Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/7576969EE9DB11EFA683C023C4F9AE02.roa
File: 7576969EE9DB11EFA683C023C4F9AE02.roa (raw, json)
Hash identifier: 6iy4MwoLf0QHiec5n+z8b9LOtMrSJ5leReqEM55vUS4=
Subject key identifier: 53:D4:64:D9:B1:26:1D:2F:E3:3D:99:41:84:70:5B:14:EE:74:9C:D0
Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Certificate serial: 7D
Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/7576969EE9DB11EFA683C023C4F9AE02.roa
Signing time: Thu 13 Feb 2025 07:23:45 +0000
ROA not before: Thu 13 Feb 2025 07:23:45 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 152912
IP address blocks: 160.22.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 06:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Validity
Not Before: Feb 13 07:23:45 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67ad9e01-ba26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:67:a8:93:8f:91:7f:3c:51:75:81:3a:05:
d5:65:d2:9a:d7:9a:c3:79:ee:87:58:66:5f:8b:ed:
8e:bf:3e:b7:79:f4:df:bc:4d:88:8b:d9:51:f6:43:
65:c6:07:5f:10:f8:52:bf:e8:fb:96:0d:65:49:bd:
fc:51:c3:c4:7b:3c:70:3a:5a:9c:42:05:8b:7e:d7:
5b:d8:72:4a:eb:42:7b:11:a3:40:cb:c2:6f:14:a1:
2c:80:77:17:cc:e2:e5:eb:92:8f:cd:78:2e:cc:aa:
66:e4:1b:2a:73:15:14:1e:5f:9d:d8:66:08:c0:48:
58:ac:a3:18:cc:34:e8:f6:2c:a0:6b:b0:ec:dc:36:
ac:ae:b4:ed:8a:f4:e8:58:02:57:f1:ed:eb:35:b6:
de:64:1e:f8:02:21:85:84:f0:3e:20:56:09:66:22:
36:ac:4a:8a:be:0c:c7:77:cc:08:e0:1a:17:83:ff:
af:bf:42:25:88:92:64:1d:4a:c7:b1:e3:8d:dc:a1:
d0:00:8d:c4:ec:89:45:62:a9:bb:dc:ca:9b:7d:dc:
af:b1:7e:f7:39:85:57:2b:fc:a4:ce:ac:b8:5d:04:
57:8b:9f:53:76:fc:a3:7f:81:04:69:84:45:f5:6b:
10:0c:4c:f3:30:6e:c5:44:8e:23:32:1f:06:92:5d:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D4:64:D9:B1:26:1D:2F:E3:3D:99:41:84:70:5B:14:EE:74:9C:D0
X509v3 Authority Key Identifier:
keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/7576969EE9DB11EFA683C023C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.141.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d3:c9:d6:d5:ec:62:37:0c:f6:1a:9e:62:ae:47:77:bc:38:
de:3f:b0:78:76:c3:87:fe:11:4e:52:02:a2:5e:fc:59:cf:26:
a1:18:c6:09:3b:a8:a5:94:85:f0:72:4f:b0:69:66:d5:b7:c4:
a5:a2:11:00:8d:77:d7:36:92:53:8e:be:ed:ce:4b:b7:e2:3a:
73:a1:56:1d:97:ce:fa:b4:4b:10:be:30:ef:94:c8:1f:6c:4e:
0e:81:c5:73:a4:36:42:ba:5d:98:b7:4b:05:ad:84:cc:59:40:
2f:af:06:41:f8:27:05:f5:3d:ed:91:b9:86:55:4f:c3:fd:5d:
c8:69:ff:48:ee:c2:49:70:ad:74:52:c6:1c:f7:89:45:19:4b:
c1:3f:06:f9:b1:22:12:d3:87:55:4e:9a:5f:17:0c:3d:0e:97:
c0:d3:ed:59:ca:f0:37:6b:01:17:50:57:49:68:5b:ee:3a:5a:
70:bb:fd:c6:fa:ac:d2:17:f0:09:5e:8a:01:cb:f5:b6:68:99:
1d:3b:ff:49:8e:32:ec:be:9d:c0:d5:86:68:43:e8:67:d8:4a:
77:8d:d5:86:a1:4b:ac:48:e2:a6:f6:4e:30:95:13:b6:d6:47:
7d:2c:8b:8a:b9:cf:76:6e:bb:37:73:9b:a4:22:fe:3d:7b:1b:
49:39:13:a7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjBDRjExMC8GA1UEBRMoMDQ3NEY0MDZBMTc4RDIyQzU0RDVFRjcyNEM2QjJDMkM5
QTNCNkI5ODAeFw0yNTAyMTMwNzIzNDVaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3YWQ5ZTAxLWJhMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE/Geok4+RfzxRdYE6BdVl0prXmsN57odYZl+L7Y6/Prd59N+8TYiL2VH2Q2XG
B18Q+FK/6PuWDWVJvfxRw8R7PHA6WpxCBYt+11vYckrrQnsRo0DLwm8UoSyAdxfM
4uXrko/NeC7MqmbkGypzFRQeX53YZgjASFisoxjMNOj2LKBrsOzcNqyutO2K9OhY
Alfx7es1tt5kHvgCIYWE8D4gVglmIjasSoq+DMd3zAjgGheD/6+/QiWIkmQdSsex
443codAAjcTsiUViqbvcypt93K+xfvc5hVcr/KTOrLhdBFeLn1N2/KN/gQRphEX1
axAMTPMwbsVEjiMyHwaSXZPRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUU9Rk2bEm
HS/jPZlBhHBbFO50nNAwHwYDVR0jBBgwFoAUBHT0BqF40ixU1e9yTGssLJo7a5gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2MENGL0U1MzYwOEYwMkFG
QzExRUZBMDI0M0M0QUM0RjlBRTAyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQkhUMEJxRjQwaXhVMWU5eVRHc3NMSm83YTVnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi83NTc2OTY5RUU5
REIxMUVGQTY4M0MwMjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAWjTANBgkqhkiG9w0BAQsFAAOCAQEAc9PJ1tXsYjcM9hqe
Yq5Hd7w43j+weHbDh/4RTlICol78Wc8moRjGCTuopZSF8HJPsGlm1bfEpaIRAI13
1zaSU46+7c5Lt+I6c6FWHZfO+rRLEL4w75TIH2xODoHFc6Q2QrpdmLdLBa2EzFlA
L68GQfgnBfU97ZG5hlVPw/1dyGn/SO7CSXCtdFLGHPeJRRlLwT8G+bEiEtOHVU6a
XxcMPQ6XwNPtWcrwN2sBF1BXSWhb7jpacLv9xvqs0hfwCV6KAcv1tmiZHTv/SY4y
7L6dwNWGaEPoZ9hKd43VhqFLrEjipvZOMJUTttZHfSyLirnPdm67N3ObpCL+PXsb
STkTpw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:40 2025 by rpki-client