Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/80E1E55EB65211EFB6603D84C4F9AE02.roa
File: 80E1E55EB65211EFB6603D84C4F9AE02.roa (raw, json)
Hash identifier: Y2Qw8/hYlhyySKvbZffuaVXDPQRCxM0g5ldZBNg6WVo=
Subject key identifier: 9C:AA:FA:D1:7A:EE:09:3D:0A:33:C7:15:82:F8:27:51:51:76:6B:A5
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 0307
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/80E1E55EB65211EFB6603D84C4F9AE02.roa
Signing time: Mon 09 Dec 2024 17:24:54 +0000
ROA not before: Mon 09 Dec 2024 17:24:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150774
IP address blocks: 103.185.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 19:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2
Validity
Not Before: Dec 9 17:24:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675727e6-3d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:81:2b:84:07:e9:9c:bc:6b:55:2e:3e:bb:
d4:bb:5e:23:14:d5:90:76:07:1d:03:be:76:93:c3:
56:a4:98:76:60:8a:a8:6a:ea:fa:7c:1f:35:72:98:
b0:c0:8f:cd:da:f1:1d:25:97:2c:b9:c5:62:67:75:
22:e1:ce:f7:2c:f4:25:a5:b0:f7:a3:d4:b8:9a:df:
a1:b3:a1:a7:8a:91:8e:c9:69:4c:74:81:a4:a3:2a:
9f:e5:7f:e7:fe:2e:87:11:a2:da:de:51:39:00:c1:
51:13:53:46:88:fd:4a:28:01:50:f2:5f:1c:82:f5:
64:29:cb:9d:0c:99:ef:9d:ed:e4:6a:f0:e6:db:14:
81:ef:c5:96:f7:24:3a:92:2f:6b:a1:92:81:ea:21:
91:3d:e0:b1:cc:ae:b9:9b:24:98:16:81:bb:90:3c:
f3:e5:84:5e:26:e6:bf:f5:1b:c3:a9:0c:1c:4e:ab:
5b:7f:ae:b0:41:c5:73:f6:07:4f:e8:6b:92:a1:48:
b3:00:a9:0e:54:8f:db:4d:92:49:dc:88:78:68:8b:
90:86:fe:b6:66:42:7e:cd:c7:ed:2c:1d:29:30:f7:
7e:43:64:28:b8:0c:b5:65:6e:02:36:a5:61:bb:92:
d3:8f:8e:86:98:f7:b2:2e:29:45:e9:eb:c7:db:35:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:FA:D1:7A:EE:09:3D:0A:33:C7:15:82:F8:27:51:51:76:6B:A5
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/80E1E55EB65211EFB6603D84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:48:99:4d:68:20:4e:f8:fe:e3:42:80:e0:9f:11:4a:fb:48:
cf:55:e7:4e:19:f6:ce:06:c8:75:d5:0f:7e:e4:ff:bb:f1:fd:
b6:df:73:ff:8a:8b:e2:90:31:5c:2a:a8:1f:f6:0e:fc:f1:4f:
bb:77:9f:75:73:ff:6d:4f:03:86:da:3a:33:ed:9d:d0:e0:d1:
7c:8c:02:86:77:24:5f:5d:23:6c:6a:de:f1:4a:46:43:a9:ab:
01:1b:79:f0:d6:be:8c:e1:4b:67:9b:63:a6:c6:7a:7a:93:98:
47:30:b0:94:17:a5:d2:cd:b9:d6:b7:fd:44:b0:a9:a1:bc:bc:
80:88:76:82:05:23:34:a6:31:95:e2:62:5e:a9:f5:d0:48:93:
26:16:c3:60:c1:0d:e7:2e:1a:87:e6:c6:9d:2e:e9:c8:b7:19:
f8:e2:47:84:11:0e:6c:00:e2:3d:23:4a:9e:7b:2f:99:64:43:
49:af:27:0f:5a:a2:5f:37:09:f2:14:c6:c7:54:cf:3a:3e:80:
ce:e5:a4:f8:57:20:f8:e0:52:6f:91:7d:04:aa:6e:80:90:f6:
8c:60:57:10:ff:26:9b:8b:85:db:ef:f6:59:48:c1:7a:95:48:
2b:26:18:33:e7:47:ca:b1:90:9e:f1:40:ac:48:fe:99:70:cd:
16:e7:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:30 2025 by rpki-client