Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/733D1862055611F09F71D047C4F9AE02.roa
File: 733D1862055611F09F71D047C4F9AE02.roa (raw, json)
Hash identifier: 82CyNh6p5M/dmstMYanNxb1WqXftXfa/YLcosR+yAv4=
Subject key identifier: 70:23:2B:36:80:75:60:01:FD:6A:EA:C4:49:E3:E1:6C:EE:39:F4:A4
Certificate issuer: /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Certificate serial: 05
Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/733D1862055611F09F71D047C4F9AE02.roa
Signing time: Thu 20 Mar 2025 06:42:11 +0000
ROA not before: Thu 20 Mar 2025 06:42:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153685
IP address blocks: 163.223.92.0/24 maxlen: 24
163.223.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Validity
Not Before: Mar 20 06:42:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67dbb8c2-a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:78:1e:cf:49:8f:ae:86:6f:5a:c5:9e:7c:
1e:01:c2:cf:94:94:6c:e7:fb:b2:a9:86:5d:81:bd:
24:2c:6a:ca:04:4d:42:a4:8f:6b:68:6a:eb:a2:4a:
13:d8:ec:e6:d0:f2:7b:62:97:53:fe:10:15:a5:72:
4d:d1:35:1d:55:76:0a:b3:bb:d2:31:26:f7:5e:ac:
b0:39:5e:d5:44:6a:59:16:57:35:59:7e:f4:32:ab:
4f:91:0c:1d:38:18:d1:6f:4d:d9:74:6a:21:11:46:
4b:10:ed:4d:4f:87:e1:02:22:90:6b:95:db:48:51:
52:71:53:f5:e9:ba:ec:86:98:ef:e9:93:95:dd:f1:
56:bd:65:a2:cb:41:aa:c8:63:b1:5d:f9:3a:64:ee:
40:c1:c1:ab:d5:40:38:ac:46:8d:38:30:95:ad:98:
b9:aa:c4:92:1f:af:8b:ad:81:a2:dc:61:ed:d7:15:
9d:36:f6:7a:af:d9:ed:a5:6c:14:6f:70:60:4c:c6:
de:37:ee:4d:5b:f9:bd:14:4a:08:5a:f6:85:db:8d:
6e:ef:8d:67:9a:9f:d9:a4:35:56:5e:ef:ac:32:16:
83:bb:3a:10:ff:94:1a:9e:55:f8:87:82:aa:01:48:
e6:ea:b6:77:fd:8c:10:c8:6d:b7:07:d7:92:7c:69:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:2B:36:80:75:60:01:FD:6A:EA:C4:49:E3:E1:6C:EE:39:F4:A4
X509v3 Authority Key Identifier:
keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/733D1862055611F09F71D047C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.92.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:5a:70:17:22:3d:a6:94:c1:e0:d2:6f:f8:e6:7a:c7:83:d5:
90:a8:c1:d0:4c:3c:d5:f0:64:62:03:2f:08:b6:8d:05:b6:0d:
b4:0c:8a:9f:07:5b:04:04:42:a4:45:29:66:ca:7e:8a:d5:18:
c7:f6:14:1b:35:e0:bb:37:fd:cf:74:e2:de:7d:21:60:bd:78:
9c:7e:4d:ad:c4:55:ff:2e:4a:bd:ae:de:a7:f5:90:64:78:30:
14:b7:d2:81:1b:6b:ae:ef:57:b7:e8:a9:35:4a:84:2a:95:d4:
42:a4:0e:b5:73:13:7b:b5:6b:06:f5:57:29:8f:2e:3c:26:e9:
99:37:24:5c:50:ca:5e:ab:5c:51:52:7d:64:dc:a8:d5:40:3c:
c5:5b:27:85:21:81:63:69:f9:7a:c5:8c:12:f1:c4:3c:e8:09:
3d:d4:3b:51:3c:cd:7d:16:a0:aa:84:46:3c:2d:ea:31:24:50:
cc:08:f3:7c:81:aa:8f:85:fb:7d:0f:a6:e9:1c:99:d3:da:4e:
2c:36:4d:14:0d:cc:10:1b:e0:f8:49:3f:06:aa:74:39:57:51:
b0:f6:af:2e:8b:c2:34:d6:af:53:57:4a:12:0e:cb:cb:68:97:
9d:4c:61:b0:4f:02:17:06:97:ba:ee:91:eb:1b:ae:64:c8:35:
83:46:e2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:24:43 2025 by rpki-client