Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/DAC6A16AAE3011EF9816572FC4F9AE02.roa
File: DAC6A16AAE3011EF9816572FC4F9AE02.roa (raw, json)
Hash identifier: NY1MlHc+QR6znYTnxpdV2F+FHNkv13afHKtJP7qFcKI=
Subject key identifier: C2:1F:73:CC:1E:81:92:D2:E1:EF:54:CF:1C:05:FD:7F:FB:C7:49:08
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 046D
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/DAC6A16AAE3011EF9816572FC4F9AE02.roa
Signing time: Fri 29 Nov 2024 09:03:53 +0000
ROA not before: Fri 29 Nov 2024 09:03:53 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 214174
IP address blocks: 103.73.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Nov 29 09:03:53 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67498378-c801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:cc:e6:09:d8:11:19:5f:a6:c2:a4:9d:d4:38:
a5:cf:11:b9:45:b2:ec:14:73:2c:a5:30:17:25:c0:
44:79:7f:90:56:3a:a8:46:e0:8f:17:51:62:68:59:
a9:65:c6:3f:17:04:be:33:10:c9:8a:da:3e:4a:93:
c1:98:e9:45:e1:35:25:51:f0:f1:36:70:e8:f1:56:
38:ae:98:c1:59:60:36:5a:8e:93:3c:1e:f6:bc:af:
c4:6f:5e:ba:89:26:66:5c:71:c8:df:6d:69:0d:f3:
fa:7d:11:53:b1:db:42:cd:7e:69:f7:87:fb:89:0b:
4d:7b:fb:88:da:50:94:64:67:ad:96:ad:d2:11:13:
32:7c:7d:2b:69:b3:07:c8:b2:2b:48:54:60:f7:5b:
94:46:45:aa:ea:a0:85:95:85:2f:d8:ca:2d:95:87:
5f:44:db:0c:44:d9:91:90:f9:ea:3e:0a:52:d4:cc:
80:36:45:11:84:86:e5:e3:ff:fc:e9:b1:fa:9f:a0:
4d:51:7a:99:ac:5d:64:79:83:1e:b5:ff:1f:92:92:
19:9a:da:e8:d8:de:ba:b2:c0:83:d5:32:e8:e8:53:
24:92:49:ea:a5:86:b0:18:e9:39:74:5e:e6:97:30:
48:88:c4:35:45:58:6c:73:cb:61:ba:24:78:0f:69:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:73:CC:1E:81:92:D2:E1:EF:54:CF:1C:05:FD:7F:FB:C7:49:08
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/DAC6A16AAE3011EF9816572FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b6:b7:e6:e9:57:67:a4:3d:a8:51:9b:93:18:02:a3:c6:2d:
c9:86:ec:9f:17:df:87:d3:c1:92:08:08:5a:7f:c1:92:d0:47:
ef:c2:f7:02:d8:5b:c3:ba:c7:4b:7d:b7:66:fd:88:4f:3d:c6:
eb:2d:2d:4d:f9:13:72:ca:27:3a:65:e0:4d:61:de:1d:1b:a8:
b5:35:49:53:72:b3:bc:30:86:2d:3b:3b:ec:d9:b5:f1:b4:51:
6c:ff:7c:97:a2:31:88:6c:73:40:8c:e6:29:95:c0:f0:df:02:
d9:ab:84:40:ae:19:cc:41:cb:2a:f9:a7:19:3c:77:ed:6a:13:
70:18:52:ac:be:bb:85:2e:3a:ea:19:5c:b5:db:64:73:ce:92:
d6:58:4a:18:61:11:8b:11:55:38:5d:fa:59:5a:b9:2f:66:b8:
b8:d8:71:c9:c7:de:ba:f6:3a:13:29:61:c6:7e:5c:cc:3f:63:
47:67:f4:ec:79:65:b3:cf:79:5c:04:4f:66:e7:0d:d9:89:1c:
27:1f:8e:1f:97:45:d1:af:18:20:ef:d6:ae:26:dc:53:34:2f:
4a:eb:c1:50:44:35:3c:f4:98:b9:82:0d:1a:a5:a1:7e:c3:50:
00:a8:18:0f:90:98:0a:7c:34:bf:0a:1c:c5:44:62:8e:a8:a9:
dd:48:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:51 2025 by rpki-client