Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E16E2E78D32B11EF9540D180C4F9AE02.roa
File: E16E2E78D32B11EF9540D180C4F9AE02.roa (raw, json)
Hash identifier: xVjT4rABr2p0mN7fB/8cAzvgsMJEbPKIa1I7bK2I/X4=
Subject key identifier: 43:07:8E:B7:3A:D9:56:5C:D0:46:85:6A:31:64:A2:DD:00:15:DD:43
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 3493
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E16E2E78D32B11EF9540D180C4F9AE02.roa
Signing time: Wed 15 Jan 2025 10:31:29 +0000
ROA not before: Wed 15 Jan 2025 10:31:29 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.21.137.0/24 maxlen: 24
103.21.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 06:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13459 (0x3493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76
Validity
Not Before: Jan 15 10:31:29 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67878e81-d556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:4d:dd:28:a4:c7:9e:94:f7:a0:32:22:69:
f3:1e:7a:2d:1e:0b:9f:e6:7b:c7:1e:96:e8:e6:3c:
af:db:21:b8:ef:68:d4:72:5e:d9:26:a3:e1:e4:71:
a8:97:af:2a:90:00:04:47:a3:84:7c:71:71:a7:94:
88:20:88:59:71:68:8c:e7:0b:3a:d7:e8:dc:69:5d:
13:a9:66:dd:89:d4:78:5f:73:3a:c5:43:15:2f:6f:
4f:3f:37:da:51:5a:e2:d2:13:73:5a:b0:e6:c3:99:
de:26:b8:ba:96:b9:20:0b:eb:92:66:0e:ff:d4:9a:
e0:d8:28:42:40:37:4d:9d:87:f6:c4:36:bd:ec:e7:
1b:96:65:ba:13:8d:a3:71:bc:75:ef:5c:f9:3e:03:
8a:01:09:6a:49:5c:ab:36:ae:8f:08:3d:d8:73:d2:
e3:82:72:46:e8:aa:95:9a:fc:e7:f1:40:b0:19:84:
12:bd:2e:9f:55:ab:81:8c:19:b6:7b:a1:6e:ba:21:
0a:b3:b1:e9:87:13:38:97:88:27:a5:ba:ad:42:bb:
2d:44:5f:e4:2b:32:94:c6:6b:3b:98:05:7f:81:50:
9e:2e:98:0e:28:9a:32:49:23:76:0f:42:0f:7d:6c:
1e:f7:0d:eb:03:1a:a9:3c:2b:61:25:90:28:37:38:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:8E:B7:3A:D9:56:5C:D0:46:85:6A:31:64:A2:DD:00:15:DD:43
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E16E2E78D32B11EF9540D180C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.137.0/24
103.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7a:79:b6:0b:50:07:58:45:8d:49:8c:cc:8b:b5:1c:bd:f3:
42:42:52:7c:69:b9:00:5e:24:d2:48:80:92:cd:3b:50:bb:58:
44:6f:41:7f:dc:d8:81:60:39:e4:aa:f8:8e:1d:aa:2e:54:4c:
a9:63:1a:52:b1:b5:db:ed:f7:0a:de:d9:e1:61:0c:64:a7:e0:
17:41:e6:73:e1:67:7f:5f:08:4b:f3:8d:b1:55:a6:b7:66:78:
10:f2:90:11:70:e2:4a:d5:96:34:b5:42:ce:fb:be:1a:86:e5:
02:37:94:ba:9f:c8:46:80:7f:43:b6:10:0b:8f:b1:28:94:18:
b2:23:2c:85:62:c0:06:63:bd:39:c3:ab:9a:66:31:6e:52:9f:
27:53:e3:65:49:fc:6e:be:0f:71:64:dd:0c:40:b8:b2:5c:84:
61:15:74:76:bf:b0:5c:b9:56:2b:aa:b6:f6:0c:ba:cc:a1:d7:
54:3f:22:6f:e4:d9:4c:74:9b:66:fb:b9:99:b9:68:72:a5:b7:
86:5a:59:4b:79:bc:eb:20:a9:0d:35:99:1f:e2:98:18:f9:8e:
76:e5:60:ca:81:99:f3:5d:51:a6:21:75:1f:c4:29:24:dd:0f:
e3:02:d4:ea:af:a4:20:58:31:25:6e:2b:c7:b2:16:ae:23:01:
c9:92:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:45:05 2025 by rpki-client