Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/ACD7D746C5CF11EEA1D0FC65C4F9AE02.roa
File: ACD7D746C5CF11EEA1D0FC65C4F9AE02.roa (raw, json)
Hash identifier: ojXCj5yJBzgDBriP9W6rAGTjuGy3P/0bN0ncxvBZHDY=
Subject key identifier: 6F:53:CE:CD:15:AD:35:E0:C9:12:DD:C7:02:69:E4:44:68:28:B8:A6
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 051A
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/ACD7D746C5CF11EEA1D0FC65C4F9AE02.roa
Signing time: Mon 12 Feb 2024 07:49:48 +0000
ROA not before: Mon 12 Feb 2024 07:49:48 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9387
IP address blocks: 103.79.17.0/24 maxlen: 24
103.79.18.0/24 maxlen: 24
103.79.19.0/24 maxlen: 24
122.50.0.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 13:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Feb 12 07:49:48 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65c9cd9c-5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:7c:7c:77:c5:fa:03:ce:8a:ca:03:b6:1d:
4b:d5:e7:e0:e4:da:eb:f9:07:d4:99:fe:a5:b1:db:
65:96:76:26:3d:47:f5:68:50:41:7e:bd:cf:3c:58:
dd:a0:50:57:5e:b4:d5:68:76:18:66:4c:2f:5e:95:
c7:e4:35:19:70:b0:5c:1e:be:de:f6:9b:55:bf:4b:
7b:9c:b4:1c:4b:13:77:21:1c:d0:8b:08:45:3e:3a:
f2:aa:c1:60:8f:c2:d1:d1:51:6c:86:14:c6:6e:e6:
9e:d3:d8:40:8f:15:17:10:bb:e9:b3:4c:a2:96:82:
5b:17:f0:52:3a:59:69:44:f7:28:00:ca:ac:11:29:
44:2d:47:e0:c1:e7:3f:b1:09:8e:a8:3b:a8:13:19:
e2:ce:b3:ba:3f:e8:c7:31:09:0a:f2:65:54:b8:89:
fe:8d:d5:e9:41:de:fd:25:e3:ad:07:45:d4:99:00:
8d:17:85:3d:e7:e9:fd:03:50:80:fe:6c:b9:15:23:
f2:74:48:33:d3:5e:21:06:15:2a:57:54:77:e2:c8:
33:a9:1c:e8:1b:57:0e:c9:2e:c7:b4:bd:8e:7b:d2:
7d:2b:69:c8:f9:5d:62:31:54:36:52:f5:6a:e8:15:
4d:18:9b:8a:ff:e0:63:b3:e0:d5:76:82:e5:3c:d0:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:CE:CD:15:AD:35:E0:C9:12:DD:C7:02:69:E4:44:68:28:B8:A6
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/ACD7D746C5CF11EEA1D0FC65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.17.0-103.79.19.255
122.50.0.0/24
122.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a0:f4:6a:da:3e:88:f4:72:f0:93:ca:0a:85:86:d9:47:6f:
17:e0:4a:3e:9b:90:81:62:a8:25:a5:3c:58:15:9e:f3:35:5b:
37:e1:8c:f2:84:f1:13:a9:ee:e4:25:06:96:18:51:ac:1c:9c:
45:d2:49:f1:b9:73:ef:af:08:85:06:9f:3b:9e:c8:48:b0:0b:
21:cb:f1:16:3a:19:e4:5a:ce:dc:6b:1e:06:70:26:16:a1:26:
62:bd:cb:6d:ef:8e:c1:bc:62:8b:5b:ed:f0:df:f2:b5:7d:6b:
f5:d1:5b:d7:21:a9:6c:00:69:02:e0:4d:19:16:2e:43:b1:17:
97:a7:7e:f8:96:99:6a:de:09:c7:a3:50:c5:f9:5e:c1:e7:e0:
95:0c:a7:13:2b:b1:61:97:3f:7d:c3:2c:18:82:99:1d:ea:a7:
00:a1:40:c0:ae:52:4d:37:6e:9b:52:1f:07:6e:10:60:d6:da:
82:c1:0c:81:b3:9a:a5:53:c7:16:92:e3:6f:1b:f9:ac:59:09:
e7:6d:2f:23:35:1b:46:96:69:fb:4d:7c:74:94:a7:5a:d1:9a:
bc:1a:0a:2c:36:ae:29:0a:67:d4:d9:c0:35:b6:c1:a4:58:14:
a6:db:88:4c:f1:fd:35:7a:ef:47:c8:a6:2f:b4:1b:77:22:3a:
a6:c4:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org