Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/9050992ACE5511EF877FEC0EC4F9AE02.roa
File: 9050992ACE5511EF877FEC0EC4F9AE02.roa (raw, json)
Hash identifier: WhASUO2rn82E9eTtKy6K0UYNm6vsNn6eqXgBxi2qBDM=
Subject key identifier: 9A:AF:D0:45:5C:E2:85:1C:A9:62:A2:14:0B:1B:B0:49:DC:AF:E1:02
Certificate issuer: /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial: 0740
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/9050992ACE5511EF877FEC0EC4F9AE02.roa
Signing time: Thu 09 Jan 2025 06:47:16 +0000
ROA not before: Thu 09 Jan 2025 06:47:16 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 56110
IP address blocks: 103.142.174.0/24 maxlen: 24
103.142.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 07:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Validity
Not Before: Jan 9 06:47:16 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=677f70f4-930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:bf:c4:7d:53:7a:04:74:f2:95:b9:59:c1:
3d:00:53:42:0f:87:d0:93:47:9a:fa:71:9d:73:c1:
94:d8:ce:41:e4:be:5d:3c:14:4b:b4:49:6b:d8:f4:
88:b0:40:2f:1d:42:5b:d6:90:59:b6:d1:0e:7b:4f:
4f:ec:70:4c:f4:be:86:23:1b:56:8d:54:01:c2:97:
03:4c:ec:4b:94:3e:71:af:d8:51:98:12:bb:40:61:
76:79:cf:1a:18:9d:ef:eb:24:25:58:4d:ab:40:ec:
86:70:26:c5:2e:9d:20:49:32:93:3c:08:dc:a6:c4:
98:b0:d9:14:3f:0d:2a:94:03:55:9e:70:bf:ce:b4:
0c:d4:7d:bd:11:33:5e:d4:d3:b3:43:b8:85:a0:a4:
10:67:b1:e2:55:89:04:bb:84:fa:78:f1:98:41:5e:
eb:c4:a4:7c:b0:36:d0:24:da:31:df:8b:48:e2:c1:
a8:a8:de:68:81:14:fb:f3:5b:4e:f8:a3:77:18:f5:
55:3c:7f:c3:e9:a1:83:29:9d:bd:87:16:1b:33:a8:
40:d1:f2:ab:27:5b:0b:89:02:e4:a2:a9:88:e2:31:
95:c9:58:40:34:69:c6:00:ff:7e:59:79:93:d1:6c:
1b:8b:07:16:4a:1b:fb:f3:82:ad:46:24:05:e4:a2:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:D0:45:5C:E2:85:1C:A9:62:A2:14:0B:1B:B0:49:DC:AF:E1:02
X509v3 Authority Key Identifier:
keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/9050992ACE5511EF877FEC0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:3c:b5:0e:50:27:33:24:eb:51:31:f7:8d:9a:d9:61:6d:16:
c7:ea:e1:ae:7b:0f:da:a8:e7:d8:73:da:0e:a6:db:bf:45:9f:
f6:d5:cd:b6:d5:e1:48:fd:6d:d3:1e:96:84:b6:0d:a5:0e:54:
fe:7a:6f:b7:92:ca:c4:64:0c:90:99:20:1f:95:20:3e:07:1a:
7d:ef:5c:e3:f8:2a:48:01:4f:db:8e:90:dc:7f:6f:9f:05:7f:
28:78:43:20:14:03:c6:71:5d:2f:b6:40:b5:a3:2f:ac:e4:54:
c8:bd:57:a8:75:eb:76:97:e8:e2:2f:26:0a:7d:c0:8b:49:e2:
13:b6:bc:c1:77:0f:a8:fc:b9:33:ee:ae:61:98:9d:e0:0a:77:
bb:b1:8b:fa:31:25:9a:5d:c0:79:d5:4b:75:60:2b:d8:36:9b:
86:15:d7:e3:d9:2e:48:90:98:8a:e4:d5:77:55:c9:a0:21:80:
8f:87:ad:41:57:b0:28:ba:fb:97:d9:6e:af:5f:a1:85:ac:d0:
5f:96:4a:c7:9c:e9:b2:ad:69:bc:d0:dd:35:74:64:2b:4a:01:
ba:cc:bc:21:2a:c7:89:72:7d:5d:8c:88:e2:d7:31:ee:8a:1a:
bc:7e:57:46:47:fb:95:81:8d:7e:eb:15:fc:6b:25:1f:04:8c:
04:39:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:26:35 2025 by rpki-client