Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/A9CDF31886B411EF9654E36DC4F9AE02.roa
File: A9CDF31886B411EF9654E36DC4F9AE02.roa (raw, json)
Hash identifier: EWr0ONXVejDLZyggCyqFQAwo8pq+vCHxpDQJtZtZny4=
Subject key identifier: 83:1C:94:98:CC:9D:3B:2E:A6:04:82:CF:FD:AE:FC:DD:D6:BE:45:92
Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Certificate serial: 13B4
Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/A9CDF31886B411EF9654E36DC4F9AE02.roa
Signing time: Thu 10 Oct 2024 03:19:17 +0000
ROA not before: Thu 10 Oct 2024 03:19:17 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 137561
IP address blocks: 103.113.100.0/24 maxlen: 24
103.113.101.0/24 maxlen: 24
103.113.102.0/24 maxlen: 24
103.113.103.0/24 maxlen: 24
103.137.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 07:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5044 (0x13b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Validity
Not Before: Oct 10 03:19:17 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=670747b4-aea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:26:ae:d8:4c:3b:5e:f6:37:da:30:dc:95:
43:e1:27:04:02:7a:25:43:89:ce:d0:5b:ad:3c:97:
8a:ba:23:55:d0:d6:ad:88:98:d3:c1:b2:e5:4a:17:
50:79:39:00:f4:47:e3:1f:8d:ab:bf:dd:bc:4b:17:
84:5f:28:af:b2:ea:55:54:b0:8e:58:9a:94:a7:b5:
a1:31:83:b5:62:60:3f:5c:90:a7:86:4e:d3:a9:e4:
63:15:44:a6:23:64:d3:67:c3:e6:69:21:03:70:a1:
f3:af:ff:dd:d7:f6:fc:53:24:b8:df:fc:5b:8c:2b:
76:2d:ba:ad:0e:b8:7b:42:64:71:ef:62:af:f0:7b:
1b:19:02:38:b6:6d:a7:e9:09:38:76:c5:23:dd:f1:
46:10:64:4c:d6:ae:fd:fb:0e:e3:dd:e2:37:f9:88:
60:33:ae:1a:10:fa:7b:7a:9a:63:a2:48:83:b7:fb:
e5:d6:7d:f0:e7:c6:9a:2f:fe:0c:1d:8c:3b:ba:fb:
fb:ae:99:5b:c8:88:e9:b0:ce:f4:d1:bb:ee:9f:1f:
9c:ba:89:5c:40:4b:9d:79:64:0a:30:33:5b:4b:b5:
57:65:b3:67:9b:4f:4d:d5:eb:34:a4:c3:88:5c:3f:
a9:33:f9:0d:46:6c:05:46:7c:0d:2b:21:f9:c7:fe:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:94:98:CC:9D:3B:2E:A6:04:82:CF:FD:AE:FC:DD:D6:BE:45:92
X509v3 Authority Key Identifier:
keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/A9CDF31886B411EF9654E36DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.100.0/22
103.137.71.0/24
Signature Algorithm: sha256WithRSAEncryption
02:24:c0:5c:84:38:2e:ef:11:8d:de:4f:bd:72:77:62:eb:0a:
55:85:82:95:43:58:6d:f3:ed:8e:ff:35:51:72:18:4d:05:a8:
37:6f:1d:0f:1b:dd:a8:db:f7:bb:4e:ae:84:0b:78:95:dd:31:
7d:62:e8:49:bd:1f:33:a0:49:fc:19:22:98:f9:f8:03:99:70:
e8:2d:74:b1:53:56:a9:bd:31:ee:32:b7:06:21:46:b1:36:03:
a3:14:13:dd:40:cd:0a:8d:3d:b9:e6:bf:f1:84:c5:30:3b:71:
cd:62:b6:3c:83:19:1f:77:56:03:b8:50:da:c0:41:9d:80:ff:
4a:16:de:5c:09:37:0d:c5:e8:74:e1:95:69:95:44:47:eb:fa:
e2:24:d3:88:cd:b2:31:49:97:bd:e1:18:74:be:33:3e:a6:12:
9c:dc:16:b3:c6:42:61:fe:76:1c:8e:ee:fd:d3:f2:1d:06:31:
47:48:42:9c:88:79:90:23:76:69:d5:a1:4b:2f:5f:f6:1b:6f:
74:46:88:1a:0b:91:61:41:10:5c:99:56:ad:cd:8d:3f:86:2e:
b2:d8:de:29:0d:60:44:6b:e0:5d:6d:01:e8:aa:82:dd:8b:2a:
78:e2:f1:0c:ab:c3:b5:ca:f9:df:57:f6:79:2d:6b:0e:5a:f4:
78:1f:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:17:40 2025 by rpki-client