Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/3D8B70B4E38D11EFBE901A46C4F9AE02.roa
File: 3D8B70B4E38D11EFBE901A46C4F9AE02.roa (raw, json)
Hash identifier: xtMQdylJd5ExIfku7HjSFZQ9NVkXk2zy2EL4rw3KqeI=
Subject key identifier: A2:3E:62:F3:36:A1:0F:68:66:DB:52:55:08:BB:C7:91:E0:C8:5E:06
Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial: 13
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/3D8B70B4E38D11EFBE901A46C4F9AE02.roa
Signing time: Wed 05 Feb 2025 06:48:43 +0000
ROA not before: Wed 05 Feb 2025 06:48:43 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 153531
IP address blocks: 161.248.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 07:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Validity
Not Before: Feb 5 06:48:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a309cb-be15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:b1:f1:7a:6d:45:9b:33:22:e1:73:f8:51:
ca:a1:8e:de:47:26:fb:a1:c9:45:4c:de:fd:6f:de:
f9:c7:25:da:5e:f2:9b:05:f6:03:07:81:fe:4d:ac:
bf:11:ea:6b:57:3e:1a:21:dd:c4:3e:c1:f2:85:3f:
13:35:9b:b0:ad:44:39:21:d1:f9:a2:e0:2e:83:ba:
bd:f5:7d:7e:df:51:39:b7:4e:b2:5d:41:c0:09:ed:
8a:2f:63:13:55:c9:cf:ad:ae:f9:d9:37:ef:2d:47:
ae:ce:19:65:fd:2b:b1:79:6a:a7:cd:48:b9:2e:04:
aa:a2:e8:30:40:17:ba:90:cb:b6:cc:9e:33:89:33:
99:c8:a2:ba:a0:f6:cd:bb:a3:85:47:6d:34:be:19:
d3:61:d6:63:e3:aa:f8:fc:b7:31:53:97:71:46:64:
48:02:fa:1e:56:7b:eb:e6:30:e6:ee:96:a0:4c:23:
27:67:20:d4:b7:d1:ea:2f:31:8f:be:ba:34:78:5f:
9b:95:a6:85:fb:19:13:85:d6:01:46:2a:8f:a0:87:
2b:e1:56:9e:a1:47:dc:63:87:da:44:48:12:fd:2f:
77:69:d8:30:83:86:ec:13:f6:1d:65:24:11:24:4b:
c0:0b:d1:c1:02:59:d2:18:f9:5c:a2:3a:3b:73:4b:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3E:62:F3:36:A1:0F:68:66:DB:52:55:08:BB:C7:91:E0:C8:5E:06
X509v3 Authority Key Identifier:
keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/3D8B70B4E38D11EFBE901A46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.218.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:61:14:3d:ef:66:57:f7:eb:aa:9e:5c:c3:4c:95:56:3f:ba:
a5:f4:27:b0:a2:cb:19:29:98:76:41:3e:5e:d5:bc:f3:a2:97:
24:62:17:fe:0f:07:5f:c7:97:82:39:37:2f:34:6d:16:f4:a2:
10:69:83:df:97:b2:5c:6e:3b:dc:a1:df:7d:93:e9:5f:47:bb:
21:e3:b4:25:f4:dc:69:48:aa:10:f6:de:84:81:63:13:11:62:
66:98:f5:ef:b6:f1:eb:d0:44:e3:38:5d:43:00:90:12:00:3c:
db:0a:b0:d7:c6:8a:47:30:98:6b:37:2f:40:f0:a0:84:a6:c0:
a5:77:8b:c7:25:d4:8a:9e:e5:6a:55:43:28:c8:00:f1:92:5c:
a6:8d:12:fa:77:c3:01:1d:8d:c2:23:52:eb:58:d3:79:b2:a3:
bc:3e:6c:47:8a:2c:06:eb:fb:4e:cd:d6:53:f9:5f:83:ce:db:
61:3c:e5:88:ea:98:9a:90:53:f8:ae:74:b8:b1:d2:0c:99:d3:
c0:7f:3c:59:98:42:83:72:82:ce:90:49:8c:06:dc:e5:ad:42:
b3:2e:7d:1f:a5:7c:2b:08:0b:a4:c3:0b:f0:4d:dd:8b:5f:05:
4d:d7:4d:75:21:be:fb:ca:15:90:ee:10:68:25:02:00:24:a3:
27:29:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:56:45 2025 by rpki-client