Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/ED3E80DC068D11F084762D15C4F9AE02.roa
File: ED3E80DC068D11F084762D15C4F9AE02.roa (raw, json)
Hash identifier: jutbLXOkglT2Rwq96KMQpjKcAGyu9cjSxqQyTb8O5QA=
Subject key identifier: D2:8E:F9:F6:73:E4:C1:A6:FA:E3:E7:53:20:8D:C4:DD:D2:7B:6B:3E
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 12
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/ED3E80DC068D11F084762D15C4F9AE02.roa
Signing time: Fri 21 Mar 2025 19:53:29 +0000
ROA not before: Fri 21 Mar 2025 19:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215750
IP address blocks: 163.223.179.0/24 maxlen: 24
2401:f860::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 21 Mar 2025 20:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Mar 21 19:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ddc3b9-8340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:1e:9d:ba:15:40:aa:5a:bf:48:24:62:0d:
36:da:84:a0:78:de:79:30:14:26:47:6f:01:d5:20:
83:43:60:f8:da:3d:16:79:06:a3:a5:19:ca:49:c5:
00:45:00:3b:8e:33:9b:a9:aa:04:cf:75:4f:dc:b8:
03:67:55:92:65:fd:f1:0d:05:e7:5e:47:93:97:c3:
9d:8f:75:75:54:79:51:64:e6:2f:de:78:39:f6:30:
2c:87:f8:5b:3c:d0:34:80:cf:1e:26:65:32:bc:20:
2d:86:1d:8d:7d:ef:c1:d4:e5:c4:52:02:86:b3:63:
81:10:3c:46:e8:7e:59:da:4a:39:18:91:a5:e4:ee:
b9:5e:5f:ce:91:e7:16:53:2a:2b:6b:d7:dc:07:a6:
df:0c:3b:56:94:15:9f:70:e3:e8:55:74:f1:17:7a:
8e:00:9d:14:f6:5c:f9:93:8c:63:50:9a:ce:f4:d5:
21:a3:e9:61:b2:9b:45:80:7b:75:72:28:cd:86:5c:
21:1e:18:4c:bd:92:80:94:5a:f0:71:06:7d:3d:aa:
15:c1:0d:d6:55:1e:c8:8d:de:8a:1b:1a:d0:50:59:
7f:6e:71:e9:18:61:df:a0:5e:e7:e1:5f:39:ba:29:
11:6b:8e:6d:aa:78:56:0d:d1:c2:5f:34:e9:e5:22:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:F9:F6:73:E4:C1:A6:FA:E3:E7:53:20:8D:C4:DD:D2:7B:6B:3E
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/ED3E80DC068D11F084762D15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.179.0/24
IPv6:
2401:f860::/44
Signature Algorithm: sha256WithRSAEncryption
0a:ea:85:f2:6d:0b:a6:ac:b9:5b:a8:a7:3e:bf:c4:65:1e:68:
90:c2:15:3b:be:e9:48:de:5a:c8:02:9d:ac:7c:34:03:05:a3:
5c:fc:7d:5b:f6:e8:f3:94:50:08:c8:30:66:90:d5:da:dc:51:
0a:29:59:cc:fd:01:dd:1f:2b:c1:fd:6d:05:ff:e3:6d:b6:77:
04:af:05:e0:9f:04:da:87:c8:0a:f7:7f:ea:44:7e:d3:a9:45:
ad:04:ae:6a:b1:d1:1b:74:18:52:77:0f:3c:d4:6d:46:90:e0:
7a:4b:35:e7:87:a2:9a:c9:d8:b1:38:44:dc:7a:8b:9a:62:14:
09:5f:a0:80:93:cd:ec:07:b1:21:4f:ed:14:f1:19:85:1e:7a:
82:db:d3:00:dd:cb:f5:b9:77:32:93:38:d1:88:bf:48:f3:4c:
45:96:d1:e5:7f:38:3c:21:a1:8d:27:de:cb:a9:f8:83:63:09:
3c:53:a5:3b:a9:d8:6e:df:10:ae:52:b7:3f:00:9f:6a:42:ac:
ae:ee:ab:bd:bf:f7:1e:22:0c:30:38:1a:10:5d:7c:e0:db:f2:
d3:61:78:d7:01:67:a7:55:40:c2:65:65:f0:26:e2:dd:88:34:
8c:04:05:57:a5:34:d2:10:ff:60:1d:94:b6:7a:a8:77:91:c1:
c7:c3:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:41:07 2025 by rpki-client