Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/9524483E202111F0B932530FC4F9AE02.roa
File: 9524483E202111F0B932530FC4F9AE02.roa (raw, json)
Hash identifier: pxHOZj5L41xUvNXN9qE3NRPYe8JQ5KwGtnan8KMZQWg=
Subject key identifier: 73:A4:39:1C:70:76:7C:FB:18:D6:82:D7:59:CE:9F:52:38:42:D7:86
Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial: 0E
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/9524483E202111F0B932530FC4F9AE02.roa
Signing time: Wed 23 Apr 2025 10:04:19 +0000
ROA not before: Wed 23 Apr 2025 10:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18024
IP address blocks: 163.227.28.0/23 maxlen: 23
163.227.28.0/24 maxlen: 24
163.227.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 10:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Validity
Not Before: Apr 23 10:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6808bb22-66e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:84:fb:6c:b1:23:66:b0:1a:eb:81:64:04:
a5:eb:3c:f1:db:1e:dc:19:29:34:c9:8e:8f:d0:3c:
f8:1a:6f:10:46:c9:7e:0a:f9:56:ae:d0:a5:76:d4:
36:e1:29:42:4c:18:ba:2e:5d:4f:9f:5f:34:c6:8e:
18:88:25:8f:22:8e:d4:4b:18:89:7d:86:b0:4e:40:
9e:ef:8a:75:c1:d3:bd:5b:ee:9c:6f:e3:27:05:4e:
d5:10:6c:b2:87:d9:9f:23:2e:cf:05:bd:1a:77:e8:
f8:7a:07:cc:27:75:9e:a4:33:12:c0:33:ae:7a:7f:
2d:f3:9f:be:dd:8a:13:0e:6f:58:b9:f8:df:95:b9:
20:73:9c:75:d2:e4:b5:66:4f:d4:f1:ff:25:9c:12:
95:81:43:00:60:75:18:38:a9:20:4f:e4:d5:d5:3c:
fa:19:31:4b:7c:e0:ac:1f:a1:83:3e:78:d0:93:40:
7c:96:61:17:09:d9:42:5f:db:c2:66:57:45:6e:81:
d1:f3:6b:26:f2:36:84:dc:d9:52:67:b3:c4:df:a8:
17:b5:5f:a7:de:db:96:20:59:fc:d4:86:e0:da:0f:
69:d8:6c:07:f4:b7:97:63:37:bf:49:a8:37:c6:cc:
92:86:91:47:8d:13:7a:07:a0:83:c2:1e:af:28:ce:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:39:1C:70:76:7C:FB:18:D6:82:D7:59:CE:9F:52:38:42:D7:86
X509v3 Authority Key Identifier:
keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/9524483E202111F0B932530FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.28.0/23
Signature Algorithm: sha256WithRSAEncryption
17:b4:ae:c9:e0:f8:1f:04:2c:b3:55:f8:be:61:de:e5:e3:7f:
58:10:5e:f4:b1:64:8d:a4:15:a4:b0:3a:08:a0:ee:9d:e4:31:
2b:ac:35:a6:30:17:30:1e:05:97:da:9e:1e:6a:87:4f:3d:56:
81:3d:5d:57:08:2f:68:33:c1:21:61:01:ed:37:22:cb:65:d0:
2b:d1:ac:41:f7:26:52:ce:fc:99:4c:8b:d2:77:24:49:65:6e:
25:7a:c5:ab:a0:2a:2f:eb:47:61:3a:b1:68:ff:c9:cc:7e:26:
f1:da:2d:42:18:de:56:80:41:cc:b2:3e:97:46:8d:f0:fd:00:
f6:d5:63:45:e4:32:18:0b:e7:46:94:70:6b:78:e2:d7:03:49:
c9:c5:bc:d6:d6:97:e2:6a:56:f9:96:ed:77:21:01:49:ad:62:
c1:82:bd:7b:5b:45:ff:cd:4b:04:06:0e:9c:75:6c:c7:57:27:
cf:9f:70:58:42:1e:53:c8:3f:b4:52:dc:b5:52:c5:0f:48:fb:
e5:b1:d3:7b:11:e7:28:e2:97:1a:a3:17:7d:61:49:f7:c8:7d:
01:1a:0b:a7:75:47:24:5d:45:12:51:ae:c5:cf:92:b8:5c:a1:
87:02:81:d1:10:7a:24:2f:eb:6c:f6:49:ba:86:b8:08:3b:5c:
a7:09:5e:28
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Q0QyMTExMC8GA1UEBRMoODE4QkI5MDMzMjcxN0Y5MzU3MzBEQUYxNDcwOEZGQzJG
NjA1RjA1RjAeFw0yNTA0MjMxMDA0MTlaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MDhiYjIyLTY2ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdyYT7bLEjZrAa64FkBKXrPPHbHtwZKTTJjo/QPPgabxBGyX4K+Vau0KV21Dbh
KUJMGLouXU+fXzTGjhiIJY8ijtRLGIl9hrBOQJ7vinXB071b7pxv4ycFTtUQbLKH
2Z8jLs8FvRp36Ph6B8wndZ6kMxLAM656fy3zn77dihMOb1i5+N+VuSBznHXS5LVm
T9Tx/yWcEpWBQwBgdRg4qSBP5NXVPPoZMUt84KwfoYM+eNCTQHyWYRcJ2UJf28Jm
V0VugdHzaybyNoTc2VJns8TfqBe1X6fe25YgWfzUhuDaD2nYbAf0t5djN79JqDfG
zJKGkUeNE3oHoIPCHq8ozjVVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUc6Q5HHB2
fPsY1oLXWc6fUjhC14YwHwYDVR0jBBgwFoAUgYu5AzJxf5NXMNrxRwj/wvYF8F8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRDIxLzM4QzI2MUU0MUMz
ODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ1l1NUF6SnhmNU5YTU5yeFJ3al93dllGOEY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0QyMS8zOEMyNjFFNDFDMzgxMUYwQUE4NTdEMjdDNEY5QUUwMi85NTI0NDgzRTIw
MjExMUYwQjkzMjUzMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaPjHDANBgkqhkiG9w0BAQsFAAOCAQEAF7SuyeD4HwQss1X4
vmHe5eN/WBBe9LFkjaQVpLA6CKDuneQxK6w1pjAXMB4Fl9qeHmqHTz1WgT1dVwgv
aDPBIWEB7Tciy2XQK9GsQfcmUs78mUyL0nckSWVuJXrFq6AqL+tHYTqxaP/JzH4m
8dotQhjeVoBBzLI+l0aN8P0A9tVjReQyGAvnRpRwa3ji1wNJycW81taX4mpW+Zbt
dyEBSa1iwYK9e1tF/81LBAYOnHVsx1cnz59wWEIeU8g/tFLctVLFD0j75bHTexHn
KOKXGqMXfWFJ98h9ARoLp3VHJF1FElGuxc+SuFyhhwKB0RB6JC/rbPZJuoa4CDtc
pwleKA==
-----END CERTIFICATE-----
Generated at Fri May 16 16:49:14 2025 by rpki-client