Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/B7C027BE16B211F0A41EDB68C4F9AE02.roa
File: B7C027BE16B211F0A41EDB68C4F9AE02.roa (raw, json)
Hash identifier: b2kQr62Wl8+QBZrrVMJO0VLEsEFGbz4YJyFArAwtX98=
Subject key identifier: 5D:DA:32:1C:C2:5B:35:34:E5:54:9B:5D:F7:CB:4A:F6:6D:CE:46:D0
Certificate issuer: /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial: 8E
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/B7C027BE16B211F0A41EDB68C4F9AE02.roa
Signing time: Fri 11 Apr 2025 08:55:29 +0000
ROA not before: Fri 11 Apr 2025 08:55:29 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136501
IP address blocks: 163.223.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 08:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Validity
Not Before: Apr 11 08:55:29 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67f8d901-4c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:a7:2c:8d:02:fe:7e:f5:43:46:7b:fa:3a:
4e:9e:76:63:9e:1c:de:01:45:e7:1b:22:59:1a:e3:
ff:ce:ef:88:b1:4c:0d:8c:2c:34:2d:50:3b:31:e3:
d6:ed:bc:80:56:30:92:21:31:bc:b1:8d:26:a0:ac:
4c:1a:0a:48:26:7e:33:c4:16:53:e3:a4:b9:4e:a2:
a7:15:91:37:37:4b:68:71:30:d1:5c:d1:1e:ac:14:
67:38:d7:fc:40:76:4d:79:61:56:ad:ba:14:38:9c:
28:1d:1e:40:9e:5d:58:f9:d9:90:d3:d9:75:be:de:
20:9d:a8:aa:a7:6e:13:46:35:ef:dd:c9:a0:d0:69:
d0:8e:88:dd:8e:c7:d4:36:d0:14:9e:20:65:8a:49:
ca:2f:ae:44:df:e7:f8:04:de:76:96:ee:27:c6:da:
bc:ab:0a:d2:90:f5:a1:31:5b:ea:1a:b1:86:58:d6:
76:e0:60:b4:3e:97:31:38:95:d5:d6:8f:f5:30:e5:
c9:c8:ce:9c:15:f1:fd:eb:2a:0b:13:ce:73:fe:0b:
61:95:c3:9f:7a:63:fc:a2:77:86:8c:fe:cf:b7:c2:
45:a3:b0:a4:aa:7a:61:9d:f9:3e:62:3f:3c:8a:7e:
83:b0:28:4f:57:61:40:25:a3:20:08:21:10:34:6f:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DA:32:1C:C2:5B:35:34:E5:54:9B:5D:F7:CB:4A:F6:6D:CE:46:D0
X509v3 Authority Key Identifier:
keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/B7C027BE16B211F0A41EDB68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
48:96:fc:1d:4e:8b:62:f5:6e:a6:eb:2c:df:0b:b8:e7:d2:df:
c5:b2:51:e6:c3:e6:59:18:92:3d:fb:e6:ca:e6:eb:c5:b7:27:
97:4c:ca:c7:54:38:ef:5b:b2:77:a5:38:b2:51:76:1c:59:27:
88:1f:0d:1c:b1:1a:c0:fc:18:16:8f:8a:d9:8b:c9:64:a9:00:
ee:c4:32:00:4a:ce:e2:15:da:c2:1c:3b:8a:76:f3:9a:76:23:
8a:4e:28:e2:df:36:94:10:b0:29:33:0c:7f:07:6c:41:e0:58:
f7:60:ee:9b:22:e0:0d:2a:9e:c4:dd:b1:43:e5:70:73:3c:17:
66:ea:63:69:59:b1:b6:30:ee:b6:f9:a4:17:ca:2d:5a:86:be:
3b:09:6d:72:19:df:98:bc:db:5f:57:94:14:d9:9d:52:ce:96:
ba:ac:46:1d:ac:a7:cf:f8:18:1b:4b:9a:64:e4:9f:6c:63:5a:
1a:a7:18:4f:da:81:4c:73:bc:63:2c:a9:16:48:f2:dd:c6:10:
58:5f:b2:71:f7:e9:6d:0e:85:a7:f7:74:86:97:17:30:17:e3:
29:f1:53:e1:e5:e2:3d:45:86:8a:6e:eb:09:7d:fd:0f:33:08:
c3:a7:bf:df:cb:e3:71:29:d6:eb:fc:75:d3:a5:ae:f4:5f:d1:
84:c6:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:02:25 2025 by rpki-client