Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C97F7ACE50C711EFA407A973C4F9AE02.roa
File: C97F7ACE50C711EFA407A973C4F9AE02.roa (raw, json)
Hash identifier: vyHh2exT4qhBGrueOgrIVHj+JXzkRwFTixdihqimxdw=
Subject key identifier: 47:FE:42:7F:11:24:CF:30:52:0B:AA:EE:D6:3C:5E:F4:EC:D8:03:8D
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 05DA
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C97F7ACE50C711EFA407A973C4F9AE02.roa
Signing time: Mon 30 Dec 2024 23:02:39 +0000
ROA not before: Mon 30 Dec 2024 23:02:39 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9387
IP address blocks: 103.79.17.0/24 maxlen: 24
122.50.0.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 20:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9
Validity
Not Before: Dec 30 23:02:39 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6773268f-632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:a3:81:80:e9:18:d2:8d:df:9b:42:c6:81:
33:51:f7:56:7a:4f:c0:16:92:20:dd:7e:0d:37:72:
01:38:09:77:5c:43:70:84:98:84:28:4a:a0:9c:65:
7a:b8:20:b4:2a:72:d2:00:c9:2c:87:2e:7e:a4:53:
38:41:fc:c8:38:90:98:62:78:0d:4a:5c:74:35:9d:
14:c2:2c:0f:88:e3:3a:b1:fb:d6:c1:7c:7a:cf:d5:
61:5b:fc:76:3a:e4:62:64:fb:5f:48:bd:05:31:dc:
b2:ea:d8:96:d5:03:77:5c:56:7a:33:c2:83:85:0f:
1a:87:1c:81:34:89:3f:97:64:35:b5:f4:fe:21:cb:
21:50:e3:fa:f5:f6:1f:63:8f:68:f4:e3:49:16:57:
d8:81:ea:04:e1:7c:3b:d5:75:9f:fc:40:7f:f5:be:
7f:3e:f8:d7:c1:9a:1b:4c:ba:78:e2:d8:dc:8c:53:
17:4a:2e:e5:2a:43:c3:2b:7c:85:54:ee:76:04:08:
6e:a5:cc:76:19:9a:09:c4:02:7c:4e:23:c0:87:5e:
3a:bb:2a:0e:a2:f8:cd:f1:86:5a:e6:81:70:75:ab:
c9:cb:33:4d:65:79:e4:a8:4e:ba:d5:97:a4:57:9c:
80:ca:03:ef:92:13:f4:3f:9b:8b:0e:a9:f9:3f:f7:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:42:7F:11:24:CF:30:52:0B:AA:EE:D6:3C:5E:F4:EC:D8:03:8D
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C97F7ACE50C711EFA407A973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.17.0/24
122.50.0.0/24
122.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
62:15:d5:b6:a8:12:c3:f5:e4:f3:a0:e2:84:96:d0:ab:31:7f:
86:b4:fc:f8:ba:66:5e:3e:8e:94:bf:f5:5b:fd:1e:3d:d9:54:
21:a0:55:e0:6c:fc:b6:90:a0:18:27:63:ae:43:94:62:8e:ec:
bd:06:6f:d3:3b:58:80:51:68:7d:6a:1c:92:3a:d1:10:87:2e:
66:63:5f:94:b3:39:00:3c:8c:98:d1:79:92:5f:72:e1:db:ef:
9e:93:16:f2:5e:87:b0:b3:66:ff:57:69:31:cc:8c:48:59:82:
38:9e:87:4d:55:dc:82:37:13:2c:a7:f7:0f:f2:01:59:8c:67:
d7:0a:06:7b:dc:37:7a:56:90:a9:59:8c:34:4c:a8:6d:43:36:
1e:95:54:f7:0a:f2:68:51:21:14:73:12:8a:44:ef:e5:9c:eb:
7b:97:7b:6a:4c:ec:de:97:60:88:00:26:4c:34:b3:bc:d2:ee:
9b:29:14:8e:3f:ed:ec:df:88:2f:32:6e:5d:cf:57:75:f4:e6:
f4:8c:43:b3:72:ba:0d:2a:09:62:72:72:0b:79:29:53:8d:39:
72:3f:d4:7f:88:57:ae:0b:ba:a8:2f:48:12:97:6b:69:9e:01:
f4:30:e8:3c:a0:20:bd:54:21:ed:96:61:fb:76:68:21:ac:a0:
83:0f:0b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:02 2025 by rpki-client