Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/50AE4520BC8E11EF9770D643C4F9AE02.roa
File: 50AE4520BC8E11EF9770D643C4F9AE02.roa (raw, json)
Hash identifier: Mr1IdlijQI9qYaNeQDupDeFCJAbjwlOKtUT/xh0Jp6w=
Subject key identifier: 5C:CF:BB:7F:60:C9:2C:EF:66:96:DD:A6:54:1E:72:79:14:85:8D:DF
Certificate issuer: /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial: 0D
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/50AE4520BC8E11EF9770D643C4F9AE02.roa
Signing time: Tue 17 Dec 2024 15:48:10 +0000
ROA not before: Tue 17 Dec 2024 15:48:10 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 140068
IP address blocks: 160.250.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 18:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Validity
Not Before: Dec 17 15:48:10 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67619d39-a83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:e0:4b:29:7d:e4:ee:1b:08:46:6e:68:d2:
3d:ed:8c:c8:5d:59:fd:f0:6e:5e:4f:12:5f:ec:1f:
ee:47:7c:39:04:0c:15:54:f4:78:78:85:c8:cd:02:
d1:92:9b:78:8e:c2:5d:2b:04:47:69:fe:de:a3:f5:
eb:f6:03:02:cc:b4:4f:e1:31:ff:64:b7:63:1f:14:
26:e7:f5:19:8a:16:3c:3d:4e:14:07:d7:ff:be:98:
4b:69:79:7a:99:7e:a1:89:f0:ec:4c:38:0c:7b:5d:
6b:c9:1e:be:e0:13:22:88:11:59:ed:1d:d6:95:5f:
42:0f:fa:27:9e:dd:8a:8d:1f:89:7f:8b:bf:9c:b0:
1e:12:f5:79:b6:2f:84:2a:54:0a:f8:51:d3:ba:29:
b2:ff:ef:84:be:91:8f:88:69:e4:85:72:96:d3:7c:
e0:9f:e3:c3:f3:a5:01:d1:e5:3d:05:89:87:44:7f:
7c:fc:f6:a8:38:f0:c2:2f:e2:04:29:ab:04:5e:c1:
30:53:52:79:dc:9d:b5:e5:2e:d4:c3:bc:76:b3:67:
87:b8:e3:65:90:02:b3:45:70:dd:ad:1e:63:c2:72:
e7:07:9f:51:5c:ec:43:55:8c:90:77:d1:ee:31:d6:
f1:49:bb:39:3b:8d:57:36:70:77:14:5c:39:54:6e:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CF:BB:7F:60:C9:2C:EF:66:96:DD:A6:54:1E:72:79:14:85:8D:DF
X509v3 Authority Key Identifier:
keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/50AE4520BC8E11EF9770D643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.192.0/24
Signature Algorithm: sha256WithRSAEncryption
32:dd:ea:ad:0d:06:b5:48:57:86:34:b4:05:2b:bb:a2:51:9d:
d6:05:56:47:86:f7:1b:97:73:cd:81:c0:75:4d:cc:4b:dc:d7:
9d:9a:68:7a:f1:c7:8a:72:fa:d1:a6:46:6b:5a:bb:b5:49:c2:
03:f1:df:38:e7:5f:e5:50:0f:90:4c:ef:b2:fd:97:cc:d9:d3:
02:e7:9c:86:da:39:6a:b8:bf:dd:c8:62:1f:e2:56:20:5c:e2:
cd:4f:4e:85:4d:48:17:4d:1a:0d:c4:23:98:e0:70:b4:8f:92:
33:65:e6:11:43:ba:0d:0f:8f:fa:01:02:f9:1d:ea:6e:a0:12:
14:ac:4a:50:b2:32:af:0b:4f:cf:a3:8f:5f:c1:70:bf:73:95:
7c:a5:93:53:37:92:90:8d:7a:3b:c4:66:ef:65:ab:f2:90:9f:
6d:69:63:c1:67:eb:70:b8:c1:4c:eb:b2:3f:3a:83:17:71:e2:
18:3c:94:76:65:fe:7a:0c:33:67:d5:f3:2f:8b:fb:c1:91:e2:
90:2b:78:66:cc:50:0a:33:f0:ff:f2:b7:f5:2f:52:60:79:88:
95:f9:5d:d2:38:07:b6:fb:bf:75:61:64:5b:c8:46:b3:3e:d1:
16:a3:8c:3e:a8:02:90:4e:b4:85:1c:8a:33:e8:86:ba:0a:57:
18:bf:7e:c7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QkYyQjExMC8GA1UEBRMoRkNDNEE2NTdERDUzMEQ5NTNBMkQ2RjNGMTU5MzJGRkUw
MUYyOTFENjAeFw0yNDEyMTcxNTQ4MTBaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NjE5ZDM5LWE4M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuFeBLKX3k7hsIRm5o0j3tjMhdWf3wbl5PEl/sH+5HfDkEDBVU9Hh4hcjNAtGS
m3iOwl0rBEdp/t6j9ev2AwLMtE/hMf9kt2MfFCbn9RmKFjw9ThQH1/++mEtpeXqZ
fqGJ8OxMOAx7XWvJHr7gEyKIEVntHdaVX0IP+iee3YqNH4l/i7+csB4S9Xm2L4Qq
VAr4UdO6KbL/74S+kY+IaeSFcpbTfOCf48PzpQHR5T0FiYdEf3z89qg48MIv4gQp
qwRewTBTUnncnbXlLtTDvHazZ4e442WQArNFcN2tHmPCcucHn1Fc7ENVjJB30e4x
1vFJuzk7jVc2cHcUXDlUbldXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXM+7f2DJ
LO9mlt2mVB5yeRSFjd8wHwYDVR0jBBgwFoAU/MSmV91TDZU6LW8/FZMv/gHykdYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzQ1OUU2NjZFQjc4
QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFURFpVNkxXOF9GWk12X2dIeWtk
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvX01TbVY5MVREWlU2TFc4X0ZaTXZfZ0h5a2RZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkYyQi80NTlFNjY2RUI3OEExMUVGQjg3NDI3NkVDNEY5QUUwMi81MEFFNDUyMEJD
OEUxMUVGOTc3MEQ2NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKD6wDANBgkqhkiG9w0BAQsFAAOCAQEAMt3qrQ0GtUhXhjS0
BSu7olGd1gVWR4b3G5dzzYHAdU3MS9zXnZpoevHHinL60aZGa1q7tUnCA/HfOOdf
5VAPkEzvsv2XzNnTAuechto5ari/3chiH+JWIFzizU9OhU1IF00aDcQjmOBwtI+S
M2XmEUO6DQ+P+gEC+R3qbqASFKxKULIyrwtPz6OPX8Fwv3OVfKWTUzeSkI16O8Rm
72Wr8pCfbWljwWfrcLjBTOuyPzqDF3HiGDyUdmX+egwzZ9XzL4v7wZHikCt4ZsxQ
CjPw//K39S9SYHmIlfld0jgHtvu/dWFkW8hGsz7RFqOMPqgCkE60hRyKM+iGugpX
GL9+xw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:37:29 2025 by rpki-client