Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/796F91D81C0811F082B8B981C4F9AE02.roa
File: 796F91D81C0811F082B8B981C4F9AE02.roa (raw, json)
Hash identifier: z032s5yOTbz0zJWslMBr0e3tIqOP1Tl/yw3dAG8MuJU=
Subject key identifier: 4D:08:E7:64:D1:88:32:50:E1:88:36:3A:B5:DC:CC:E6:16:E3:D3:06
Certificate issuer: /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial: 02
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/796F91D81C0811F082B8B981C4F9AE02.roa
Signing time: Fri 18 Apr 2025 03:51:57 +0000
ROA not before: Fri 18 Apr 2025 03:51:57 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153788
IP address blocks: 163.227.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 18 Apr 2025 07:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Validity
Not Before: Apr 18 03:51:57 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6801cc5d-5ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:c8:74:04:89:0a:a8:5f:82:b7:f6:5f:d7:
bb:c7:be:b6:5c:b0:fb:b5:6d:b2:da:7d:9b:3e:29:
99:75:e1:a6:22:1e:dd:4a:97:5a:ba:45:6f:ba:ab:
c2:b2:25:37:4e:36:1e:dd:a6:06:97:0c:99:6a:e4:
37:d6:33:e4:0c:9f:6c:1e:a9:24:e6:07:18:d7:32:
87:ca:f8:9a:b7:f1:17:43:71:c7:db:eb:69:32:cf:
51:20:37:23:91:5c:70:23:47:30:9b:ca:d5:1d:a8:
5b:53:fc:7f:dd:04:42:bc:e8:c5:cc:34:cb:c5:09:
fe:10:9f:2e:49:58:e6:13:40:e8:6e:1a:97:bc:de:
ed:f5:a2:bd:a5:a0:38:4c:b0:77:5b:81:e2:05:88:
a0:a8:23:92:f9:51:7b:36:99:d1:d8:d3:6d:ad:20:
94:8d:a7:07:aa:3b:0a:d9:7a:e9:bb:2e:38:f6:23:
26:23:2c:4d:50:71:d2:48:6d:0d:76:f8:bb:07:3a:
54:b7:81:4b:c6:85:a0:29:28:d8:8f:34:b6:7a:f3:
8b:78:bd:70:da:b5:62:3f:e5:f3:ab:97:fe:54:c3:
bf:b7:e5:50:36:d5:1b:3a:1f:d9:06:81:08:d5:43:
ca:a0:ae:4b:a4:b8:1e:56:e9:49:af:ee:80:7f:34:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:E7:64:D1:88:32:50:E1:88:36:3A:B5:DC:CC:E6:16:E3:D3:06
X509v3 Authority Key Identifier:
keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/796F91D81C0811F082B8B981C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.82.0/23
Signature Algorithm: sha256WithRSAEncryption
47:e2:b7:1c:ea:17:40:ec:be:85:0f:4b:f2:f9:ab:11:2e:ba:
3d:ad:df:bd:32:c0:c0:6f:fd:ca:bb:60:46:27:40:00:91:b7:
a1:62:8f:08:3b:11:7d:d1:ab:a3:78:de:d8:05:16:84:45:01:
85:0e:50:a1:27:a6:9e:89:a2:a9:95:bf:43:b4:8f:46:96:da:
1b:7e:dd:b1:06:20:03:d1:23:59:f9:81:a8:05:68:b0:3f:5c:
8a:c9:a2:f7:42:14:f9:e0:9a:3e:d6:ca:90:39:3e:b6:be:ff:
ee:69:a9:c4:4e:2f:ca:92:af:df:7f:58:86:41:b3:75:e1:1c:
00:4e:ee:7a:6b:1d:27:36:4d:1d:ca:d2:54:0e:f3:9b:70:29:
40:da:fa:86:dc:56:67:1a:f8:d0:92:d2:6c:60:43:5f:92:e9:
46:25:2d:5c:af:c9:49:e9:e3:d7:ce:fe:b1:03:18:a8:2b:86:
e4:18:1a:29:15:18:1c:78:47:9f:0e:0f:9f:ac:90:45:37:4c:
1e:0d:01:23:4f:e5:a6:9d:a7:64:fe:60:e8:76:91:63:94:d8:
39:87:a6:6a:99:da:6f:43:63:17:79:44:bc:02:3e:f1:f1:80:
27:a1:b2:4f:73:57:3e:32:96:f9:85:e8:bb:ea:9e:07:9b:24:
02:f7:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:59:52 2025 by rpki-client