Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/8D156CDE391A11EF880FB82FC4F9AE02.roa
File: 8D156CDE391A11EF880FB82FC4F9AE02.roa (raw, json)
Hash identifier: 85rKjXyd3b4q7UMaxiggSbC214TgcJGd8PpxswAgSYU=
Subject key identifier: D0:E9:28:2A:97:A8:7F:06:04:42:EE:8F:AB:BA:30:29:1E:52:A2:A0
Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial: 02B0
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/8D156CDE391A11EF880FB82FC4F9AE02.roa
Signing time: Mon 21 Apr 2025 01:27:00 +0000
ROA not before: Mon 21 Apr 2025 01:27:00 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 38197
IP address blocks: 43.248.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 07:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Validity
Not Before: Apr 21 01:27:00 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68059ee3-b589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:62:c1:73:65:75:0a:ea:35:3f:ac:fd:a9:dc:
fe:08:d8:4c:68:e3:83:fc:61:1f:5f:74:77:92:91:
13:fb:a2:aa:b6:ef:e8:23:20:52:51:4a:fe:08:0e:
b0:67:ca:a4:83:f4:f7:c9:b2:fa:cc:34:6d:cf:59:
d2:18:7c:e4:d9:d2:57:ee:db:20:c6:4c:a5:1e:27:
e5:62:33:c0:07:75:c4:09:29:05:93:1a:5c:8b:ff:
c3:13:76:d3:30:2c:3f:13:51:f1:da:51:4e:63:4a:
05:14:ef:2e:8c:6b:41:d9:4e:4a:09:4f:5d:10:ea:
9a:d2:65:54:03:41:f9:03:05:5d:40:3e:c4:04:ad:
89:3b:76:f1:0f:52:b4:ab:bb:11:5b:68:bf:85:2f:
7e:b3:4a:fc:44:a5:ed:98:19:98:99:0d:3e:5d:b7:
fc:8a:ba:f6:72:01:31:81:d5:3d:a8:49:13:79:2d:
09:7e:72:f9:d9:4d:19:4a:a2:7c:34:cc:43:80:06:
e4:d1:62:2a:3c:1e:cd:ee:a7:d7:43:9f:df:7a:b9:
42:f9:3f:70:e7:13:5a:d1:b7:82:35:dc:96:af:30:
e4:a0:32:23:6c:23:3a:99:88:4e:d0:d5:7b:89:e3:
bf:08:6f:16:f5:a8:80:cd:dc:a8:18:f2:1b:da:17:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:28:2A:97:A8:7F:06:04:42:EE:8F:AB:BA:30:29:1E:52:A2:A0
X509v3 Authority Key Identifier:
keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/8D156CDE391A11EF880FB82FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:03:d5:9d:21:25:8a:75:6a:8a:8a:a2:80:59:2e:f9:59:14:
01:3b:2a:00:f6:67:c2:43:e0:9f:65:c7:44:da:0a:fe:52:89:
88:93:e5:25:00:e9:e7:83:f5:b4:8e:1a:76:f4:82:d9:18:8a:
6c:19:11:8d:f9:15:98:81:38:a3:69:8d:3e:88:05:ee:be:6c:
16:ca:b1:61:ba:5f:be:d5:04:15:b2:e8:eb:89:29:df:6d:c2:
bb:f7:89:f9:63:55:ad:1a:73:f7:f1:f6:f1:05:e7:f0:aa:b1:
14:b1:d3:a4:6b:0b:2f:26:cd:dc:1b:e0:9d:2f:2a:1a:42:03:
e9:cd:a2:13:d6:81:14:e2:31:76:7d:57:e1:01:97:33:e7:77:
13:4c:ed:92:15:29:bb:fe:27:4c:78:23:58:64:b5:30:2f:58:
fd:34:f0:75:db:48:f8:04:b4:1f:19:69:c8:8b:61:bc:a9:7d:
9e:b8:c6:f0:54:66:80:95:ea:1a:de:58:a9:ad:8e:ba:e4:43:
4b:10:4a:fe:b5:5b:08:a6:60:4e:90:27:25:88:fa:8d:80:43:
42:9a:4c:e0:ab:53:a6:71:3f:68:84:bc:2b:f7:49:7e:be:fd:
85:14:e2:72:f4:0a:05:c1:c0:c2:1c:9e:de:a0:0d:2d:18:d7:
60:a4:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:26:07 2025 by rpki-client