:d1:7c:92:1d:0e:85:da:53:16:
3f:f2:ec:5c:96:1c:86:98:61:9f:40:58:cb:73:5c:
90:07:c9:00:c8:31:47:56:37:88:8c:16:a5:37:8d:
87:4c:01:a7:40:24:0a:06:14:8c:ba:3a:2e:72:c4:
4d:4b:12:7d:de:71:34:5d:7b:99:73:e5:5c:1a:44:
20:2c:06:f1:d3:cd:fa:94:42:2c:49:ad:38:b7:a6:
f0:8c:64:85:74:52:80:c3:2c:82:22:4f:bd:fb:9d:
c0:28:1f:ea:aa:d4:53:b2:04:41:da:5d:12:6c:17:
2c:70:4f:d2:41:64:b6:7b:71:8c:da:9f:c1:ad:d4:
c3:ab:c2:27:92:61:92:3d:4f:df:93:b8:7c:3f:7d:
af:c3:73:0f:63:4b:76:e5:76:b6:d2:c7:f4:c1:54:
c7:5a:66:ea:d7:b2:f5:43:94:59:d6:cd:b3:0f:89:
72:dd:9b:51:86:8a:56:57:b7:03:98:04:17:d2:2c:
32:68:20:ed:30:5b:f9:b9:d5:56:7c:01:7f:44:2c:
2d:b4:64:e1:b3:55:67:58:28:90:a4:60:c2:7b:25:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:3F:38:79:56:08:31:FB:65:C5:A4:59:51:A9:B0:9D:3C:89:62
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0167584C3A4411F0B5A12451C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.216.0/22
103.12.76.0/23
103.81.84.0/22
103.173.254.0/23
103.184.112.0/23
103.186.146.0/23
IPv6:
2001:df0:5b40::/48
2001:df0:5bc0::/48
2001:df0:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:44:a8:44:7a:1a:93:53:41:1b:b1:78:32:fe:82:3b:21:4c:
0e:b1:d2:64:dc:49:a0:ca:47:2c:31:36:eb:32:0b:a6:35:34:
dc:83:65:ce:82:c8:0c:3c:db:83:53:5a:1f:62:7f:b7:dc:cb:
55:69:ba:9d:79:a1:29:96:36:a7:9d:8c:7c:c4:e0:9f:d6:81:
84:f0:38:73:3b:34:55:40:a8:27:58:9f:4f:65:96:9e:4e:5e:
4e:f9:7c:62:8e:e9:41:f9:66:5b:d3:4a:66:c7:97:77:55:5b:
f2:48:c6:20:2a:ce:12:d3:5a:76:8f:5e:74:45:53:c9:c9:f6:
38:fb:db:a8:2e:78:f2:42:06:18:9e:b1:a7:23:00:c5:ca:0c:
c4:56:68:4b:33:36:f3:07:43:0d:d7:f8:e7:3a:87:e2:74:48:
20:57:b6:aa:14:3f:d6:bd:01:74:3e:2a:26:de:bf:b9:d3:a8:
81:f7:ba:cc:57:25:33:02:94:6d:29:e7:82:0f:c1:a7:8f:c8:
37:b5:b6:30:51:bd:d3:9b:1c:75:70:e6:fd:03:a0:c6:aa:a3:
a1:0a:86:a9:a4:24:57:37:3c:70:db:9b:46:21:6c:80:8c:55:
d3:3e:55:46:5e:28:60:5e:2d:8b:be:7f:6d:21:b1:c1:eb:3f:
0a:99:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:42:35 2025 by rpki-client