Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa
File: 2860CF98A95211EE9BFC9A6DC4F9AE02.roa (raw, json)
Hash identifier: hpgyKQlhl0eDdnBiJkYNXt6Z9XF4BCCFSk6iTL/QH2Q=
Subject key identifier: 34:AE:29:EE:26:76:59:00:98:22:51:C9:DE:8B:2C:98:8E:0F:EC:C0
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 011A
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa
Signing time: Tue 03 Sep 2024 05:18:12 +0000
ROA not before: Tue 03 Sep 2024 05:18:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 135097
IP address blocks: 103.209.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 04:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62
Validity
Not Before: Sep 3 05:18:12 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d69c14-9369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:0a:cf:01:83:9b:28:41:7d:d6:b5:f3:b5:
2e:b3:9f:e6:5b:95:2b:21:d0:4e:83:15:77:ec:00:
a4:1d:e1:cc:34:df:19:17:f3:57:8f:74:9f:bf:0e:
52:4b:32:fa:82:7b:98:36:18:ba:44:45:68:a7:e4:
50:d3:62:44:b5:a5:d3:53:9a:b1:cc:a5:0a:4c:50:
88:7a:64:e5:c5:73:8d:34:43:c2:15:e1:f8:b6:39:
a9:dd:a3:c0:ed:47:1e:c9:4d:f4:38:88:eb:c0:fe:
86:b7:47:b4:0b:08:bc:20:aa:a2:7e:49:a3:70:e7:
8d:59:69:ed:01:50:b6:8d:05:44:99:f6:35:09:31:
b7:e7:70:6a:c4:81:6c:c3:98:ed:04:c4:58:c4:35:
d9:1b:f2:93:80:32:72:3f:29:5a:85:e5:5b:e7:64:
6f:68:d3:e3:5f:92:1a:e3:d6:d6:8b:fa:63:0d:9a:
26:ad:c1:6e:a7:1a:6a:cc:ee:67:c8:74:95:ec:d0:
03:36:89:6a:1b:96:db:b3:35:68:c7:1d:a5:df:ca:
68:72:a7:c3:1a:b9:f3:68:a6:6b:16:12:00:fd:b3:
51:c9:49:81:58:8d:7e:38:97:59:c5:37:8b:fc:fc:
53:ff:c6:c9:91:13:37:64:cf:ad:6d:70:cd:04:15:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:29:EE:26:76:59:00:98:22:51:C9:DE:8B:2C:98:8E:0F:EC:C0
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
94:43:ab:aa:db:ec:0a:cc:f1:25:2d:13:a0:cd:91:2a:c4:7c:
8d:ae:ce:f0:ab:bf:66:19:e2:2c:1c:e4:7e:8f:a1:f9:db:23:
89:f2:38:5c:e7:6f:cd:d9:25:90:b3:f9:bc:a5:e7:4c:5e:10:
49:48:71:b2:35:b7:9b:d6:81:bc:9b:5e:42:06:d4:8d:10:02:
bb:10:f8:f5:86:9b:9d:63:63:6c:68:7a:a4:fb:ed:6a:6e:3d:
d2:83:11:e4:0a:70:31:5c:fa:fc:84:06:ac:d3:11:80:8a:79:
c3:84:90:62:3c:91:b5:8d:16:97:10:8a:3b:15:e1:2c:22:51:
98:8f:30:1b:5e:bc:34:f5:2d:a0:cb:ef:95:57:e1:6a:9a:de:
56:e4:78:95:e6:34:86:97:c4:34:c7:17:e2:2c:4d:5e:ae:74:
dc:49:80:01:56:b4:7c:60:e7:85:e9:7d:82:c7:01:fa:7e:af:
29:e9:84:4e:77:a1:57:ec:ae:0e:c8:b8:46:ab:0b:c9:e8:55:
2b:41:9d:ac:0b:9a:de:bd:33:b3:a4:77:82:0e:37:2d:f0:33:
7d:9f:cb:bd:c4:ea:0a:39:2c:f0:1a:02:51:ef:89:80:85:11:
0c:b7:ef:56:da:0e:5f:2d:4e:ca:68:cb:ca:64:ac:1d:78:67:
cd:b0:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:55:56 2025 by rpki-client