Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/554D5B96098B11EE8E1F3382C4F9AE02.roa
File: 554D5B96098B11EE8E1F3382C4F9AE02.roa (raw, json)
Hash identifier: 9Rk/FkbBTk02YOYejEM0SZy8vH+yQZ8OAtSXC82XqWg=
Subject key identifier: 4D:8E:59:EF:96:47:67:F7:3F:A6:15:AD:FD:91:62:6A:CA:FC:10:B9
Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial: 0BA5
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/554D5B96098B11EE8E1F3382C4F9AE02.roa
Signing time: Mon 02 Dec 2024 19:07:56 +0000
ROA not before: Mon 02 Dec 2024 19:07:56 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139823
IP address blocks: 103.145.204.0/23 maxlen: 23
103.145.204.0/24 maxlen: 24
103.145.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 04:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2981 (0xba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131579
Validity
Not Before: Dec 2 19:07:56 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e058c-e3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:ec:9f:b4:24:3d:c9:60:c5:72:9b:99:aa:
bd:86:cf:57:4b:9d:c2:11:e9:eb:39:a7:12:05:0d:
b2:8c:e3:d2:1a:8c:1f:f0:22:73:b6:5e:3d:bc:2c:
77:e3:dc:16:14:12:70:21:62:41:f8:3a:58:e0:31:
b6:0a:61:0f:5b:1d:df:b6:31:69:19:17:34:3f:13:
22:1e:72:64:ad:f6:cc:62:18:bd:47:1f:fb:55:cc:
4b:f9:aa:f3:be:0b:d8:2d:31:6c:d8:f6:91:0c:47:
09:f1:a1:38:20:48:30:67:fa:b5:52:35:81:24:15:
bf:55:c0:4a:8c:e1:db:da:67:f1:8c:5f:f8:e1:5c:
10:f2:67:3d:40:1a:27:63:6a:8e:c5:cd:14:c5:8c:
6a:74:8e:56:2e:07:b6:20:3a:fc:fa:f0:e4:d2:7c:
9d:5c:f4:fb:ea:61:dc:6b:77:57:2c:e9:6e:cc:37:
89:29:59:67:8f:5d:44:3e:d6:b7:45:a7:d7:3b:e7:
d4:44:b0:a2:d8:41:c1:b1:d9:e9:89:75:6e:0d:de:
15:aa:42:18:b7:95:7b:58:e3:2b:8e:fc:e3:78:aa:
b4:eb:07:76:0f:d4:3a:28:f9:f7:11:07:54:10:d7:
0c:ee:69:35:fe:89:70:34:67:ce:a7:e9:ae:b6:e5:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8E:59:EF:96:47:67:F7:3F:A6:15:AD:FD:91:62:6A:CA:FC:10:B9
X509v3 Authority Key Identifier:
keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/554D5B96098B11EE8E1F3382C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.204.0/23
Signature Algorithm: sha256WithRSAEncryption
54:b2:87:ec:dd:eb:ac:ce:4b:8d:f6:96:c6:45:a9:ea:f0:5e:
ad:79:97:3b:0e:33:f3:0a:f6:48:67:cb:69:a8:f7:b5:06:30:
ee:5c:71:96:6f:2d:16:0d:6f:8d:ee:7a:fb:26:73:c9:32:cf:
21:aa:2e:72:1d:1d:16:33:36:7d:f8:cd:0b:ed:bb:24:8e:4f:
cc:a8:d2:62:cf:ce:2b:de:a5:c3:09:28:31:bc:5d:0f:00:33:
d8:e9:1c:66:ec:64:f5:dd:a6:fc:0d:65:30:9d:89:37:4c:9b:
45:1e:2b:81:5d:a9:66:d4:ff:a9:e6:91:d6:9a:06:a3:d7:2d:
cc:d3:a3:d5:20:b8:78:34:04:84:6a:fe:ae:8a:a8:90:23:4d:
fd:cc:3a:87:6e:be:e8:8e:e3:22:34:ec:4b:c2:86:61:3b:dd:
9f:19:d4:10:c5:46:4d:09:4c:08:91:8a:5f:5d:48:99:d4:1d:
35:7d:b7:81:76:e5:62:9e:a0:15:54:b6:54:68:e3:5f:0b:aa:
f2:79:fe:67:71:fd:69:f3:82:01:50:6e:ea:c9:c7:4c:36:b2:
5f:62:5f:62:2a:49:99:52:27:94:0f:58:d4:ca:62:7e:57:47:
c9:9e:45:da:56:92:47:60:2d:e0:0a:99:0e:b4:64:43:6e:a8:
4f:cd:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:57:16 2025 by rpki-client