Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/A820DC30D29811EFBEF3795BC4F9AE02.roa
File: A820DC30D29811EFBEF3795BC4F9AE02.roa (raw, json)
Hash identifier: 43KJEtvV4hfXvCmybyTUtWVgtTE0vpH8H17YgxHvO3E=
Subject key identifier: 41:75:91:E8:C5:9C:91:35:FB:89:B2:6B:09:6D:64:D7:6B:C1:B3:CF
Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial: 0C
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/A820DC30D29811EFBEF3795BC4F9AE02.roa
Signing time: Tue 14 Jan 2025 16:57:37 +0000
ROA not before: Tue 14 Jan 2025 16:57:37 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 21859
IP address blocks: 161.248.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 07:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Validity
Not Before: Jan 14 16:57:37 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67869781-2421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:e9:e5:14:e1:c0:96:6b:f1:e8:13:82:93:
7a:ce:8c:5a:6b:04:74:72:42:d1:e6:c4:60:3d:33:
99:10:b1:93:18:dc:f0:6e:d5:5e:1a:5b:76:9c:70:
3b:2e:fe:89:2a:78:73:e1:01:d5:af:79:52:40:65:
24:54:de:ff:17:03:fd:f7:5b:dd:a2:cf:cc:68:0d:
13:7e:33:b1:2e:2a:38:eb:86:e1:94:9a:82:c2:fe:
ce:90:87:f8:33:77:05:58:3d:b8:9b:b4:3a:a7:5c:
d1:43:7b:2c:fb:7a:b2:16:34:f5:7a:29:24:df:4f:
e4:4b:a5:2e:c5:64:d6:c6:0f:00:ac:af:2e:61:f6:
26:9a:4c:2e:76:96:5e:8c:fc:71:36:df:a5:8c:a3:
e4:70:b9:0a:4d:87:c9:5a:b7:ed:6b:07:5b:8b:2a:
15:92:4e:93:26:65:1d:af:dd:9d:e0:e0:a2:4f:e8:
c3:a0:65:49:01:30:78:6f:37:e9:3d:47:04:94:bb:
2b:9e:93:37:dc:1a:dd:7f:b4:31:5c:25:23:4f:f7:
2a:9e:cc:9f:42:21:30:3e:ca:e5:41:22:d8:39:49:
ea:be:fe:87:6d:1b:03:0f:59:d9:76:33:ff:69:4e:
bc:fb:33:7a:9e:cc:c2:b8:7f:92:b6:ac:12:d4:85:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:75:91:E8:C5:9C:91:35:FB:89:B2:6B:09:6D:64:D7:6B:C1:B3:CF
X509v3 Authority Key Identifier:
keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/A820DC30D29811EFBEF3795BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d5:ce:a0:d1:6e:95:ac:e4:47:4e:c6:f3:2d:1f:a7:af:7e:
13:c6:67:7c:22:e2:44:27:80:56:1e:f4:df:4a:a5:f3:45:c1:
a8:71:67:0e:c9:a0:06:c6:45:bd:65:47:45:d0:9d:e8:6b:5a:
6a:72:83:33:f1:bb:73:3f:cd:f3:8c:07:3c:ef:de:e0:34:40:
cc:3b:85:cf:61:d6:33:8c:0d:a3:15:1e:8e:13:58:78:d3:f1:
ea:76:60:6c:c1:d6:d5:f7:d7:75:91:12:ab:0d:17:dd:65:4f:
9f:ce:29:c3:e0:e9:2c:a2:ae:e5:74:34:55:3c:4c:d0:86:96:
1e:5e:b5:e1:70:0b:3c:79:ab:8b:03:47:67:ff:6c:e3:de:52:
2f:33:d3:9e:ed:3b:4c:63:a8:14:e0:e4:18:c6:6c:22:e5:0e:
5d:2e:cb:be:e9:e4:7f:dd:15:a6:65:99:2a:3c:45:db:e7:9d:
fa:6c:30:0c:90:37:43:bd:25:49:36:99:8c:41:5f:6b:6b:83:
3b:0f:5d:7d:5a:8e:6a:3e:3b:46:f3:b3:45:bb:8c:93:d2:6f:
07:cd:4c:74:7a:eb:7f:f3:0b:19:c6:a5:42:e0:de:d2:ce:6c:
63:27:5b:8e:a3:87:ee:7c:15:7c:9a:6b:8a:23:58:9d:4a:91:
5e:62:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:16 2025 by rpki-client