Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/0D3E842A2CC411F0BE055183C4F9AE02.roa
File: 0D3E842A2CC411F0BE055183C4F9AE02.roa (raw, json)
Hash identifier: 09bruj3TalJP6Y1h1557C9qlj//+rwqx2YkxXAQbspE=
Subject key identifier: 80:AC:51:07:AC:63:EC:0D:7E:8A:74:9F:73:1F:58:EF:2B:F3:8B:84
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: 07
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/0D3E842A2CC411F0BE055183C4F9AE02.roa
Signing time: Fri 09 May 2025 10:54:59 +0000
ROA not before: Fri 09 May 2025 10:54:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 163.227.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 May 2025 04:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: May 9 10:54:59 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=681ddf03-415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:24:8c:41:a1:c9:96:21:c2:6c:b2:b5:54:
57:9e:a0:34:2b:32:f9:9f:76:40:cf:9b:f1:92:94:
7c:c2:95:36:ef:5d:70:1e:ab:ee:83:ca:2a:cc:9a:
d9:f4:ef:fc:3a:ab:f5:60:88:7a:ef:94:63:82:2c:
d0:77:5a:b4:37:5b:61:f0:73:34:6e:ad:ad:d6:19:
aa:e6:6f:74:96:12:76:e7:f1:83:4a:5e:ce:1b:21:
03:9d:4e:40:fc:59:ad:6c:b9:98:de:6b:0b:7f:25:
40:6c:85:d8:a7:42:36:3d:f9:0f:1c:b2:89:ec:3e:
d0:dc:7f:17:38:bf:09:10:5b:66:ca:1b:4f:62:a1:
3a:aa:a6:20:df:56:f3:a8:5b:02:e2:eb:3c:b5:91:
b6:e6:a2:50:27:c9:af:74:c1:c1:9c:af:e8:8f:28:
6e:a6:61:85:fc:55:85:cd:95:2f:96:e9:0b:42:e3:
ea:3d:55:c9:8a:fa:7d:72:99:de:78:86:6f:7e:f6:
7c:9f:9f:f8:d0:9b:1c:77:34:58:2c:30:5c:3c:2b:
c6:eb:0e:2b:85:47:af:92:46:ab:42:f9:70:4b:f7:
a7:be:a1:85:ff:93:b9:8e:91:9a:8a:eb:cb:73:99:
3c:c1:34:8c:e3:62:0e:09:2e:6c:b1:18:28:73:56:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:51:07:AC:63:EC:0D:7E:8A:74:9F:73:1F:58:EF:2B:F3:8B:84
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/0D3E842A2CC411F0BE055183C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:31:37:92:a2:bf:e2:d5:3f:f0:a8:bf:70:9a:46:76:5f:a3:
1e:d9:6b:fe:29:1e:8c:c5:25:b0:b7:9b:b8:b5:d3:19:c4:26:
3b:84:2c:28:6a:72:a6:ae:60:91:d4:f4:c4:7a:23:6f:5d:09:
6d:a1:86:9a:62:ed:e7:68:d1:ec:bc:8d:9d:00:56:b1:22:e6:
75:d4:e9:ea:72:ae:7e:7b:cf:d5:d5:eb:34:f1:6e:5b:03:2f:
30:60:30:8a:94:9c:46:03:38:64:ee:d1:a9:12:89:6d:8d:50:
66:56:cc:e7:c2:8b:a0:29:77:4f:a3:17:40:b7:18:62:e5:e6:
e6:a2:c3:88:13:47:60:58:11:cd:6e:28:fa:80:18:fc:0d:28:
c5:7d:12:65:7f:87:32:c8:82:58:45:36:49:a8:5f:63:31:e8:
e5:c8:26:98:8b:b2:47:14:5a:06:4d:bd:a9:6e:e1:74:b2:d3:
1b:36:91:c0:5e:0f:d7:cd:49:87:46:4d:c9:b3:38:98:f8:f0:
1e:80:80:da:49:79:8e:39:94:6c:d8:0d:e1:9a:e7:e0:5e:52:
85:0c:c3:8e:20:0a:db:b0:77:7d:f6:3c:dc:5e:39:b4:f5:96:
07:9c:03:25:32:8d:ee:05:d8:76:8d:fd:15:ad:e8:14:37:43:
b0:ee:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:11:02 2025 by rpki-client