Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/197BC0A0472611F092EBC744C4F9AE02.roa
File: 197BC0A0472611F092EBC744C4F9AE02.roa (raw, json)
Hash identifier: qe/i0XOit6l6sEKjqWDWBWZtWnIkcpUz5YVdQmGqjqs=
Subject key identifier: 05:95:0E:81:F4:9E:16:10:40:5D:BC:32:CF:91:04:DE:F7:CA:E6:3D
Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial: 08
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/197BC0A0472611F092EBC744C4F9AE02.roa
Signing time: Thu 12 Jun 2025 00:46:39 +0000
ROA not before: Thu 12 Jun 2025 00:46:39 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137474
IP address blocks: 160.250.212.0/23 maxlen: 23
160.250.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jun 2025 06:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Validity
Not Before: Jun 12 00:46:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=684a236f-e91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:e8:98:e3:2a:10:ba:f5:8f:b3:df:d3:c6:
8b:8a:d0:6a:6d:c2:11:7a:64:3b:51:f0:8d:ee:7b:
28:75:92:3e:b8:ef:63:4f:4e:b1:af:4f:ff:bc:1d:
9e:df:c1:d9:f1:99:be:0e:ae:9b:c4:81:46:52:72:
6b:17:5d:e6:fd:80:89:78:7e:1a:bc:99:9e:11:c4:
41:30:1b:1f:d7:41:51:0b:67:e9:aa:a2:13:3c:1d:
24:1f:f9:71:16:84:08:d0:7f:4b:4e:72:68:08:7f:
93:d6:b4:66:22:62:d8:d7:0b:ab:8b:56:5f:a5:e0:
e7:00:1e:32:ef:32:d7:86:de:a1:8c:ca:e5:9e:da:
06:5c:f2:eb:ed:df:5c:27:1f:0e:23:8e:ee:ec:3e:
ef:3e:69:ed:8a:f2:2a:82:27:99:69:9e:ad:38:38:
ea:a8:e2:26:31:51:00:cd:5d:07:08:92:66:a9:44:
6a:26:2f:4b:8e:1e:93:4e:4d:a4:95:15:3d:43:88:
27:c3:f6:c6:e5:81:ad:5e:cc:99:0b:5a:e3:30:e4:
01:72:c4:3b:5e:83:ab:a3:30:90:a0:2c:97:cc:c7:
90:f8:7f:01:59:51:5a:5a:69:68:44:d5:94:ac:31:
51:f0:ac:68:ad:31:6f:cb:43:12:55:be:d7:77:b5:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:0E:81:F4:9E:16:10:40:5D:BC:32:CF:91:04:DE:F7:CA:E6:3D
X509v3 Authority Key Identifier:
keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/197BC0A0472611F092EBC744C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.212.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:10:72:ad:cd:e6:ef:50:c1:00:48:01:b9:bd:26:58:fb:b9:
85:7c:c3:67:d4:26:15:21:43:72:af:96:31:8e:28:b3:91:98:
e5:b7:63:15:50:4e:6a:e5:ad:e9:d7:1c:6e:50:0f:e1:9b:28:
32:3d:ee:d2:6d:c6:98:98:f3:37:93:d0:24:5d:3c:4c:d1:85:
ef:0c:24:2b:9e:c3:cb:9d:45:f3:63:01:03:1e:fb:34:35:b0:
4d:c3:82:95:b2:42:0d:6a:56:67:fc:91:1f:60:9c:51:5a:51:
d5:f9:f6:3c:ee:5e:76:eb:65:bf:0c:93:d0:db:73:e8:32:25:
52:f5:d5:ab:c0:fb:a9:90:a8:d1:42:35:55:aa:e8:46:f4:9d:
f2:3c:8d:4c:58:57:9e:30:cc:19:e1:9d:b0:c7:82:9d:ea:87:
6d:df:e6:ee:53:2e:44:ca:fb:53:3e:0e:8b:ec:07:c2:82:c4:
1b:e1:e9:a2:16:47:7a:d8:91:92:18:7f:b2:d0:a3:b7:6f:0b:
15:c3:de:54:ff:a6:a7:6a:e4:28:d4:a2:2c:66:c1:56:aa:13:
53:f2:ad:ab:ae:2b:10:57:ee:6d:fe:69:21:3d:52:c6:5b:64:
2f:b9:ee:27:7a:10:33:18:92:73:77:fa:c2:52:58:60:82:1a:
93:c2:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:05:00 2025 by rpki-client