Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/9B35F348266211F09E7C3657C4F9AE02.roa
File: 9B35F348266211F09E7C3657C4F9AE02.roa (raw, json)
Hash identifier: w98iv4SMeaHMbmTMicpq1ZJ/swub43o1vMMkgZ6/hgM=
Subject key identifier: 4C:15:AE:2D:5F:E5:4D:0D:6C:B6:F0:02:57:7D:B4:6F:AD:FB:2B:7F
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 5E
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/9B35F348266211F09E7C3657C4F9AE02.roa
Signing time: Thu 01 May 2025 08:02:20 +0000
ROA not before: Thu 01 May 2025 08:02:20 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139780
IP address blocks: 160.250.8.0/24 maxlen: 24
160.250.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 21:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Validity
Not Before: May 1 08:02:20 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=68132a8c-6cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:95:67:87:32:bf:aa:84:68:78:ac:6e:75:
32:3f:98:42:59:15:7c:3f:5a:30:b2:5a:fa:0c:01:
ef:e6:5f:0f:d2:ab:57:3f:c8:05:8d:8b:64:1d:4a:
22:05:6c:bb:21:a2:ca:a5:c7:b1:b5:39:4f:fe:11:
77:84:71:6f:15:52:a7:2b:41:25:e8:ce:fd:23:fa:
39:8d:70:33:d4:96:ce:aa:a7:99:8b:47:2e:67:83:
26:e3:e7:fc:2c:8c:f9:07:87:ac:04:66:bd:a5:20:
36:2c:73:0f:91:9e:e9:e7:43:8d:44:1c:19:6b:88:
7f:29:48:57:21:88:33:2f:04:2e:c3:36:78:a3:38:
50:b4:2b:e5:b5:d5:35:ba:77:cf:fb:11:7f:76:55:
25:75:da:bb:90:81:3e:a8:ee:ce:ca:c5:47:3a:78:
9a:55:e9:53:cf:7d:61:9e:ec:74:f1:3f:9c:b4:96:
8c:82:65:75:23:b4:d5:57:e2:1d:6d:8b:9c:79:03:
4d:33:ab:10:45:0c:f8:8e:04:52:ad:b0:1e:c6:e6:
91:f4:69:f4:1c:5f:da:8a:38:84:e2:d9:9b:ea:b7:
42:50:cd:70:1c:ec:23:a7:44:14:a3:4b:d7:4d:8a:
5e:42:3e:e8:2b:94:a6:7c:da:0e:5d:37:8e:65:5b:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:AE:2D:5F:E5:4D:0D:6C:B6:F0:02:57:7D:B4:6F:AD:FB:2B:7F
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/9B35F348266211F09E7C3657C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.8.0/23
Signature Algorithm: sha256WithRSAEncryption
31:e0:16:11:d2:69:17:07:b0:7e:eb:8b:73:6a:2d:87:41:b9:
da:65:86:71:6a:3d:3d:ab:ae:99:82:b1:97:e2:33:c0:c3:0d:
23:4f:b4:38:16:90:17:74:55:54:7c:13:24:d8:0a:85:23:be:
10:a6:b1:93:29:95:e1:44:49:a1:92:45:47:c7:00:9d:4c:22:
3b:f3:bd:0f:ee:4c:9a:22:ab:d6:c5:3e:c5:80:be:fa:af:d7:
18:e3:46:51:2b:05:7c:4f:66:89:63:55:c1:26:26:f1:52:50:
2a:19:3e:6e:5c:5e:6e:c3:08:f3:66:3f:9d:f7:b4:2f:9e:80:
20:89:13:66:3c:2f:69:99:3a:fc:b7:bb:e8:03:4d:ee:da:18:
a9:d6:2b:01:84:18:5e:b2:41:53:0a:5b:70:ff:46:8d:05:bb:
d7:63:0f:00:f8:b0:06:b9:c7:29:fe:f4:18:f0:dd:fe:f1:01:
00:53:fa:2f:47:ca:8a:fb:0f:4f:2e:a3:32:e8:ab:b9:7e:b0:
08:15:f9:5d:b2:3e:37:04:30:60:0d:3d:8e:c7:2d:6b:f0:34:
78:6f:a4:c0:1a:ae:f4:eb:51:c8:9e:8b:77:52:02:e0:d9:2e:
bb:68:8b:98:e7:37:97:90:33:c1:41:ef:45:3e:6f:db:c5:d9:
1d:dd:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:28:56 2025 by rpki-client