Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EB4418D0FF2311EF970BE545C4F9AE02.roa
File: EB4418D0FF2311EF970BE545C4F9AE02.roa (raw, json)
Hash identifier: SYwEq7LWo0J1FdGZ/OH9VGHoiAPWbxk38vufvNOpLyQ=
Subject key identifier: 50:64:46:CF:9E:2E:D9:F5:3B:CF:B2:E6:0A:06:A6:97:83:D2:3B:F3
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0562
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EB4418D0FF2311EF970BE545C4F9AE02.roa
Signing time: Wed 12 Mar 2025 09:25:21 +0000
ROA not before: Wed 12 Mar 2025 09:25:21 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153504
IP address blocks: 161.248.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Mar 2025 14:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Mar 12 09:25:21 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d15301-6559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:fb:7c:4f:72:5d:c9:62:d1:65:5d:99:10:
4d:8e:a2:63:8f:76:92:a2:11:ef:90:69:47:67:ba:
64:fa:4b:1a:a8:91:82:05:e9:4b:49:e2:68:66:8f:
52:de:01:be:8e:bf:3a:08:19:10:b1:52:7b:f5:6f:
93:85:6f:eb:90:22:cf:64:7e:9b:ca:01:ab:87:7c:
d4:87:bb:f0:da:98:2b:42:f9:35:38:26:01:17:82:
80:92:55:0e:b3:2a:bb:83:3e:9c:d2:41:bc:7d:8c:
e5:6a:5a:0d:83:a0:29:d9:f2:6b:89:39:2f:47:6c:
e3:0a:6a:cd:b7:b7:20:bc:18:90:77:d8:04:77:86:
6b:6b:b1:4e:4c:76:09:d2:bd:94:51:ff:60:17:39:
d5:60:14:32:8f:b6:46:24:fc:e2:7a:00:d1:fa:99:
20:f7:9c:be:df:3e:78:13:04:46:39:ee:96:1c:28:
97:f8:da:29:41:38:5c:c1:92:38:e2:0d:f2:02:23:
80:d8:76:08:fe:e7:8b:2e:8b:61:f1:72:5c:e0:46:
af:56:7a:16:72:7f:82:b7:ca:07:95:24:d4:8e:9a:
5d:b2:db:31:fd:e6:e1:34:9d:bc:16:66:a5:f2:c5:
43:e0:f3:f5:a3:1c:f5:47:2c:66:65:e3:80:87:b7:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:46:CF:9E:2E:D9:F5:3B:CF:B2:E6:0A:06:A6:97:83:D2:3B:F3
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EB4418D0FF2311EF970BE545C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.96.0/23
Signature Algorithm: sha256WithRSAEncryption
16:1f:44:9b:83:0c:9b:18:ab:f2:45:cf:11:2e:8b:55:1a:e5:
29:52:50:d6:4d:64:8b:f6:df:5e:79:f4:33:c9:8d:68:e9:e5:
fd:8a:33:dc:e2:85:8c:04:77:45:56:c7:15:76:90:67:10:bc:
68:d3:df:cb:9f:79:fc:86:3a:c5:2f:d4:9d:e9:2a:b7:cf:01:
3b:cf:80:12:a2:51:82:7f:61:c5:12:9b:3b:e3:04:18:31:c2:
eb:8b:29:c6:5e:c1:3d:bb:58:88:1f:80:3f:8a:22:da:fb:99:
3f:37:89:07:ba:c9:02:0e:dd:75:79:3c:9b:1e:dd:f5:05:b1:
2a:e5:db:ca:dd:37:50:58:8e:46:27:9c:f9:9d:8f:05:ec:5d:
b6:7c:09:b8:14:07:73:ce:2b:6d:1b:74:bd:4f:9c:01:cb:bf:
98:df:67:34:d4:cf:f9:63:f8:b8:97:92:bc:95:55:04:80:c6:
3d:49:8d:a8:99:2f:5e:8c:69:2c:df:63:73:c8:6c:fd:4c:51:
6d:af:94:14:1f:5f:16:bd:0e:f7:29:27:14:d6:a2:3f:8c:55:
41:90:6d:27:ce:47:dd:dc:73:b8:bc:3b:58:72:8b:10:42:be:
cf:71:af:f3:c6:a2:af:65:50:16:28:f5:ba:15:4b:b1:51:3d:
b6:23:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:17 2025 by rpki-client