
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/5A41B0A6057A11F09EADEF0CC4F9AE02.roa
File: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (raw, json)
Hash identifier: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY=
Subject key identifier: D2:F3:5C:DA:7A:0E:52:0F:B1:AB:8B:CC:F2:B8:09:C0:FD:D7:9F:FC
Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial: 07
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/5A41B0A6057A11F09EADEF0CC4F9AE02.roa
Signing time: Thu 20 Mar 2025 10:59:11 +0000
ROA not before: Thu 20 Mar 2025 10:59:11 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140641
IP address blocks: 163.223.120.0/24 maxlen: 24
163.223.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 08:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Validity
Not Before: Mar 20 10:59:11 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67dbf4fe-df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:20:b4:f8:65:97:f6:de:13:0e:07:83:0b:
8d:c4:d8:25:aa:6a:dc:76:ee:1c:16:f2:1e:08:20:
91:29:8a:46:af:8c:19:2c:5c:cf:02:7c:52:17:77:
e9:a8:db:1e:1e:7e:87:46:8b:93:eb:49:8c:36:86:
fb:15:42:15:ba:6b:77:06:5b:76:8d:fe:b3:d9:f9:
3c:33:ba:57:8f:15:80:48:22:bb:56:24:b5:b4:78:
2c:08:9e:8e:db:0e:bf:43:78:fb:76:47:00:b8:9c:
cd:36:d4:87:4c:dd:4b:56:30:53:c8:53:73:8e:42:
31:a7:cb:a2:4c:91:33:c5:fb:eb:cb:b5:24:67:0c:
c3:77:cd:a4:c7:e3:20:4e:4d:4e:36:5a:9f:de:77:
9f:57:ad:d8:16:b3:da:9a:b2:66:2f:11:a4:d2:23:
55:fb:10:4a:ef:4d:bc:b9:85:21:2c:b4:f5:c4:ad:
1e:77:f9:fc:c0:59:b1:69:26:f8:f5:a8:b7:29:bd:
78:8e:26:f2:41:f5:b1:a9:9b:2f:22:a4:1d:26:9e:
c2:aa:0c:fb:db:25:da:c1:a6:07:65:3e:b9:4a:f0:
50:76:0a:5e:fe:08:fd:68:e8:85:8e:de:7a:58:5a:
72:30:80:58:0a:11:80:5c:ca:6f:ee:45:d7:75:54:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F3:5C:DA:7A:0E:52:0F:B1:AB:8B:CC:F2:B8:09:C0:FD:D7:9F:FC
X509v3 Authority Key Identifier:
keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/5A41B0A6057A11F09EADEF0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.120.0/23
Signature Algorithm: sha256WithRSAEncryption
78:5d:0d:9a:f5:24:c7:41:af:55:a9:a6:ea:56:b3:de:ef:45:
75:8e:07:79:87:e0:43:16:f8:95:43:1b:c3:4b:aa:f6:c4:e0:
48:be:c6:cf:dc:f8:c4:0c:22:e4:7d:5e:a6:8c:57:21:48:64:
fb:d9:19:6c:37:92:29:fe:fd:85:23:57:95:fe:96:fc:79:78:
83:8f:70:32:fc:fa:db:55:4a:c4:ec:f3:87:cd:ae:c8:99:1f:
8f:f0:ae:70:ac:38:42:95:56:27:7a:82:09:46:e1:bb:d4:6b:
57:b7:a9:f9:71:6d:e3:cf:74:d2:75:c7:51:e6:39:87:27:80:
fc:96:a4:9f:68:bb:ce:3c:0a:a5:47:d1:06:dd:6b:a3:4e:fc:
01:ef:10:9b:20:cc:71:1c:0e:7b:44:5a:cb:0f:11:53:7c:64:
fa:f5:9c:1c:47:0b:1a:ab:28:d9:f2:f1:67:84:93:2c:11:13:
95:2c:6b:0c:e7:54:c2:34:a3:e9:5b:67:dc:a2:2a:9a:c4:85:
55:eb:a6:ff:66:16:0c:93:18:77:10:23:bb:2b:56:b6:c6:98:
dd:43:8b:c5:9b:84:5c:1e:fa:1a:90:7a:3a:77:da:91:40:5c:
35:ff:78:ee:4a:90:a4:f9:49:19:a7:95:19:d0:64:9b:d1:2f:
bd:bf:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:40 2025 by rpki-client