Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/5F5960DE0DFE11F0B561FB60C4F9AE02.roa
File: 5F5960DE0DFE11F0B561FB60C4F9AE02.roa (raw, json)
Hash identifier: TqBjHDRAuNcHaJ37hubgBz42tLG/Nd/xhCvQz/l0UcE=
Subject key identifier: 98:C3:34:69:04:9C:B9:D4:D8:7D:60:27:2A:8D:02:35:1F:B2:D5:F7
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1EC0
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/5F5960DE0DFE11F0B561FB60C4F9AE02.roa
Signing time: Mon 31 Mar 2025 07:07:16 +0000
ROA not before: Mon 31 Mar 2025 07:07:16 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 142601
IP address blocks: 103.192.197.0/24 maxlen: 24
2400:c760:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 31 Mar 2025 21:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7872 (0x1ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3
Validity
Not Before: Mar 31 07:07:16 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67ea3f23-1bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:d5:6c:d6:59:a1:b1:89:81:7c:f7:fd:e2:
b3:3d:93:dd:20:90:a9:f8:c0:55:ca:f6:85:31:16:
cf:ac:45:34:3d:aa:b6:ba:39:35:7d:f6:7a:2d:fe:
6c:5a:64:a4:e2:35:c0:40:be:14:04:8a:7d:e5:a5:
b0:8b:98:c3:45:8c:0b:4c:09:c0:1b:70:2c:1e:ae:
f7:87:92:e1:27:ad:f4:32:4e:fd:5f:fc:9a:51:e9:
56:77:f0:f3:de:06:1f:e2:63:a3:34:be:3c:eb:a2:
5b:b4:07:d7:ab:ab:3a:c9:e0:d9:0b:c5:3d:d6:6d:
9e:0a:f3:d9:a1:b4:d0:53:91:e0:44:4c:4d:5b:a9:
d3:fc:58:37:b1:77:a7:5e:04:31:51:58:28:e5:b0:
12:15:0e:f6:e3:62:6d:a4:cc:00:a6:0c:a9:c0:0f:
52:c2:48:49:a6:a4:8d:c4:64:e6:ef:91:2c:cc:bd:
2c:60:6e:e1:41:db:6d:35:32:02:a5:a1:fb:a5:9e:
c0:86:dc:b3:1f:8c:4b:2f:58:e4:d7:41:9f:40:ad:
70:b3:c9:7c:8a:4f:d6:4b:9e:f3:3e:09:40:6a:a6:
96:2f:53:17:40:b0:f3:30:5d:e0:b2:a2:49:e2:27:
1b:6d:3e:75:72:c5:34:f7:9a:d3:7e:90:7f:40:68:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:34:69:04:9C:B9:D4:D8:7D:60:27:2A:8D:02:35:1F:B2:D5:F7
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/5F5960DE0DFE11F0B561FB60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.192.197.0/24
IPv6:
2400:c760:21::/48
Signature Algorithm: sha256WithRSAEncryption
49:99:bc:74:9f:f7:55:29:f2:2a:96:3e:ec:73:72:c9:fc:3f:
20:7d:cc:a1:ef:33:15:56:11:0f:4f:f2:01:61:db:10:a0:b4:
af:07:d4:fb:8f:26:21:39:9a:74:b4:83:f5:4e:5e:1e:fa:7f:
28:cd:22:69:b8:7b:9e:9d:3a:b5:94:e5:f4:fb:51:f2:8b:9f:
09:42:7d:4b:e3:e4:b8:05:33:c7:e3:a7:03:95:00:54:fe:80:
4b:2d:a9:c7:a6:e0:3e:31:4f:97:17:73:c2:b3:b8:a6:07:43:
98:50:1b:34:b4:f6:b2:0b:71:71:a8:3e:ca:2d:b0:c2:35:8d:
73:01:29:f4:1a:96:e4:90:c9:0c:a2:50:25:19:d5:0b:a9:3d:
e2:a3:b8:24:4f:b0:55:e4:82:3f:1c:d1:2f:ba:64:a8:fc:b4:
a8:16:15:8e:5d:5b:11:db:bb:8d:02:50:4d:a5:ec:f1:3d:66:
4a:53:db:1b:0d:6e:6d:4c:54:21:1e:4f:34:1c:fb:7d:55:80:
0e:f6:42:65:78:c7:37:8a:67:aa:fe:86:a6:3e:42:81:b1:46:
90:df:66:9b:38:1e:08:0b:e6:36:93:32:86:99:a4:b6:df:31:
9a:1a:eb:de:92:54:3b:d7:f9:57:84:60:c4:ec:49:a8:68:20:
cb:19:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:51:59 2025 by rpki-client