Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/B876C18CB97D11EFA4715267C4F9AE02.roa
File: B876C18CB97D11EFA4715267C4F9AE02.roa (raw, json)
Hash identifier: fkWblYzcWFxeKgEhCWX2M5c+CU66JZuoIFrM+TmcQko=
Subject key identifier: EE:89:83:C6:A4:13:D0:34:94:E6:05:FC:C4:A6:CE:12:01:3B:36:09
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 0314
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/B876C18CB97D11EFA4715267C4F9AE02.roa
Signing time: Fri 13 Dec 2024 18:11:49 +0000
ROA not before: Fri 13 Dec 2024 18:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135341
IP address blocks: 103.185.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2
Validity
Not Before: Dec 13 18:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675c78e5-fa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:17:7c:e4:0d:76:10:96:c0:7e:b1:75:3b:
b2:e1:2a:39:53:4a:e1:0b:a1:25:0b:ca:a0:9e:78:
e2:4b:e0:0f:40:96:f4:ec:0d:46:41:f4:ef:0a:e0:
fa:49:86:3f:c1:0d:fb:41:9c:15:26:41:fa:9c:68:
00:92:f6:36:2e:b1:d3:b5:e2:be:85:bc:51:75:d6:
1c:5d:c4:1f:02:e8:5b:45:2d:e4:90:7d:b1:8e:97:
fa:12:3d:84:90:96:12:8e:ca:36:00:ca:05:db:76:
67:0f:68:b6:bd:ea:95:2a:9e:a9:a4:61:dc:74:23:
69:78:4f:36:57:86:ec:78:8a:55:90:0a:9b:d2:e5:
fe:3b:05:5a:0d:f7:88:92:b6:fd:ef:d7:68:1f:ca:
4d:b8:f3:c3:5c:38:cb:a9:1a:0f:1f:81:b7:59:5c:
2f:f7:d7:8c:c3:1c:14:82:7e:cb:b5:f9:b7:a5:35:
3c:42:82:ae:64:f5:e4:d8:69:f6:2b:b7:c4:01:6c:
42:d5:ee:18:35:b1:0a:55:55:cf:da:ac:12:f5:a6:
4e:61:88:70:88:3e:46:a8:f9:23:ed:48:2b:ec:df:
b3:b0:26:f0:d0:f3:cc:c4:64:a2:1f:54:12:b3:4d:
32:90:aa:8d:05:8b:99:9a:60:41:55:09:20:14:ab:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:83:C6:A4:13:D0:34:94:E6:05:FC:C4:A6:CE:12:01:3B:36:09
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/B876C18CB97D11EFA4715267C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
81:47:19:07:08:16:db:35:51:9e:e0:59:b1:f8:3a:92:54:d2:
bc:48:fe:b3:f3:f7:67:ab:f5:03:6e:e5:86:83:b4:05:0c:71:
56:c7:2e:09:c4:fd:e2:54:c6:84:4c:85:77:76:02:ac:a6:ff:
03:3c:97:55:19:bb:a5:e7:93:2f:ac:fe:ea:d2:fe:b4:eb:e7:
5c:c7:f5:ae:74:8d:7e:79:1d:9a:e6:7d:9e:77:88:b8:b3:fe:
c8:8d:ec:4c:9c:57:46:e7:47:be:91:93:45:d6:6c:7e:16:15:
bf:5c:fe:01:15:6a:de:5c:b1:5f:6b:84:a6:cf:ff:02:fe:26:
98:42:9b:e6:13:7c:63:9c:46:6d:cd:74:b2:62:98:05:3d:6e:
fa:c9:4a:39:c8:1c:19:92:db:e7:93:b2:18:97:37:8a:ec:40:
83:a9:8e:f1:5e:fc:82:0a:6e:19:0f:7d:3a:24:fc:eb:d0:8a:
53:f0:a7:49:92:21:81:bf:44:89:18:31:0d:c9:0d:b8:ba:09:
05:de:dc:b8:b3:a5:12:ca:f8:dc:a8:ef:aa:8f:28:14:a9:36:
f1:ac:f3:a1:bc:ad:2e:92:0c:6f:3d:cb:95:b7:c6:75:1e:7d:
5b:dc:b7:f0:bd:10:18:3b:39:4e:c2:8a:7e:ce:79:9c:79:b8:
eb:28:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:53:40 2025 by rpki-client