Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/EA0E36083C3311EE8B808E55C4F9AE02.roa
File: EA0E36083C3311EE8B808E55C4F9AE02.roa (raw, json)
Hash identifier: LZDAiQsOKeiD+R2CnsfcyiBMBIzfOs3eZv46xJYDJ3M=
Subject key identifier: CB:80:90:66:8E:CD:B8:A7:AE:22:E5:FE:86:8F:98:CC:27:61:E3:B0
Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial: 0D6C
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/EA0E36083C3311EE8B808E55C4F9AE02.roa
Signing time: Sat 24 Aug 2024 18:36:57 +0000
ROA not before: Sat 24 Aug 2024 18:36:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 142616
IP address blocks: 103.141.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 16:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3436 (0xd6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FED3
Validity
Not Before: Aug 24 18:36:57 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ca2848-9f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:8e:ef:61:f2:ef:8b:ce:ac:1f:e0:db:d9:
95:ac:86:f2:bf:57:fb:cd:00:8c:f9:df:4a:3e:ac:
e0:fd:3c:53:99:89:e9:02:96:8a:d9:fa:96:39:f4:
8c:ba:e9:4e:30:99:cc:e5:74:20:a8:d1:99:2c:40:
00:90:21:ec:27:0e:fd:11:36:f4:13:72:8e:5a:65:
a2:a5:41:9c:20:c5:3f:fe:85:5d:a6:94:5d:54:16:
77:4c:65:27:73:d3:a7:8a:e0:f8:91:f6:9e:c0:52:
84:36:a9:59:a6:6d:8c:79:5d:32:4a:2d:47:91:46:
a6:d6:1a:d3:19:3c:c8:b6:2e:c3:17:71:45:2a:eb:
5d:f7:90:a5:6d:d5:76:d9:ae:5c:a6:ac:13:21:60:
fb:24:f7:8a:3b:51:21:1e:f9:7c:25:ae:4d:b6:29:
ff:a4:17:bc:24:54:e5:55:45:d5:1c:57:49:00:5c:
c5:d1:e0:5c:f3:f0:08:6e:e3:2e:b8:9e:24:de:b4:
6e:cd:46:69:96:f1:99:de:55:5e:85:c2:1d:80:31:
dd:41:1e:49:89:d9:ab:10:f3:75:e8:d2:54:aa:48:
2a:94:a1:37:69:fa:21:fb:cd:bd:3a:ad:3a:31:fd:
d7:44:5f:dd:9b:1d:e4:d3:38:5d:15:80:93:04:9b:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:90:66:8E:CD:B8:A7:AE:22:E5:FE:86:8F:98:CC:27:61:E3:B0
X509v3 Authority Key Identifier:
keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/EA0E36083C3311EE8B808E55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.182.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:59:2f:83:87:2d:22:7c:7a:29:12:df:ff:54:52:50:e8:72:
65:a5:c9:83:c6:65:86:99:3e:ba:a2:b6:47:a4:ba:ba:37:45:
52:41:12:ae:32:40:76:2a:cb:7b:b1:c5:7b:d1:0b:12:09:bf:
04:3e:b5:7c:3a:f0:50:2c:d2:9c:a5:1b:e8:c0:89:39:08:9f:
e4:2a:57:80:d2:50:63:f2:0d:1a:21:cb:38:65:7a:b4:bf:1e:
a0:f8:3a:6a:3c:3b:23:63:67:e8:ed:48:dd:9d:1a:29:4a:21:
ea:5e:b8:34:c7:63:36:c5:97:47:92:d6:dd:d6:4c:88:eb:9d:
88:96:c5:a3:6d:18:1f:60:d0:b3:68:0d:d5:bd:70:a8:57:da:
d9:98:e7:e1:1c:f7:a0:af:16:82:b3:82:d4:39:70:57:0c:4b:
64:58:bd:14:8e:41:c3:69:15:4a:7a:2a:6f:cc:4d:78:31:83:
6c:26:a7:30:d2:a0:ba:27:b5:71:d9:a9:fa:30:b9:bb:84:fd:
d4:74:69:e1:f2:c1:ee:4e:a0:26:9b:f1:aa:cf:92:2a:ff:64:
cc:b7:c6:fb:6f:09:80:71:22:55:4d:39:ee:f5:62:46:71:34:
94:1b:71:8c:d6:ae:cc:df:9b:8f:c6:b1:c7:83:9e:f2:a5:91:
e5:10:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:15:24 2025 by rpki-client