Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/B97BD74AE4FF11EFB75F5836C4F9AE02.roa
File: B97BD74AE4FF11EFB75F5836C4F9AE02.roa (raw, json)
Hash identifier: cS5chTqGP/9nx8uBsA6IEVLZziZ8YjX7GFD9HSyf/3U=
Subject key identifier: 97:AB:20:ED:A9:BC:7D:4A:BE:20:EB:80:74:C9:9C:D4:20:99:2F:14
Certificate issuer: /CN=A91D9CA8/serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Certificate serial: 45
Authority key identifier: CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/B97BD74AE4FF11EFB75F5836C4F9AE02.roa
Signing time: Sun 25 May 2025 15:47:34 +0000
ROA not before: Sun 25 May 2025 15:47:34 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 153490
IP address blocks: 161.248.118.0/23 maxlen: 23
161.248.118.0/24 maxlen: 24
161.248.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 17:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Validity
Not Before: May 25 15:47:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68333b95-4f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:cb:d5:37:8c:f4:44:ae:18:f3:39:63:6f:
f8:3f:b0:82:f7:43:a8:a0:2a:ff:da:42:1b:f5:65:
b7:4a:a8:69:a0:bc:a5:b9:03:6b:38:d9:bd:a5:c2:
ec:35:76:45:26:16:ea:81:5f:6a:66:e3:71:52:01:
8c:04:4e:26:63:ac:dd:3e:6f:b7:ee:27:4d:08:93:
01:a2:c9:07:15:91:f6:90:c6:8d:86:fd:21:dd:e7:
c1:54:04:ac:cd:29:03:30:f7:b5:4d:58:6c:a1:23:
21:1c:f0:6a:67:0b:ab:82:fa:8c:f2:25:4b:4f:8a:
2a:1b:5e:64:5d:dc:99:72:6a:67:b3:75:99:ca:71:
5c:c6:1c:5b:21:6f:92:da:ad:70:1d:f4:ff:b4:de:
e1:d4:e5:25:2e:6a:b3:84:c2:c7:d9:24:4c:2e:38:
c2:fc:cf:8f:8f:0c:03:e3:47:b9:2a:5f:ac:6a:0e:
a4:82:dd:20:ce:68:16:ab:cf:00:55:1d:a6:2e:32:
e9:91:4f:20:6c:aa:12:a5:3c:3e:8b:04:68:47:a2:
2c:e3:32:73:53:63:1d:77:0e:c0:24:7f:e2:88:fd:
f8:e9:dc:b9:ae:a8:20:a4:55:c2:47:b0:f0:03:f4:
e3:e7:18:87:b0:e9:e7:13:a0:f6:4d:f3:21:2e:60:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:20:ED:A9:BC:7D:4A:BE:20:EB:80:74:C9:9C:D4:20:99:2F:14
X509v3 Authority Key Identifier:
keyid:CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/B97BD74AE4FF11EFB75F5836C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.118.0/23
Signature Algorithm: sha256WithRSAEncryption
70:1a:0a:af:3f:1c:9f:0a:e5:aa:81:8c:8d:27:c3:7a:f7:1f:
7f:22:48:99:5d:64:b4:7e:e6:b8:7c:f7:82:6c:7e:f2:f8:70:
97:9c:60:8a:a6:f3:78:c1:e6:b7:b7:85:63:b1:79:29:11:a5:
89:24:e3:2a:95:39:4e:48:2f:81:f1:3a:df:1a:8c:9c:bb:b3:
1a:f3:0c:d0:aa:14:8f:da:89:3d:96:76:32:39:1e:ef:e0:b7:
bd:c9:88:e7:91:8e:3e:d9:a0:6f:7f:92:39:34:09:67:b7:b5:
41:9f:60:1f:a3:1d:15:45:4e:e9:8a:36:52:09:28:bf:d3:df:
5a:3d:c1:29:b4:cc:3b:d6:2b:a6:bb:f9:2c:15:fe:f4:09:d4:
f9:c8:ae:47:ac:ef:23:cf:d8:aa:4e:eb:75:8e:e6:08:72:5c:
3a:bb:7d:df:90:57:ea:30:28:c6:e7:46:52:ff:2c:0c:cc:5c:
7c:50:08:cf:da:15:ef:81:bd:74:40:4f:67:f7:d0:7d:b9:84:
bb:b7:d9:e7:09:e3:32:24:63:46:32:1c:1d:0f:d5:a5:af:f5:
9b:34:bd:40:7c:1f:33:25:2c:93:8f:4e:5f:8e:ca:1b:c3:f4:
56:a9:5f:a0:1d:eb:0d:f0:d7:f9:67:8e:9f:da:ea:9c:26:22:
45:dc:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:11:43 2025 by rpki-client