Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/377D24D8D27111EF8B337731C4F9AE02.roa
File: 377D24D8D27111EF8B337731C4F9AE02.roa (raw, json)
Hash identifier: 4aU20uPvcTlxGwa2mMcfHwC4w7WHmS3f0gU1QQFR2qE=
Subject key identifier: 16:1B:4F:D4:62:18:EB:F6:82:45:17:FE:E4:7A:99:97:E1:8C:F5:53
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 26
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/377D24D8D27111EF8B337731C4F9AE02.roa
Signing time: Tue 14 Jan 2025 12:15:18 +0000
ROA not before: Tue 14 Jan 2025 12:15:18 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153522
IP address blocks: 161.248.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 04:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Jan 14 12:15:18 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67865555-70ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:c7:52:ad:44:86:c1:d0:72:6f:bd:13:c5:
e4:6f:ff:80:e1:fa:24:54:ec:b2:aa:63:43:63:7e:
85:cd:af:85:2f:f3:87:28:01:a4:35:c3:79:15:f7:
93:47:e2:01:2a:03:76:98:dd:7f:28:35:e4:a6:2d:
ff:1a:8e:31:01:38:dd:01:40:58:de:ec:83:f5:c6:
07:90:fb:bc:50:4b:5d:b5:e4:af:65:eb:eb:0b:38:
24:47:4d:af:9a:42:37:08:92:db:2e:6d:6f:e7:5a:
db:c7:b5:f6:85:73:4e:15:d5:c1:b1:04:c0:16:e4:
ea:6e:0f:f2:77:72:10:92:45:54:e1:bc:22:8b:5a:
64:b2:cf:7d:e9:04:3e:6f:69:b1:47:77:54:fc:0b:
ce:d0:31:1e:34:a7:a4:25:d7:55:b3:e7:ee:45:8e:
73:89:8d:66:85:cb:e0:b2:09:3a:58:93:93:3e:14:
eb:af:86:7e:4f:f3:5c:70:2b:04:13:9a:7c:6b:da:
23:79:1f:65:39:dd:0f:92:0d:5c:cb:7b:f8:f3:ab:
4a:8a:9b:c4:d9:ff:8f:c9:e8:a3:df:46:a8:fd:ed:
97:dd:d9:a2:b2:75:ba:26:bc:81:95:c9:e4:f3:6f:
bd:d8:df:ec:e0:91:15:4b:bc:f1:3a:da:78:ec:bd:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:4F:D4:62:18:EB:F6:82:45:17:FE:E4:7A:99:97:E1:8C:F5:53
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/377D24D8D27111EF8B337731C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.162.0/23
Signature Algorithm: sha256WithRSAEncryption
53:20:7e:cf:99:3d:6a:a7:24:ca:20:82:d6:eb:01:3d:76:e0:
c5:dc:19:ec:ca:da:fc:c9:30:a5:e6:c1:2e:4e:e0:29:47:01:
a4:27:63:72:30:65:a6:5e:a5:27:c5:c7:40:82:9e:99:74:ac:
f3:9b:25:1e:a0:46:08:17:40:00:67:97:12:fd:b9:8b:43:59:
e3:dc:8d:82:6b:ca:6e:2c:90:76:9d:16:d0:4c:23:0b:04:9a:
31:45:72:97:8b:22:b0:cb:cf:00:5e:fe:6c:f2:44:37:b1:b9:
31:0a:33:13:37:cb:aa:05:b2:51:44:2f:05:98:8c:01:79:13:
51:79:ae:0e:d0:06:6d:2b:fb:61:49:96:da:6b:a7:d5:ad:01:
b7:92:ef:91:1b:03:94:34:ff:95:87:cf:d0:4e:63:6a:c5:6b:
9c:04:12:15:5b:fa:83:a1:bb:dc:83:f0:95:86:df:06:ab:39:
a1:67:2c:e1:56:cf:94:c5:88:84:a1:32:b7:b0:a1:2a:51:ab:
5e:0e:4d:67:1a:4f:aa:c0:c4:7d:ed:d5:9b:02:c9:10:21:38:
07:fe:f8:48:7c:a3:a7:9e:70:03:f2:51:38:2b:3d:7d:d0:37:
df:44:b1:e6:0a:b5:1f:42:f7:9b:78:33:f4:63:62:7e:b9:fa:
fa:fb:bb:74
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
ODVFOTExMC8GA1UEBRMoNjI0Qjk2RTFENjY1RUQ3OEU3OERGQUY2QzIyMDE5MTA3
M0RCNjZDQzAeFw0yNTAxMTQxMjE1MThaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ODY1NTU1LTcwYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3HMdSrUSGwdByb70TxeRv/4Dh+iRU7LKqY0NjfoXNr4Uv84coAaQ1w3kV95NH
4gEqA3aY3X8oNeSmLf8ajjEBON0BQFje7IP1xgeQ+7xQS1215K9l6+sLOCRHTa+a
QjcIktsubW/nWtvHtfaFc04V1cGxBMAW5OpuD/J3chCSRVThvCKLWmSyz33pBD5v
abFHd1T8C87QMR40p6Ql11Wz5+5FjnOJjWaFy+CyCTpYk5M+FOuvhn5P81xwKwQT
mnxr2iN5H2U53Q+SDVzLe/jzq0qKm8TZ/4/J6KPfRqj97Zfd2aKydbomvIGVyeTz
b73Y3+zgkRVLvPE62njsvaHNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUFhtP1GIY
6/aCRRf+5HqZl+GM9VMwHwYDVR0jBBgwFoAUYkuW4dZl7Xjnjfr2wiAZEHPbZsww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0MxMTJGNTVDRDE3
NjExRUY5NUM1REU1QUM0RjlBRTAyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpz
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWWt1VzRkWmw3WGpuamZyMndpQVpFSFBiWnN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi8zNzdEMjREOEQy
NzExMUVGOEIzMzc3MzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaH4ojANBgkqhkiG9w0BAQsFAAOCAQEAUyB+z5k9aqckyiCC
1usBPXbgxdwZ7Mra/MkwpebBLk7gKUcBpCdjcjBlpl6lJ8XHQIKemXSs85slHqBG
CBdAAGeXEv25i0NZ49yNgmvKbiyQdp0W0EwjCwSaMUVyl4sisMvPAF7+bPJEN7G5
MQozEzfLqgWyUUQvBZiMAXkTUXmuDtAGbSv7YUmW2mun1a0Bt5LvkRsDlDT/lYfP
0E5jasVrnAQSFVv6g6G73IPwlYbfBqs5oWcs4VbPlMWIhKEyt7ChKlGrXg5NZxpP
qsDEfe3VmwLJECE4B/74SHyjp55wA/JROCs9fdA330Sx5gq1H0L3m3gz9GNifrn6
+vu7dA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:08:28 2025 by rpki-client