Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/3A1DE1DCAFB711EFBBB4DF43C4F9AE02.roa
File: 3A1DE1DCAFB711EFBBB4DF43C4F9AE02.roa (raw, json)
Hash identifier: AjXnJN4OZmlC+pfJgEK0vUoFXEuNCy98iGAgv8Ti6As=
Subject key identifier: 43:43:F5:A4:3C:3A:AB:64:09:1B:86:EA:6E:20:AE:2E:0A:A2:48:7D
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 09AD
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/3A1DE1DCAFB711EFBBB4DF43C4F9AE02.roa
Signing time: Sun 01 Dec 2024 07:38:16 +0000
ROA not before: Sun 01 Dec 2024 07:38:16 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 23752
IP address blocks: 103.114.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 05:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Validity
Not Before: Dec 1 07:38:16 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=674c1268-719e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:4c:40:ed:60:4a:a3:48:0f:e8:60:9f:88:
15:9b:44:de:69:dd:d7:bd:00:ed:7e:43:f9:05:da:
ec:77:b7:fc:54:f3:43:e2:13:80:7f:64:f8:70:e4:
44:a0:c6:39:49:cd:17:fa:69:d8:c9:74:4f:7d:0e:
66:bc:8d:41:29:d8:c7:58:81:87:6e:39:cc:45:b1:
f8:7d:1c:2b:fc:cc:d2:00:ef:ad:db:ef:98:61:b1:
18:ad:b2:0a:f6:cb:cf:5a:02:a2:14:60:c3:cf:4c:
d5:0e:37:8b:53:38:35:2b:f8:e2:93:fe:7b:de:32:
6e:ba:45:1e:19:08:c7:3e:3f:6e:53:4c:bf:ec:c6:
f4:58:1a:87:1e:28:39:c0:77:20:f9:d1:5b:e0:ca:
1b:73:7e:20:29:d2:e1:8f:b8:2e:e0:c4:b2:b0:66:
dc:5b:1a:4e:2c:31:97:da:cc:ba:d5:0b:b3:78:7e:
17:a2:19:0a:45:87:38:ff:de:49:72:dd:93:54:07:
45:fc:55:fd:0a:2a:d3:82:f8:87:de:d7:b2:0b:df:
72:2a:4b:b5:49:fd:43:05:9f:df:6b:bc:6e:9f:02:
b3:2b:fa:56:9e:2c:b0:5b:20:06:6e:40:0e:a0:25:
cd:81:0a:ce:0c:d9:a6:3c:ff:0e:7c:e5:7c:fc:23:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:F5:A4:3C:3A:AB:64:09:1B:86:EA:6E:20:AE:2E:0A:A2:48:7D
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/3A1DE1DCAFB711EFBBB4DF43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fa:22:eb:40:0e:1a:7e:ca:4f:47:d2:ba:34:11:d8:74:cc:
70:c1:c9:d6:be:eb:74:87:12:0e:5b:30:c5:08:df:d3:97:e8:
f5:90:b6:da:f6:38:8f:bb:a6:10:c2:87:3c:d5:af:22:1e:1d:
0e:32:07:55:40:f5:dd:9d:fc:16:e9:2f:c2:cd:19:5f:19:b1:
9b:b9:1c:7f:8c:27:e0:a1:8b:0c:85:bf:69:f1:f6:5f:78:ae:
38:47:a6:e5:8a:9a:b2:82:e1:32:a9:5a:c1:cc:84:30:fa:3a:
89:38:fd:a6:bc:f1:42:56:53:e7:ad:8b:a3:f3:c0:3f:82:72:
c5:f3:2f:da:9f:ec:1d:c7:8a:f5:75:ba:d2:ba:87:f3:eb:bb:
8c:48:10:a6:c8:8a:55:c5:ca:dc:54:db:92:70:09:b3:d4:ab:
7a:99:27:e5:45:59:bc:7c:f2:89:55:f9:06:29:49:b7:4b:63:
46:ea:40:d7:97:80:4f:db:34:6d:0e:3a:02:70:6e:5a:e4:e0:
5b:71:45:22:bf:9d:fc:0b:37:14:ab:d0:d4:4f:e0:2f:ff:b0:
1e:f1:51:15:1d:df:ac:11:90:ef:b1:43:c9:97:f6:ed:54:a1:
ef:71:9b:a6:57:75:5e:74:0e:ab:bb:47:82:5c:15:08:7e:01:
7c:d3:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:38:51 2025 by rpki-client