Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/CB67B90812E811F0B8DAD875C4F9AE02.roa
File: CB67B90812E811F0B8DAD875C4F9AE02.roa (raw, json)
Hash identifier: ghA9EEgI0e+9HlkDLrK1eM2MR4ZuQ4ALmiWbqOT3M5E=
Subject key identifier: 19:AF:57:37:05:E1:0C:56:7D:7F:48:F4:31:D4:4D:78:2B:1E:4B:89
Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial: 04
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/CB67B90812E811F0B8DAD875C4F9AE02.roa
Signing time: Sun 06 Apr 2025 13:36:19 +0000
ROA not before: Sun 06 Apr 2025 13:36:19 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 147181
IP address blocks: 163.223.240.0/24 maxlen: 24
163.223.241.0/24 maxlen: 24
2001:df5:5140::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 17:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Validity
Not Before: Apr 6 13:36:19 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=67f28353-bf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:46:77:90:03:fb:f1:4b:94:82:7d:dd:78:
45:8b:32:89:f7:14:47:23:67:f9:20:40:94:3b:18:
e1:05:c7:0e:f4:eb:64:ab:eb:ba:b3:14:74:9d:12:
a7:57:aa:52:11:5b:c9:85:55:b2:ed:ea:ca:0c:c0:
6c:09:7c:4c:61:65:49:fe:9d:59:b1:cd:c1:12:16:
65:22:06:dd:9a:ff:5a:85:e8:83:47:8a:45:54:15:
4f:24:9c:7c:47:ce:99:ef:45:2b:7d:ca:41:75:c2:
f1:c6:fa:bd:13:3b:b0:02:a2:08:67:65:d3:9b:66:
d5:7d:02:99:67:79:0f:5f:aa:dc:98:9c:5f:40:6a:
aa:02:f2:a4:bf:49:38:be:05:39:35:a6:df:21:d0:
8f:80:91:df:3e:d7:e8:c4:f9:7b:c7:97:b5:11:25:
2d:22:fb:44:06:27:5e:35:aa:d4:e4:cf:4b:e0:12:
69:0d:09:1e:fe:d4:90:fb:a7:c7:f2:df:62:a3:7d:
5f:20:9a:5a:c9:89:93:2c:2f:c7:7e:d1:dd:ff:b0:
2f:ea:dd:34:27:9c:0a:6f:8e:b2:05:95:19:79:18:
b0:2f:70:fb:c7:80:37:f3:a5:ee:91:1a:84:df:24:
d4:d1:9f:00:ea:5e:dd:eb:17:93:18:22:a7:4a:9c:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:57:37:05:E1:0C:56:7D:7F:48:F4:31:D4:4D:78:2B:1E:4B:89
X509v3 Authority Key Identifier:
keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/CB67B90812E811F0B8DAD875C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.240.0/23
IPv6:
2001:df5:5140::/48
Signature Algorithm: sha256WithRSAEncryption
3f:26:9c:88:bf:0b:58:db:20:11:6b:f9:51:30:ce:2c:0d:41:
75:5a:50:c6:b3:33:59:6a:48:55:a9:8f:20:2c:f2:3f:21:72:
69:6b:ee:12:50:57:e8:c3:a1:40:a4:a6:33:90:92:93:7f:05:
63:8f:ae:28:eb:17:a5:3a:f3:3d:a9:e8:3a:b9:a5:eb:a3:72:
6c:b9:c8:7d:d8:04:26:24:ea:ac:b1:f4:24:f1:c3:6a:80:c7:
d5:1d:89:8c:c9:83:a0:02:5e:30:be:cd:90:e4:cb:e2:b5:ca:
7e:d6:90:2b:b5:5a:97:24:aa:69:cd:51:f7:02:4a:56:12:59:
0a:aa:00:87:05:0f:27:eb:c2:54:56:1a:da:30:77:ae:2f:a3:
a6:82:dd:c2:96:96:24:f2:80:0a:1f:ba:c8:7b:00:77:23:09:
22:66:2c:b5:df:7f:de:c8:f5:d7:88:70:40:e6:3f:1a:36:c8:
15:52:48:32:24:f1:3b:bb:5c:31:ec:c6:13:f0:e5:13:d0:a1:
b5:66:a1:26:94:18:3b:cd:00:51:02:9e:fd:37:e6:bc:a3:d1:
a1:73:b5:55:6d:98:53:23:4f:f2:cb:0f:0b:ae:5a:87:9c:c6:
20:a4:dd:bd:e9:f8:42:a6:eb:db:ff:b7:0d:d8:7f:dd:a0:51:
51:65:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:21:53 2025 by rpki-client