Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/B15C1C34108611F09268700FC4F9AE02.roa
File: B15C1C34108611F09268700FC4F9AE02.roa (raw, json)
Hash identifier: avQTVtjHZTUQalQzezk2l5Uf2lQ/k+9cQLdXE59sBG0=
Subject key identifier: F4:7B:F5:82:71:D3:8B:13:37:12:68:E8:D9:C5:41:19:6C:25:7E:1A
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: 02
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/B15C1C34108611F09268700FC4F9AE02.roa
Signing time: Thu 03 Apr 2025 12:25:13 +0000
ROA not before: Thu 03 Apr 2025 12:25:13 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137552
IP address blocks: 163.61.102.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 08 Apr 2025 06:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Apr 3 12:25:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ee7e29-6f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:8d:47:d3:d9:76:63:36:b3:b6:1d:33:ef:
85:ae:64:95:94:7d:22:f4:ff:ab:d1:3b:ac:ec:3e:
84:bc:07:b6:7a:a4:7c:41:07:a8:03:ee:1b:ae:33:
dc:ec:c6:bd:24:91:92:b4:f1:2f:84:ee:ab:f1:2d:
04:a9:9b:91:62:37:50:7b:52:e9:52:7e:f7:b2:27:
ed:2f:69:a7:64:ec:7d:fc:53:93:02:a1:c2:20:87:
a8:96:1b:2e:45:5d:4f:05:cc:81:6f:5c:40:97:a7:
cb:2a:0c:a7:96:12:09:a1:aa:cd:69:70:f6:bc:3b:
45:7c:55:ed:c1:2e:42:24:79:9e:1f:af:95:13:f1:
82:a0:9e:0a:a3:e5:fd:87:20:7c:5c:92:e3:bf:5b:
54:3d:44:d8:c4:52:81:0a:2e:c6:4a:ee:4a:5b:ec:
bf:94:4e:b4:5e:7c:01:49:7e:6b:aa:50:b0:2f:29:
90:ce:89:95:6a:25:f7:a8:11:37:16:47:a7:4f:f7:
1f:ed:5b:fe:d9:4b:20:df:01:61:27:3c:ec:f1:9b:
63:4a:05:f7:7f:1b:df:d3:4a:61:1b:2e:3f:97:21:
e1:85:cf:1e:5f:55:d8:f3:9f:2b:3b:75:ec:38:bb:
55:e6:81:d6:ff:72:2f:34:1d:1e:37:e2:08:92:57:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7B:F5:82:71:D3:8B:13:37:12:68:E8:D9:C5:41:19:6C:25:7E:1A
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/B15C1C34108611F09268700FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.102.0/23
Signature Algorithm: sha256WithRSAEncryption
20:29:3d:b8:6b:a5:60:dc:eb:a9:2b:7b:84:8b:64:1d:b6:43:
98:bf:3c:f3:58:3f:01:a0:ba:5b:ee:0d:8e:41:e9:3c:fc:19:
ee:65:f9:16:8d:e1:5a:33:75:87:d4:08:79:06:f1:e5:cb:9f:
28:f2:25:32:03:09:0a:1e:51:4d:bd:b1:48:cb:4f:a0:7f:28:
f1:a4:72:6f:b1:ae:26:f6:ec:f7:ce:a1:3b:0b:2c:98:4a:33:
63:3b:f2:5c:53:e2:c4:b0:f9:59:3c:2d:f0:63:ea:2f:a7:02:
8c:98:bd:de:90:16:53:50:ed:d4:26:3f:c3:e8:d7:24:39:4d:
cf:9f:a6:88:26:fd:8b:7a:78:6d:ff:4a:99:fb:9f:f2:5a:08:
ce:d5:db:8c:74:e1:48:91:32:3a:d5:ae:ff:c4:ba:2c:98:bc:
1b:6d:50:bb:c0:8c:03:27:38:d7:46:89:c7:d0:e5:79:c0:fd:
c8:e3:bb:28:26:1c:31:e1:47:99:df:2d:56:c3:39:db:91:38:
b9:b2:b5:6d:93:d7:70:b7:34:12:90:cd:f7:8c:0c:d8:55:b5:
cd:52:5e:6e:73:7d:1e:07:c5:6c:6c:20:d3:29:25:cd:b7:a2:
4d:f7:2d:c2:c1:41:60:2f:0f:92:66:82:9f:14:a0:34:ce:c8:
ce:02:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:19:34 2025 by rpki-client