Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/498567E4FB4311EF91D7D06EC4F9AE02.roa
File: 498567E4FB4311EF91D7D06EC4F9AE02.roa (raw, json)
Hash identifier: sKy923nde6w6aE1+HBa1OvlQsWwrGRAacUbk5dFJKlE=
Subject key identifier: 4E:08:08:E2:31:98:2E:E0:77:F9:C1:9F:F4:91:5E:2C:ED:03:F2:EE
Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Certificate serial: 0E
Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/498567E4FB4311EF91D7D06EC4F9AE02.roa
Signing time: Fri 07 Mar 2025 10:59:49 +0000
ROA not before: Fri 07 Mar 2025 10:59:49 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 0
IP address blocks: 203.13.144.0/24 maxlen: 24
203.13.146.0/23 maxlen: 24
203.13.148.0/22 maxlen: 24
203.13.152.0/22 maxlen: 24
203.13.157.0/24 maxlen: 24
203.13.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 09 Mar 2025 08:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165588
Validity
Not Before: Mar 7 10:59:49 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67cad1a4-b8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7f:4a:ab:ef:a9:e9:a6:90:75:1a:58:ca:1c:
26:dd:7a:29:81:2e:2f:36:b1:d7:74:d8:cf:49:af:
ba:56:d0:18:c9:14:18:4b:b8:23:92:85:3a:a5:11:
a7:16:c0:35:64:66:d7:3d:ae:45:4d:f8:38:8c:c3:
8c:70:0e:83:02:b8:9c:08:d0:ee:12:b8:5e:80:4c:
a4:66:ee:ba:fd:5a:fa:c0:08:53:6a:d6:ed:1f:f1:
d9:88:c2:58:c5:dd:56:44:72:ae:55:de:fe:77:96:
54:6f:69:e1:8e:52:d2:49:58:de:dc:fa:b4:0d:95:
2b:e9:f4:61:a9:06:2d:9a:e5:f1:18:75:5d:aa:0b:
50:42:fb:06:5d:4e:8f:c6:09:25:6a:aa:0f:54:fe:
87:b7:55:b0:6d:ba:dd:7b:12:56:17:74:0c:e8:d0:
7b:fd:ee:d8:8a:82:cf:a5:b3:a1:0e:65:e1:93:69:
f0:89:0d:89:b3:2f:d4:f5:1a:43:54:aa:c6:2e:f8:
9b:65:00:b1:30:f1:1e:d4:b4:52:4a:84:a0:0c:75:
73:57:f3:d5:7d:d1:11:c2:fd:f2:07:27:db:b5:b1:
10:cf:f9:84:e6:c6:69:d7:a7:b9:26:38:cf:2b:53:
e9:cb:87:3c:dd:31:b6:6b:de:73:c5:f3:a9:0a:d7:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:08:08:E2:31:98:2E:E0:77:F9:C1:9F:F4:91:5E:2C:ED:03:F2:EE
X509v3 Authority Key Identifier:
keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/498567E4FB4311EF91D7D06EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.13.144.0/24
203.13.146.0-203.13.155.255
203.13.157.0-203.13.159.255
Signature Algorithm: sha256WithRSAEncryption
50:74:d0:5b:f8:bc:0f:af:81:cf:a0:ff:e2:a2:b7:05:ff:e7:
ef:a4:d6:9b:bf:f2:89:04:8d:de:c1:08:1d:26:23:da:26:38:
87:6d:e6:a5:a2:f6:21:99:b8:19:cc:f0:8d:65:60:03:5c:e5:
76:3d:15:71:97:49:2e:d6:df:f6:58:a8:d6:17:7f:08:38:84:
52:2e:d6:8a:ab:31:9e:ce:33:1e:2b:cf:45:0e:06:70:f1:cb:
26:bf:46:6f:6b:7d:e1:e5:09:b7:15:b7:25:26:c3:03:db:84:
e4:0c:b0:c4:aa:ec:75:11:0f:b9:0d:31:06:f6:07:81:02:88:
f6:f2:3d:97:63:40:83:1d:04:e6:41:ae:16:9a:3a:29:13:d3:
d9:cb:ef:17:d3:bd:50:f7:03:1b:f2:4f:d3:b7:77:60:69:53:
67:9b:8b:f5:40:d0:46:8f:ed:2b:8a:da:c4:94:2c:14:67:14:
59:d9:57:d1:97:7d:ef:ab:80:c1:20:11:ad:e8:d1:70:f7:be:
03:b4:7b:f8:9b:c9:a4:b5:42:c3:f2:b9:8b:a4:05:d8:f1:b0:
f6:21:2e:b2:63:26:ad:19:e0:30:d6:81:17:3b:83:1e:72:b2:
06:f0:01:b6:20:e9:ab:1d:be:85:c1:5a:04:8c:de:1b:83:3c:
c7:08:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:15:41 2025 by rpki-client