Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/E42D85E2F1CA11EFB62D3031C4F9AE02.roa
File: E42D85E2F1CA11EFB62D3031C4F9AE02.roa (raw, json)
Hash identifier: dGRW5QcfAaiPHf4JiM+cDPozOhYf8XOzClTTBWh7otw=
Subject key identifier: 0A:51:7C:DB:9F:55:00:FB:74:F2:44:2B:8D:1D:C0:6E:5E:D9:4C:07
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 2A
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/E42D85E2F1CA11EFB62D3031C4F9AE02.roa
Signing time: Sun 23 Feb 2025 09:45:19 +0000
ROA not before: Sun 23 Feb 2025 09:45:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149994
IP address blocks: 163.61.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 16:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Feb 23 09:45:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67baee2e-bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:4f:5f:c8:c4:8f:bc:27:b9:aa:9e:4b:39:
a4:f8:cb:6b:4d:3b:60:8e:5d:5f:59:35:55:2b:0a:
0b:79:e1:47:8f:ae:41:0d:a2:31:3d:71:78:2a:27:
9b:30:c5:c7:01:91:36:40:df:cc:8b:72:eb:90:ce:
f2:60:4d:b7:0d:8c:88:67:cd:2f:92:ca:cf:e3:e9:
c8:11:b8:cc:43:66:c2:78:f2:03:47:58:f1:70:8f:
d7:a7:46:db:f3:b8:c5:bb:a0:99:9a:11:bb:1c:04:
79:98:44:19:4f:58:d2:68:56:9c:be:d2:0d:4e:7c:
c1:0f:db:80:a0:1e:11:c2:37:78:07:43:31:f3:3a:
17:7a:30:8c:32:8f:f9:a4:98:ff:28:c0:50:54:88:
14:e8:79:ec:58:d7:69:df:f7:47:e7:4e:56:22:bf:
b5:8c:cb:55:a0:62:b6:09:e2:7a:27:9d:54:5b:72:
49:16:7f:8e:88:50:43:cf:b0:5c:a7:ad:88:15:b9:
bb:a1:dd:5b:5a:dd:bf:2b:14:69:bc:1f:c5:60:72:
be:13:97:8e:d5:9d:d4:7f:50:c8:1f:be:90:7c:3f:
cf:72:81:45:56:ec:bf:68:1a:fc:06:17:9c:46:30:
18:eb:6a:9a:27:30:2b:9f:65:ad:b2:32:10:ab:c6:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:7C:DB:9F:55:00:FB:74:F2:44:2B:8D:1D:C0:6E:5E:D9:4C:07
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/E42D85E2F1CA11EFB62D3031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.17.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:71:52:80:26:fb:6e:f4:a9:d5:5a:63:21:5d:a4:b2:6d:ae:
78:0f:ed:04:77:45:c3:8c:62:e9:38:97:9a:c0:c7:ae:3c:f0:
27:40:4e:76:8b:d6:e7:a1:8a:61:19:25:8d:30:05:6e:aa:7f:
d9:f3:e9:5c:df:cf:09:42:57:e6:f7:6b:c7:c7:4e:75:9c:2c:
67:af:13:88:e2:ab:75:73:29:04:14:81:89:63:61:23:e2:c0:
cf:50:f9:ff:60:50:a0:ae:4b:89:ff:1b:09:a0:81:06:9f:d1:
cd:93:04:9a:ec:59:76:bc:e6:6f:b6:89:9d:a9:38:a4:fe:33:
a7:10:b6:07:2a:12:6e:eb:3d:01:d9:7c:43:7f:77:d8:1e:c9:
26:bd:81:31:d8:ff:2b:ed:fc:83:2e:d2:b7:d8:c1:c0:b4:c4:
3f:34:9e:05:5d:29:5f:96:fa:44:76:33:7c:34:a4:19:f3:e0:
6b:9d:34:d4:16:53:65:77:04:da:75:38:e5:02:8c:ce:69:2a:
ad:43:5e:61:5e:2b:f8:83:c9:7b:5e:3d:9a:b4:bc:96:c2:22:
99:31:25:b2:cb:66:cc:56:98:56:8f:81:ef:77:84:17:33:3b:
73:4e:1a:1d:31:8c:0b:89:91:b8:19:3f:ba:22:31:c7:ff:91:
df:de:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:52:18 2025 by rpki-client