Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/EC12E85AF43211EFA3536665C4F9AE02.roa
File: EC12E85AF43211EFA3536665C4F9AE02.roa (raw, json)
Hash identifier: OAtdzCFLpoDYP0A2koVGKLt/CBbMrCsB7wzjyu1nhHw=
Subject key identifier: 63:6D:42:7B:B0:AE:58:4F:93:D3:06:A0:17:92:B3:39:A7:EB:96:0C
Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Certificate serial: 08A2
Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/EC12E85AF43211EFA3536665C4F9AE02.roa
Signing time: Wed 26 Feb 2025 11:15:02 +0000
ROA not before: Wed 26 Feb 2025 11:15:02 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38887
IP address blocks: 103.240.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 05:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A455
Validity
Not Before: Feb 26 11:15:02 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67bef7b6-b42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:2b:80:3d:aa:8b:b0:81:1e:74:53:a0:ba:
84:8c:35:76:74:6f:aa:bf:c3:c0:1e:f5:a7:b7:8a:
45:b5:83:6c:3b:74:f6:71:27:89:3a:d7:20:25:b6:
18:35:1d:ec:63:a9:c5:4e:d9:7b:f7:a8:f3:97:9a:
5d:cf:e0:8d:7a:41:f6:c1:35:7c:8d:be:25:e9:31:
72:d4:b8:d6:26:84:ff:c1:d8:d8:5b:e8:fc:32:75:
56:58:55:0f:88:ca:7e:0f:e8:7d:7f:b6:3e:b9:8a:
99:96:b1:b1:9a:20:48:74:b1:ab:33:5c:ef:b9:4e:
fe:32:c4:42:08:3c:ba:62:d7:b7:63:25:1c:aa:38:
66:d9:f5:ef:18:b0:6f:f3:69:fd:b4:5d:d0:37:b2:
d8:f8:39:78:d1:10:3d:75:c9:4a:9e:39:e1:ff:a8:
a0:4b:ca:ae:ff:8a:2a:4b:32:e1:56:b2:1b:ca:42:
43:38:1b:7e:db:70:9d:f1:8f:c5:c7:48:aa:65:b5:
a9:96:30:ef:05:c0:ee:dc:5d:e9:22:44:c8:fe:7b:
33:ea:14:d9:5d:19:5f:5d:a8:6e:02:96:be:47:bd:
4f:d1:72:ce:cf:41:09:68:3b:89:08:8b:bf:96:11:
f0:62:5f:46:b9:bb:cb:e9:e3:2f:2e:f6:f0:d8:42:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:42:7B:B0:AE:58:4F:93:D3:06:A0:17:92:B3:39:A7:EB:96:0C
X509v3 Authority Key Identifier:
keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/EC12E85AF43211EFA3536665C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.222.0/23
Signature Algorithm: sha256WithRSAEncryption
68:e4:49:99:a8:8e:f4:96:d4:d1:ce:8b:f0:b2:a0:61:ca:e7:
93:cd:a6:b5:5d:21:dc:3a:bf:4d:44:81:9f:2e:46:c9:3f:06:
0e:1c:26:43:80:bf:2b:bc:3d:a1:4a:26:88:4e:05:0b:d3:2f:
22:a8:1a:4c:b7:99:73:0f:ea:21:6d:f5:5e:31:cf:34:b1:01:
fc:b5:7a:be:73:3f:47:be:84:24:d0:d4:3f:56:74:eb:22:ad:
0d:a5:a7:77:ea:57:2a:9b:3b:f3:3d:cd:b8:87:87:f5:55:16:
9e:9e:80:b5:5d:01:64:20:01:17:80:9e:58:61:54:0b:b0:30:
6e:c4:3d:cf:ee:89:4b:63:f7:16:1c:16:0f:00:4c:81:1f:53:
a1:58:d4:87:ed:68:ce:72:16:db:7a:85:fe:2e:2f:39:b1:e8:
dc:cf:91:3e:3f:e5:fa:96:84:8f:62:fa:63:6a:31:98:66:37:
1f:de:a3:42:af:10:36:cd:92:c4:82:a7:47:1c:e7:fb:d5:3b:
28:b8:78:f0:98:58:6c:90:ac:d4:78:6c:79:48:41:b3:3b:b8:
ea:9b:77:e1:ee:a1:73:73:b6:1a:eb:2d:5f:73:77:c5:d1:5e:
0b:af:b4:00:9d:7e:04:c1:37:93:bc:70:5d:26:0d:61:c8:df:
2a:e5:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:42:40 2025 by rpki-client