Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/FB274B22013B11F0B2472F35C4F9AE02.roa
File: FB274B22013B11F0B2472F35C4F9AE02.roa (raw, json)
Hash identifier: RlydgHEKuErRsPJXG6m8XViIjL89ox+uB48ZksXHSgY=
Subject key identifier: 79:C6:0B:CD:F8:5C:41:46:2A:27:FA:6E:43:F0:54:7A:24:A8:23:C0
Certificate issuer: /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial: 3B
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/FB274B22013B11F0B2472F35C4F9AE02.roa
Signing time: Sat 15 Mar 2025 01:22:38 +0000
ROA not before: Sat 15 Mar 2025 01:22:38 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132233
IP address blocks: 160.250.20.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 15 Mar 2025 05:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Validity
Not Before: Mar 15 01:22:38 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67d4d65d-0cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:fe:26:b6:65:87:8e:5b:02:0e:c4:ac:64:
e9:3e:6b:d8:3f:72:9f:ee:ae:07:80:04:00:b5:ef:
ce:32:cf:fa:83:48:f6:16:f5:57:3b:fd:c3:0a:e3:
41:28:24:a7:bd:16:8e:31:4c:2f:47:c1:a2:70:a9:
dc:96:f3:79:a0:64:af:7f:d5:a1:32:97:6c:bd:93:
75:9b:12:5a:2a:3f:38:c0:a9:02:fb:f9:78:8f:f3:
86:ab:83:bd:04:5c:a5:95:f7:d6:79:e5:28:01:6b:
0b:fd:fd:55:e1:6a:d5:58:a1:bc:7b:9d:81:ec:12:
ab:b3:8f:41:45:c3:a9:76:8c:ec:8b:00:4e:03:fa:
9f:85:1f:09:87:7f:89:ad:82:20:dd:17:d8:79:71:
67:a5:6e:1d:40:d2:a0:8a:a1:00:65:52:84:65:4f:
30:b3:88:1b:51:b3:2e:4c:6c:c2:3f:4f:7c:64:02:
4d:86:47:8d:ae:87:a0:1a:b4:ae:60:18:2c:5a:40:
42:5b:a3:6f:c0:62:39:cb:c1:d2:8f:03:67:20:6a:
ab:0e:9b:af:ec:33:20:cc:a7:9e:8d:ec:bc:b4:e4:
4b:21:6e:e1:14:c8:dc:8c:74:f8:73:42:29:36:b0:
7c:f3:11:47:43:b1:b5:11:b9:0d:f0:ab:17:14:d9:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:0B:CD:F8:5C:41:46:2A:27:FA:6E:43:F0:54:7A:24:A8:23:C0
X509v3 Authority Key Identifier:
keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/FB274B22013B11F0B2472F35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.20.0/23
Signature Algorithm: sha256WithRSAEncryption
00:2d:3c:9a:02:88:5d:61:53:25:7a:4a:69:ce:c2:b4:bd:83:
0b:36:1c:81:6a:ab:a5:3a:30:5d:d3:36:0b:1e:74:c6:34:18:
51:b3:9a:7e:17:d8:16:50:f3:3a:f2:1d:97:f0:a6:33:6e:21:
60:88:3f:34:01:e5:06:f2:e3:7b:9e:10:18:32:2c:d9:e9:bb:
d4:e4:70:d5:94:95:89:60:db:41:e7:1d:ab:11:77:3f:79:9c:
58:d5:ca:f0:7b:58:d4:58:fb:25:73:dd:96:9a:e1:80:d6:3d:
7d:c9:e7:05:be:f6:f3:a5:ab:77:b9:f3:6f:5a:2b:6b:41:7a:
70:7e:2b:61:f5:9f:98:30:df:1f:1f:3e:19:1b:b4:89:72:34:
e4:14:a8:55:70:25:89:30:07:a3:8a:9a:bc:be:c9:4a:dc:8b:
29:e1:80:26:17:8d:13:99:48:ef:2a:d3:94:b3:c1:53:38:08:
2c:d3:7e:d8:07:b2:1e:23:8a:a9:9e:ff:74:6c:90:35:62:ea:
43:f2:d0:74:e8:86:60:85:c3:a5:e4:b9:57:ea:23:6f:d3:37:
7d:7d:58:81:46:1d:5a:c4:54:0e:59:c4:2e:2b:23:54:14:03:
5d:1e:c1:30:cd:cb:8c:9f:aa:59:cb:de:45:51:3c:fa:ee:8f:
fa:3c:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:41:21 2025 by rpki-client