Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/D031F80AEE5C11EA9088DA37C4F9AE02.roa
File: D031F80AEE5C11EA9088DA37C4F9AE02.roa (raw, json)
Hash identifier: 3/kQBtWv5OltO7FDIRnpURzJlRUBqx476ZWlVznCTew=
Subject key identifier: A6:F7:D5:D4:FA:B2:CB:8F:13:5E:AF:05:9B:8C:F1:7E:C0:A7:3E:95
Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Certificate serial: 0742
Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/D031F80AEE5C11EA9088DA37C4F9AE02.roa
Signing time: Thu 18 Jul 2024 21:59:44 +0000
ROA not before: Thu 18 Jul 2024 21:59:44 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 132890
IP address blocks: 103.27.104.0/22 maxlen: 24
113.52.148.0/22 maxlen: 22
2407:5f00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 07:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C9B7
Validity
Not Before: Jul 18 21:59:44 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66999050-6867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:42:19:dc:00:49:c2:fe:25:72:55:14:3d:
b9:00:6c:8a:89:29:f6:78:71:90:ec:5a:68:7e:31:
ee:6d:34:2c:2c:4b:c0:13:59:de:46:a1:ea:b9:66:
33:47:aa:05:47:19:4a:1e:a4:64:40:fa:cf:1f:33:
45:fa:dc:a7:98:b7:f8:d2:ab:32:4a:16:62:fb:bd:
eb:2b:f0:23:8c:f1:0d:8a:5c:5d:fa:3b:eb:39:7d:
7c:75:80:40:1e:b1:24:b2:b9:50:b7:a9:1d:94:03:
36:d6:9b:b6:ff:a0:8c:40:8d:9b:1f:5b:55:56:3d:
81:6c:2b:91:d3:de:fd:5f:40:d0:f8:9b:09:cc:8e:
75:a4:c1:21:cb:9e:00:ce:5e:ec:c0:31:83:f5:8d:
b4:4a:de:49:57:9a:c2:b4:31:32:f1:e4:b7:73:45:
3c:7f:43:a3:9b:50:3d:23:49:85:dd:9b:bd:38:e5:
e3:64:1b:f1:21:c6:2f:54:65:fb:7a:0c:69:af:be:
ea:3b:5c:a0:0e:0d:5c:7a:05:ca:49:72:7b:43:2a:
03:af:eb:12:6a:8c:d1:9c:e8:34:c4:f2:18:70:54:
ea:65:8c:07:f8:a2:c4:a3:6a:77:38:6d:97:3a:6e:
a9:23:6a:e2:f1:3e:6a:3b:d4:f7:af:59:49:86:8d:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:D5:D4:FA:B2:CB:8F:13:5E:AF:05:9B:8C:F1:7E:C0:A7:3E:95
X509v3 Authority Key Identifier:
keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/D031F80AEE5C11EA9088DA37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.104.0/22
113.52.148.0/22
IPv6:
2407:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
c8:67:de:05:12:fa:1d:d0:a6:e4:9e:53:e7:95:30:ca:e1:be:
25:d7:ed:54:ef:a8:07:cd:ec:d9:43:a5:d1:29:7e:fb:9c:3a:
97:3c:51:6d:6f:00:40:0d:97:9f:2b:61:0b:5f:eb:4f:57:11:
6c:57:76:d2:ac:27:aa:64:98:5b:04:94:61:2b:74:65:ca:18:
75:fe:f8:76:6e:9a:8e:35:a9:9b:9e:4e:bf:fb:10:e5:60:fe:
87:7b:ef:6c:14:d3:70:64:24:cc:28:0f:c8:5f:37:2e:38:9f:
5a:bd:c6:d1:fd:ae:2a:12:af:86:b8:d7:11:ee:23:54:af:f4:
92:7c:18:80:d9:3f:b2:46:cb:ca:76:a6:1c:a5:37:be:ab:05:
26:cd:81:08:da:6c:2b:12:92:c7:ea:a8:74:b0:cd:53:cb:6a:
71:36:78:2e:36:dc:72:09:aa:c4:cf:91:6a:fe:09:94:f0:f9:
f8:ce:e1:20:92:32:d8:09:d1:b3:73:f7:bb:07:ec:3d:84:7c:
71:64:bf:2d:ed:46:47:6b:88:93:12:48:1b:c8:c5:7b:96:58:
52:e2:46:31:09:9a:03:02:a7:9a:50:b2:74:04:6c:fd:42:93:
22:b3:6c:23:51:ec:87:70:ae:f8:89:dc:59:10:2b:55:a4:dc:
c1:d0:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:58 2025 by rpki-client