Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa
File: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (raw, json)
Hash identifier: eekCcNL2GD6L8hN3yk9y/eRqjiZJZJ3UmuvXkfvuJoA=
Subject key identifier: E7:FF:95:E1:5C:5C:DA:CE:76:09:A6:AC:5F:89:17:FE:8A:8E:3D:BC
Certificate issuer: /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Certificate serial: 6F1C418CED26D2287B9EF749869C6115FA5A223A
Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa
Signing time: Wed 04 Jun 2025 05:27:24 +0000
ROA not before: Wed 04 Jun 2025 05:22:24 +0000
ROA not after: Wed 03 Jun 2026 05:27:24 +0000
asID: 24381
IP address blocks: 2401:2060:b001::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Jun 2025 16:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1c:41:8c:ed:26:d2:28:7b:9e:f7:49:86:9c:61:15:fa:5a:22:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Validity
Not Before: Jun 4 05:22:24 2025 GMT
Not After : Jun 3 05:27:24 2026 GMT
Subject: CN=E7FF95E15C5CDACE7609A6AC5F8917FE8A8E3DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:c2:f5:e0:5d:9b:b8:53:24:73:d4:e9:e7:
09:b5:0c:f1:6a:3f:27:5d:13:1a:0c:08:17:06:c7:
15:73:59:3a:ee:70:94:e9:86:d9:f9:b0:45:c5:9b:
0d:87:a6:9f:7a:fc:58:56:37:66:12:34:78:45:f5:
b0:f6:02:b7:e6:2e:35:55:02:22:73:2c:02:21:35:
c2:a8:08:67:86:42:33:59:1f:a4:94:c7:f4:26:04:
9b:a0:5b:a4:98:03:9a:43:e2:6f:40:84:62:da:7d:
15:de:32:56:0a:cb:59:55:54:08:8a:ae:3b:e6:e0:
36:43:b0:99:ad:c7:07:a6:7b:5f:05:d5:3e:f0:c1:
ba:fc:f6:5d:11:e6:e2:91:db:ad:31:52:b6:e9:73:
bf:bc:bc:1b:e6:98:93:5e:31:f4:bc:3a:a7:01:0b:
ba:00:8d:fa:71:33:82:44:d7:bc:46:fc:a4:d2:e7:
c0:c6:c1:5f:d3:3d:20:c9:d8:a4:f0:0c:82:e8:ab:
75:de:83:c2:fa:21:08:8e:23:ef:a7:49:e5:58:15:
cf:d9:53:6d:52:f2:ec:9b:a2:42:e3:65:e8:8f:0e:
c0:f0:63:bb:2a:56:fe:56:06:cb:57:15:05:3c:91:
8b:0d:de:cf:47:39:84:9c:ea:c3:59:85:d2:bb:07:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FF:95:E1:5C:5C:DA:CE:76:09:A6:AC:5F:89:17:FE:8A:8E:3D:BC
X509v3 Authority Key Identifier:
keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:b001::/48
Signature Algorithm: sha256WithRSAEncryption
c1:cc:bf:34:0c:e2:ce:0a:ca:07:50:ce:93:b8:33:77:56:0f:
9d:f0:d0:c1:7e:77:1b:65:af:4e:3b:7a:0f:d5:a7:f7:d8:61:
3f:50:f2:69:69:97:90:08:df:76:34:4e:2f:ec:0f:1a:09:79:
6b:0b:de:e4:92:76:56:21:9c:bf:33:88:40:82:fa:4d:33:ba:
f9:f2:8e:a0:1b:61:51:ee:19:5e:12:23:53:29:5c:a3:40:4d:
c0:34:b1:96:af:03:34:7f:d0:97:65:fb:16:42:b2:1c:e4:80:
ca:9b:14:f3:9c:d2:f9:71:4b:bc:51:be:d0:8d:19:3b:e3:32:
d4:f0:c4:85:b0:7d:5a:c7:cb:2b:5a:28:5c:95:02:99:85:92:
47:ef:09:73:04:19:ba:d2:bd:89:e1:6b:db:6b:e5:3d:53:2f:
af:11:eb:48:19:b0:18:ed:9f:d9:5a:4e:94:13:b6:2c:8b:f4:
1d:52:7e:79:ea:8c:df:c0:3c:c7:40:57:c2:7c:61:0e:3a:bf:
87:63:08:a0:83:5c:c4:04:83:04:ff:db:82:46:95:21:67:79:
44:b5:ee:0c:0b:fa:3e:a0:85:ac:cf:5a:ea:a6:e0:f9:90:19:
9e:52:a7:e0:4f:fa:0c:b9:03:7c:77:06:5b:9e:f5:90:92:5d:
da:83:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:57:03 2025 by rpki-client