Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/C6A21EBAAFBD11EFA514C826C4F9AE02.roa
File: C6A21EBAAFBD11EFA514C826C4F9AE02.roa (raw, json)
Hash identifier: qh7el5MZd8h9jfXYzwcGJbutGy5CqmGWPDBD5holibo=
Subject key identifier: CD:EE:A0:C9:57:2B:07:63:73:6C:20:AD:2E:26:D6:79:30:A3:F7:32
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 09B4
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/C6A21EBAAFBD11EFA514C826C4F9AE02.roa
Signing time: Sun 01 Dec 2024 09:03:23 +0000
ROA not before: Sun 01 Dec 2024 09:03:23 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 140973
IP address blocks: 103.114.24.0/24 maxlen: 24
103.114.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 05:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51
Validity
Not Before: Dec 1 09:03:23 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=674c265b-7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:1d:e5:0c:df:a2:40:3d:f0:9e:31:e2:e0:
f8:d6:65:91:27:f4:c9:49:19:09:3b:0c:e3:8d:84:
20:73:d5:6a:0a:95:c6:d5:14:38:22:6c:c2:ea:1c:
c0:f4:cc:aa:c8:83:aa:a8:e6:81:c6:47:68:89:c5:
72:b6:11:0e:e8:64:84:a0:8b:a2:d0:d6:36:ac:94:
a5:36:1d:b2:21:6e:9d:a0:e8:5d:fc:df:c6:ca:6b:
c8:32:7b:93:68:e4:54:44:e2:f7:95:f7:e8:fd:cb:
74:4b:a4:66:11:a9:25:35:54:04:d1:18:f5:af:eb:
84:4a:c9:06:68:a1:55:5f:0f:36:7d:b0:3f:10:10:
5d:bd:89:78:9c:cf:05:02:7e:79:3b:e1:66:26:b8:
8e:d5:18:7e:0f:c0:49:f2:a4:fa:87:7e:c6:70:91:
52:54:6c:61:3d:e5:33:df:eb:7a:bc:d1:bc:a8:a1:
8a:81:7f:76:52:64:15:28:59:6a:b6:3c:15:0f:c0:
b1:b9:fd:10:0a:2b:18:c3:fc:2d:9f:9c:cd:7d:6e:
45:fe:e2:af:e3:e5:3b:da:55:6d:f4:4f:a4:d2:69:
05:1b:6f:d8:b4:a7:2a:96:3e:8b:16:b6:bc:4f:a0:
3d:09:5d:da:bb:57:f7:a3:91:b9:09:3a:91:4f:97:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:A0:C9:57:2B:07:63:73:6C:20:AD:2E:26:D6:79:30:A3:F7:32
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/C6A21EBAAFBD11EFA514C826C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.24.0/24
103.114.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:75:fc:5d:81:08:10:1f:27:0a:b5:4e:8c:76:19:ac:b7:86:
16:f0:ba:6a:58:db:90:c7:c4:b8:fc:c1:22:99:94:d6:a5:9d:
e8:f8:67:09:51:83:21:d3:20:16:1e:76:ad:9d:5f:33:37:24:
31:4c:c9:c8:9b:4b:74:84:27:6c:8c:e0:d6:35:1a:e3:e1:02:
ff:13:00:33:2d:99:d4:ac:63:30:75:e7:58:8c:f8:9e:e2:14:
f7:80:d2:af:c3:d1:66:26:a0:09:b8:49:80:c8:0d:5c:ab:06:
44:06:40:d3:2f:1e:a6:cc:4d:56:9f:01:00:45:a7:fb:38:8e:
b2:89:c1:2a:0b:15:97:59:40:dc:15:cd:90:a6:2a:a1:2e:0d:
72:2b:f3:ad:45:6d:96:9c:61:a1:04:a4:98:02:f0:19:88:12:
ea:3e:5e:66:e0:70:36:38:46:b5:7a:d2:ed:5a:65:89:59:16:
c0:3e:bc:a2:a5:50:2c:b1:9e:75:fd:c0:41:f3:5b:ce:74:22:
05:b6:fc:08:eb:30:f8:cc:1b:b9:2e:a9:57:f5:16:28:89:53:
df:f1:af:9a:73:65:71:c8:2c:80:18:c7:07:13:9a:5b:2c:19:
64:d0:4e:2f:1b:5f:26:7e:c1:e2:40:e5:5f:ce:b7:48:3c:b8:
29:67:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:25 2025 by rpki-client