Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/81583B8C003A11F08618671EC4F9AE02.roa
File: 81583B8C003A11F08618671EC4F9AE02.roa (raw, json)
Hash identifier: faEvm3O8sfTMaVUO7PWgBHkUuOEP/B9JK+y1G6Kwk7o=
Subject key identifier: 5E:58:FD:4F:F6:35:7D:DE:E7:EF:F2:ED:3B:C7:C5:42:8C:B9:3C:2E
Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial: 08
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/81583B8C003A11F08618671EC4F9AE02.roa
Signing time: Thu 13 Mar 2025 18:39:33 +0000
ROA not before: Thu 13 Mar 2025 18:39:33 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 138590
IP address blocks: 160.191.208.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Mar 2025 19:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Validity
Not Before: Mar 13 18:39:33 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67d32664-cb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:4b:0c:92:8b:f7:a6:70:60:8a:5e:3e:94:
12:05:cd:bf:72:29:98:16:77:f2:c7:af:48:29:54:
54:1a:ce:5c:c4:40:86:f8:cd:9d:5a:2e:52:dd:93:
94:bc:99:63:df:74:b2:42:36:c6:b1:b8:7b:68:25:
73:dc:3d:75:ca:75:ec:98:06:e6:ac:a1:4c:b1:34:
21:66:41:fe:29:d1:a6:1b:b1:68:15:01:35:b8:20:
94:bf:38:35:db:6b:7e:a9:aa:67:34:df:58:84:3e:
e8:25:7c:e0:5d:f3:63:2f:9c:ec:5d:2a:31:b7:92:
73:1c:e0:38:8c:f5:b1:49:ef:1b:28:e4:90:0e:da:
e6:48:17:1c:2c:42:5e:b2:32:35:4b:a5:ff:56:a0:
db:1a:90:90:86:94:9d:3d:f8:e6:1b:b1:b8:ab:8e:
d8:2d:2f:d9:f4:e5:ee:22:c5:1b:1a:6b:26:22:5d:
9c:6c:e3:1c:11:7e:8c:77:ed:5a:84:bd:a6:64:af:
fa:32:a8:43:c2:88:46:5a:45:c4:de:98:15:d9:ef:
eb:d9:8e:ff:88:21:ed:c2:64:c5:1a:7d:47:fb:65:
66:6b:a9:1d:95:cd:e1:02:1a:7c:c1:7e:04:4e:7d:
d5:e6:92:14:8f:53:7c:8b:f4:fc:b5:40:9a:77:f2:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:FD:4F:F6:35:7D:DE:E7:EF:F2:ED:3B:C7:C5:42:8C:B9:3C:2E
X509v3 Authority Key Identifier:
keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/81583B8C003A11F08618671EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.208.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:77:49:64:68:47:df:a7:4d:a5:76:a1:38:73:98:92:8a:08:
af:79:27:d8:24:17:2f:da:8a:4c:16:03:99:4b:7a:8d:6f:7d:
a6:5b:59:39:c8:08:a9:62:13:d6:39:b8:5b:e4:cf:d3:cd:20:
3f:ea:fd:ae:13:81:ab:68:3d:6b:45:97:0d:44:c4:cd:43:3c:
19:09:55:af:f2:26:67:fe:59:f5:6d:a5:6d:74:42:46:67:76:
c2:cc:8b:4f:a1:b8:77:46:ba:ca:d8:7c:d7:db:44:ad:1a:04:
39:38:1b:38:6f:28:4f:35:0d:ee:60:0e:fc:c7:8a:8b:7c:d6:
b6:8d:c7:68:05:c0:34:38:34:74:a2:de:11:04:c6:e6:07:85:
48:d3:12:5d:3b:e7:ef:10:4f:7f:4a:d0:b2:71:2c:15:40:bd:
9e:e9:33:79:52:9d:20:bc:0c:b5:56:50:e7:e8:f6:36:c4:6f:
fd:af:e0:b2:3c:99:2f:6d:9f:3b:c4:43:a9:37:8e:ff:54:fb:
c1:48:0f:6e:b3:24:fc:a5:28:68:81:38:06:a3:31:59:31:5e:
e5:48:2b:cc:29:2c:6a:9b:ad:21:59:fe:51:79:09:87:bc:83:
7f:16:07:1b:ce:7b:3e:53:d4:77:e3:97:0a:dd:dd:1d:c3:6a:
fe:ff:e4:5c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
MTQ2RDExMC8GA1UEBRMoNjY0RTU5QTAwMEI5MUU3MkY4MDNFNkQ4Njg0MTE1NEM4
MDU2Qjg4QTAeFw0yNTAzMTMxODM5MzNaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZDMyNjY0LWNiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCshEsMkov3pnBgil4+lBIFzb9yKZgWd/LHr0gpVFQazlzEQIb4zZ1aLlLdk5S8
mWPfdLJCNsaxuHtoJXPcPXXKdeyYBuasoUyxNCFmQf4p0aYbsWgVATW4IJS/ODXb
a36pqmc031iEPuglfOBd82MvnOxdKjG3knMc4DiM9bFJ7xso5JAO2uZIFxwsQl6y
MjVLpf9WoNsakJCGlJ09+OYbsbirjtgtL9n05e4ixRsaayYiXZxs4xwRfox37VqE
vaZkr/oyqEPCiEZaRcTemBXZ7+vZjv+IIe3CZMUafUf7ZWZrqR2VzeECGnzBfgRO
fdXmkhSPU3yL9Py1QJp38hJ7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXlj9T/Y1
fd7n7/LtO8fFQoy5PC4wHwYDVR0jBBgwFoAUZk5ZoAC5HnL4A+bYaEEVTIBWuIow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNDZEL0VDQjAwQjQyMDAz
NzExRjBCQkQ3MjQ3NUM0RjlBRTAyL1prNVpvQUM1SG5MNEEtYllhRUVWVElCV3VJ
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWms1Wm9BQzVIbkw0QS1iWWFFRVZUSUJXdUlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTQ2RC9FQ0IwMEI0MjAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi84MTU4M0I4QzAw
M0ExMUYwODYxODY3MUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaC/0DANBgkqhkiG9w0BAQsFAAOCAQEAbXdJZGhH36dNpXah
OHOYkooIr3kn2CQXL9qKTBYDmUt6jW99pltZOcgIqWIT1jm4W+TP080gP+r9rhOB
q2g9a0WXDUTEzUM8GQlVr/ImZ/5Z9W2lbXRCRmd2wsyLT6G4d0a6yth819tErRoE
OTgbOG8oTzUN7mAO/MeKi3zWto3HaAXANDg0dKLeEQTG5geFSNMSXTvn7xBPf0rQ
snEsFUC9nukzeVKdILwMtVZQ5+j2NsRv/a/gsjyZL22fO8RDqTeO/1T7wUgPbrMk
/KUoaIE4BqMxWTFe5UgrzCksaputIVn+UXkJh7yDfxYHG857PlPUd+OXCt3dHcNq
/v/kXA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:03 2025 by rpki-client