Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/C69008D0E3B411EF8603FE48C4F9AE02.roa
File: C69008D0E3B411EF8603FE48C4F9AE02.roa (raw, json)
Hash identifier: XiPfXx7I6PZuZvhJPHOzZMHfHnADm/u7F0x/oVv8NQU=
Subject key identifier: 6F:92:AB:3A:DE:1B:A6:7B:A2:73:7F:82:6A:F3:1D:7F:01:37:AD:E7
Certificate issuer: /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Certificate serial: 01A3
Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/C69008D0E3B411EF8603FE48C4F9AE02.roa
Signing time: Wed 05 Feb 2025 11:31:44 +0000
ROA not before: Wed 05 Feb 2025 11:31:44 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 63957
IP address blocks: 103.52.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Feb 2025 04:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Validity
Not Before: Feb 5 11:31:44 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67a34c1f-6472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:4e:2a:d3:13:c0:72:ff:e0:89:8d:e4:ba:
fd:8b:f2:17:2c:1c:91:a9:88:0e:87:1a:75:7a:e5:
fa:37:41:eb:26:2e:ff:b4:15:a7:7f:33:96:94:3f:
96:b3:cc:e0:73:db:9e:f9:b4:49:eb:90:9b:cc:06:
fd:97:0c:d6:0c:2e:50:6c:bc:7c:cd:25:db:a8:9f:
de:9b:37:53:55:74:cd:8b:ac:b2:d4:ce:6a:e9:70:
17:af:7a:b4:31:9e:30:b9:0d:94:57:54:52:ec:67:
36:e3:ca:3b:2a:81:3c:99:cb:db:3f:43:c2:98:fc:
7c:ba:55:90:37:61:39:f1:67:67:bb:cf:b8:31:a9:
8a:0d:e2:42:f3:43:2a:88:b9:f5:d1:61:22:ed:b4:
8a:da:32:39:7c:b7:4e:ff:da:f0:5d:69:95:a6:ba:
25:e5:c2:6e:d8:c1:1b:12:70:45:38:aa:ac:9c:bb:
59:4a:50:a7:a2:5e:bc:1b:63:fc:29:fc:8a:74:d8:
d1:5b:87:81:11:93:93:81:56:41:87:7d:90:b9:3b:
dd:10:76:18:bd:99:a9:54:7a:3b:77:b8:c0:ed:7c:
8c:61:36:76:0c:3b:55:3c:65:f9:76:47:a3:f3:46:
36:c6:23:20:c4:b6:e0:76:c9:ce:06:92:23:e8:36:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:AB:3A:DE:1B:A6:7B:A2:73:7F:82:6A:F3:1D:7F:01:37:AD:E7
X509v3 Authority Key Identifier:
keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/C69008D0E3B411EF8603FE48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.140.0/22
Signature Algorithm: sha256WithRSAEncryption
41:4d:29:c3:55:48:d7:2b:22:52:28:40:57:64:87:17:13:38:
a7:d4:bd:6f:89:aa:31:ac:32:94:af:05:c1:12:1e:dd:cb:29:
a1:f9:32:5d:8b:fa:03:28:b3:96:b3:e9:00:07:0f:34:46:d9:
a2:45:f3:26:e2:d1:10:2c:93:30:56:3a:37:cc:eb:ae:cd:bf:
2e:6d:93:86:2c:87:32:af:cf:f5:bf:7c:7c:97:8a:69:07:ce:
09:b5:04:b8:7b:f1:57:92:26:1a:41:83:5b:e2:d7:23:e8:e9:
0a:34:3d:03:4d:e4:b3:18:f6:17:ed:a8:ca:06:3e:2e:87:ed:
1e:4e:3e:09:40:0f:05:a6:f2:ba:67:32:81:e4:df:aa:c3:1d:
f1:df:12:52:80:94:be:88:bf:06:67:96:8c:b3:83:5c:d4:3b:
48:1e:64:6b:16:68:b0:dd:90:fa:a0:1d:26:a9:90:29:43:1b:
31:ce:87:41:fb:9e:f0:39:5e:2d:43:02:70:4c:a8:99:20:05:
38:83:09:36:b0:91:45:09:e4:ff:5e:ff:1b:b7:6e:e4:0d:08:
ec:64:0b:1a:cf:e2:d1:f8:dc:dd:93:d3:24:e0:fe:9b:2d:94:
67:8e:62:38:19:18:29:97:90:4d:03:91:97:96:7a:ea:15:67:
2b:f5:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:15:54 2025 by rpki-client