Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/B14C121C20E911F08F444270C4F9AE02.roa
File: B14C121C20E911F08F444270C4F9AE02.roa (raw, json)
Hash identifier: zMzB/Ee0wIzy21nwKJOyZ0vnh3VYiC29tunikSOqupY=
Subject key identifier: 77:57:78:00:5A:8E:A1:12:E2:6A:2A:89:CE:25:B2:54:30:64:C2:ED
Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial: 38
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/B14C121C20E911F08F444270C4F9AE02.roa
Signing time: Thu 24 Apr 2025 08:54:12 +0000
ROA not before: Thu 24 Apr 2025 08:54:12 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153581
IP address blocks: 163.61.96.0/24 maxlen: 24
2001:df5:11c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Apr 2025 10:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Validity
Not Before: Apr 24 08:54:12 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6809fc34-7c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:f5:bb:bb:1c:1d:d5:ab:79:2a:7e:dd:ec:
2a:86:59:b8:a0:df:2d:87:3b:a9:41:f6:b1:08:1e:
47:34:bb:8c:82:3c:09:34:29:0a:84:74:e3:dc:b8:
5c:61:b5:0b:de:e5:23:cd:a5:51:78:9c:53:3e:76:
3d:7c:63:2b:0e:55:77:39:89:2f:73:fe:9d:a6:35:
30:1b:be:ae:af:22:66:e0:41:ee:5c:73:69:3a:43:
29:ee:b1:85:2e:f7:64:17:fb:b1:0e:f7:09:cd:6b:
dd:71:d8:8d:70:de:24:9e:fc:7f:d2:89:11:f9:78:
62:b6:36:b1:73:eb:f1:3e:50:01:d0:42:52:3a:15:
f9:e7:c1:aa:91:17:eb:c7:7e:0e:2d:8d:4e:87:a2:
d6:34:ea:69:4c:83:b3:2b:56:87:90:f8:f6:9a:b4:
91:3c:26:e5:ae:a4:ad:6f:bf:48:3a:46:e2:1e:ee:
1a:70:6c:4d:d9:e3:21:a0:13:43:d9:22:66:56:28:
f5:6a:44:e8:69:8d:b5:1d:a1:6a:d5:10:d8:2a:ae:
7f:27:f0:13:35:72:20:71:f5:53:b4:87:c5:77:52:
e9:45:9c:a8:65:6f:a8:03:52:0a:0f:0e:c6:b9:15:
2e:53:8e:a2:18:66:06:cc:62:72:a8:81:4f:83:0c:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:57:78:00:5A:8E:A1:12:E2:6A:2A:89:CE:25:B2:54:30:64:C2:ED
X509v3 Authority Key Identifier:
keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/B14C121C20E911F08F444270C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.96.0/24
IPv6:
2001:df5:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:b8:a3:69:21:26:41:c9:03:21:f5:4c:d9:58:6b:b5:b4:75:
a3:5e:ba:ac:ce:85:aa:9c:fc:c3:1d:bb:ce:df:31:07:9c:e8:
6d:8d:2d:c9:a8:4f:f5:7b:22:cb:14:5a:0c:4f:e4:c9:e1:af:
91:83:26:c9:3e:2a:ae:b3:72:a0:b3:a5:b2:84:d3:ef:2e:ce:
cc:36:13:3b:c3:f1:ae:1a:3a:40:b9:b3:17:f6:0d:55:4f:95:
53:34:10:35:eb:25:b4:dd:d6:3d:a3:4a:3b:0a:15:fd:14:ae:
7d:38:ca:38:3b:f1:1a:70:b1:74:e0:dc:66:28:5d:ca:80:24:
72:3e:f7:71:fb:1f:f2:f3:22:7f:31:66:ef:9c:2d:66:64:50:
2b:1b:68:8b:b3:dc:42:f7:d8:41:9d:dc:e0:0d:31:17:ec:41:
7c:ef:d4:ef:0b:e3:79:ee:be:49:d0:a7:f3:1b:a6:f4:ac:26:
4f:d9:d1:53:1b:fd:96:13:79:db:82:99:ea:a5:66:a7:b8:e2:
60:24:11:d2:89:0e:9b:28:5e:36:1e:89:76:4f:d8:dc:a1:9e:
91:16:6e:b3:16:10:64:ad:92:7e:13:75:7d:67:2e:a6:55:58:
12:6f:e3:10:96:6b:77:64:55:70:82:c0:f4:d1:bc:ef:ec:32:
cd:f7:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:33:29 2025 by rpki-client