Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/D64E5FD2DD3411EFA882AA2DC4F9AE02.roa
File: D64E5FD2DD3411EFA882AA2DC4F9AE02.roa (raw, json)
Hash identifier: 6KijGzet90p2OqPhn3MJhYx3rgad9Y/znw2Jxv8shj4=
Subject key identifier: EB:94:5E:28:7A:5A:25:4B:1F:D3:AD:29:F1:22:84:BC:57:C4:52:BD
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 07
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/D64E5FD2DD3411EFA882AA2DC4F9AE02.roa
Signing time: Tue 28 Jan 2025 05:00:48 +0000
ROA not before: Tue 28 Jan 2025 05:00:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153558
IP address blocks: 163.61.16.0/23 maxlen: 23
163.61.16.0/24 maxlen: 24
163.61.17.0/24 maxlen: 24
2001:df5:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Jan 2025 05:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Jan 28 05:00:48 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6798647f-75da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:d8:bb:e5:2c:2b:2a:21:b5:9a:35:15:37:
59:65:9e:b7:a3:69:8a:b1:5c:93:0d:13:92:01:42:
80:a4:a3:50:cf:1a:4d:56:c8:83:42:01:2f:ee:e4:
76:ac:69:76:c9:b8:d6:ed:20:10:c8:fa:eb:5b:9d:
c1:ff:4e:ed:27:f0:33:e4:86:c6:df:94:b0:8a:e0:
53:ec:a6:5c:f9:4f:bc:74:c7:09:94:9a:c9:aa:b7:
15:e5:f0:c2:5f:f3:da:41:2c:7f:05:90:0e:eb:a2:
8b:42:1e:72:a0:24:9b:d2:03:b8:6f:6e:13:09:6f:
d2:a5:57:f7:8b:c6:e3:23:e0:19:1a:db:8f:27:cb:
82:eb:4f:fc:21:b5:3c:1b:fe:36:3d:94:de:9b:a6:
78:e6:3c:00:91:02:ad:a3:58:84:42:cc:0c:ae:5a:
b8:20:94:e4:e7:ec:22:3d:d7:80:20:92:76:65:66:
00:72:cf:ca:ca:34:a8:0c:2a:03:f3:91:96:98:b6:
12:5a:b4:24:25:23:b0:32:c8:53:b9:c9:54:e4:79:
a6:38:be:a0:79:d0:f0:d2:5c:ab:d3:f4:9e:b5:46:
f2:b0:13:2e:a8:46:cf:89:eb:dc:d0:23:aa:64:ec:
4d:4d:24:cd:fe:6f:96:dc:c7:7e:33:93:a0:57:c8:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:94:5E:28:7A:5A:25:4B:1F:D3:AD:29:F1:22:84:BC:57:C4:52:BD
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/D64E5FD2DD3411EFA882AA2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/23
IPv6:
2001:df5:c0::/48
Signature Algorithm: sha256WithRSAEncryption
09:7c:50:3a:4a:c7:0e:2a:ac:15:7c:d2:22:d2:3c:7b:02:a9:
23:c2:7f:f4:39:92:ff:88:be:7b:95:46:7c:81:bf:11:8f:13:
bf:95:b5:0d:ea:f8:7a:8c:e0:88:08:5e:ca:a7:49:26:ca:f7:
98:0f:86:eb:69:1a:d4:a5:23:41:93:97:66:af:5b:78:4f:fd:
dc:7f:eb:01:d2:94:3f:55:80:02:40:56:4d:38:15:57:7b:84:
f0:ab:8a:2b:ec:fb:23:e1:2e:ff:c6:a8:ea:b6:fc:c7:da:58:
d6:14:38:2f:f2:be:04:b8:9c:d6:c8:7f:92:71:fd:9d:a4:ca:
84:07:c8:26:95:50:bf:9b:eb:da:46:e2:ed:c3:c6:52:fa:e5:
fc:80:de:15:e0:43:28:b3:63:4d:ef:2d:a1:b4:82:86:73:5d:
62:d4:2a:94:57:4b:e7:3a:a8:e1:4d:11:e0:25:51:85:33:0b:
17:37:37:77:47:3b:b7:d1:5e:cf:e5:e6:2d:ce:3d:20:e9:89:
6a:3a:1d:70:1b:20:be:dc:67:0d:4d:de:3d:e0:d4:20:53:4e:
35:21:16:51:a2:00:f6:88:46:4e:82:92:13:1d:09:56:f3:7c:
f2:a5:8f:c6:d7:18:61:9b:0d:d1:93:d4:07:97:b0:a8:00:76:
8e:99:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:16:39 2025 by rpki-client