Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B1262C9810F811EF96FA272DC4F9AE02.roa
File: B1262C9810F811EF96FA272DC4F9AE02.roa (raw, json)
Hash identifier: Xr2Z3gGybxDNnnBP0KJnMXxaraczB8aTyFg8EUHQcwg=
Subject key identifier: 95:3E:D4:73:3A:11:6B:EC:13:42:D2:03:CB:F6:51:A1:8C:43:5D:B8
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 25
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B1262C9810F811EF96FA272DC4F9AE02.roa
Signing time: Fri 17 May 2024 17:56:41 +0000
ROA not before: Fri 17 May 2024 17:56:41 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 151734
IP address blocks: 43.231.207.0/24 maxlen: 24
103.72.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 19:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: May 17 17:56:41 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66479a59-6b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:01:6a:17:49:69:b6:88:ba:da:34:01:8d:
5d:fb:c8:82:6d:56:e6:d9:0d:8a:3c:e0:60:55:79:
f9:5a:ae:90:6f:f7:69:f4:af:cc:07:cb:fa:d0:08:
25:38:49:e9:04:6f:7e:19:9c:20:0b:7f:55:bf:b3:
f7:6f:aa:2c:46:85:26:40:ff:dd:0b:ae:f7:13:9e:
2b:e5:f1:7c:33:fd:67:13:26:bf:05:be:c8:2f:2a:
ce:c0:6f:2c:70:e1:b9:3f:97:d1:fd:5e:68:07:0b:
c3:19:cb:ee:49:97:6a:ce:9f:6f:7b:93:78:35:68:
60:83:24:fa:bd:2d:27:a3:32:3f:ee:a1:63:6b:12:
c6:d6:e6:f0:76:0a:12:2d:d1:e9:93:4a:8c:ca:ae:
8a:d7:8c:2a:74:47:4b:4d:a4:eb:cc:45:c7:06:a6:
fe:5e:d6:f6:20:62:83:63:44:ae:07:ff:1a:8e:43:
5e:cf:27:e6:a9:ef:2d:3d:65:f6:b0:73:f7:d3:61:
ef:52:24:47:e3:36:3c:2c:39:85:45:5c:4f:c0:fb:
42:82:3f:10:89:cc:9f:be:e1:32:74:30:0b:0b:49:
39:a4:49:1e:4f:02:5a:f9:05:d8:fd:6e:fa:8d:e9:
34:b1:65:eb:5f:fb:c7:1b:95:76:c5:c0:c3:4e:fe:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3E:D4:73:3A:11:6B:EC:13:42:D2:03:CB:F6:51:A1:8C:43:5D:B8
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B1262C9810F811EF96FA272DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.207.0/24
103.72.195.0/24
Signature Algorithm: sha256WithRSAEncryption
10:35:7f:95:91:32:4e:32:ca:9a:f5:45:1f:5f:b3:8e:86:56:
7a:75:63:79:a6:50:f8:5f:72:19:44:38:96:5f:1d:a0:46:b5:
7c:49:9f:2c:a6:8d:2d:f2:c0:30:d4:b4:ed:cb:f9:d2:02:f8:
31:42:74:dc:c4:88:dc:69:42:36:8f:9b:be:f0:c5:c0:f1:b6:
40:6c:8f:33:23:22:de:01:66:bb:1c:da:54:a7:a8:ba:b3:94:
64:d6:42:27:08:7b:2a:2d:35:c7:34:5e:b3:20:b8:53:61:8e:
b8:5d:31:07:3e:40:34:b5:6a:19:6b:9e:8e:81:9f:0e:cb:6e:
c3:99:18:7d:c4:4e:26:d5:6e:39:97:d1:75:1d:cf:b8:4a:8f:
bd:f9:69:60:4c:02:44:ef:27:f8:75:cd:60:c4:29:42:8a:fe:
4a:2c:27:de:af:0b:b6:8a:2e:11:7a:16:bd:a4:48:29:d6:1a:
77:2b:1c:84:8b:ad:ca:0e:c1:ea:6e:2f:1c:0d:32:93:4a:f7:
0a:d8:0d:f9:da:c5:55:d1:57:c4:3b:79:fd:08:d3:c0:8d:3b:
5b:d3:e0:86:a8:eb:1d:ef:e9:bb:90:88:7f:eb:70:b8:8b:3a:
54:d0:e6:70:37:8a:b2:91:c8:36:87:bd:86:39:2d:66:0a:66:
d8:41:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 20:42:52 2024 by rpki-client on console-fra.rpki-client.org