Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/CC7B6A40DE4C11EF80EEDD0CC4F9AE02.roa
File: CC7B6A40DE4C11EF80EEDD0CC4F9AE02.roa (raw, json)
Hash identifier: +ztC7d6OJjdTpkIR853r42DD/xFqWQyKo6Jf1LbzMco=
Subject key identifier: D4:A7:E0:D0:B5:3B:F6:72:7B:75:72:1B:FA:4E:C3:27:9C:2F:4E:82
Certificate issuer: /CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
Certificate serial: 349B
Authority key identifier: 3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/CC7B6A40DE4C11EF80EEDD0CC4F9AE02.roa
Signing time: Wed 29 Jan 2025 14:24:50 +0000
ROA not before: Wed 29 Jan 2025 14:24:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140543
IP address blocks: 203.123.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 11:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13467 (0x349b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171634
Validity
Not Before: Jan 29 14:24:50 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679a3a32-d7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:8d:5e:ab:14:72:d1:12:67:12:16:0d:4a:
1b:8e:df:e6:a8:c9:f3:bb:ae:28:18:90:4d:ae:72:
27:1f:18:2c:13:19:67:db:af:5d:c8:21:07:e3:47:
dc:12:8f:80:f2:9d:5b:ee:e9:75:20:b5:c2:77:4e:
5e:33:9f:5e:21:b6:cd:dd:38:3f:a5:32:87:9b:51:
48:9a:1e:0c:f4:72:02:0f:68:b4:05:42:8f:49:f2:
fd:86:4e:77:eb:82:c7:7f:81:f9:28:59:01:9b:04:
d0:2f:8c:f7:fa:b4:e3:63:a7:21:d9:c2:bd:1c:1c:
05:9c:db:e3:09:e8:e0:6f:b8:3c:bf:88:12:6b:8b:
cf:8e:fa:29:dd:7a:46:e2:99:23:0d:b0:27:94:aa:
d8:74:14:33:9b:b6:df:c4:db:42:a3:3c:12:ce:85:
c7:92:f2:0a:46:da:38:cf:5e:fd:bc:de:5d:e9:a1:
6a:38:77:c3:a7:38:5f:50:38:e5:c3:14:da:99:9f:
b9:92:10:02:23:3e:c1:26:aa:90:cc:71:2e:c0:e2:
07:33:12:ea:a7:fd:9c:ff:75:6a:06:4d:03:07:37:
fa:44:8d:1b:6b:0b:84:6c:f0:34:a0:da:8b:16:8e:
fc:83:85:e2:96:a3:c3:12:49:de:e1:4c:8f:e3:18:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A7:E0:D0:B5:3B:F6:72:7B:75:72:1B:FA:4E:C3:27:9C:2F:4E:82
X509v3 Authority Key Identifier:
keyid:3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/CC7B6A40DE4C11EF80EEDD0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d3:6b:00:f4:d8:15:53:01:ab:d7:8c:5e:7e:a7:66:94:d4:
d7:b5:ac:e7:89:58:80:30:85:c6:37:43:cb:ce:f7:44:ec:b8:
f6:bd:c3:9e:58:02:87:cd:8c:e8:7f:02:ca:75:5b:ed:35:7c:
47:21:a8:96:c3:b4:0c:56:91:06:49:d8:70:03:e1:32:97:0e:
ae:6c:5c:61:e9:a4:c2:3b:18:8f:5b:07:e9:14:46:d2:a8:b9:
b7:2b:ed:31:74:89:ae:d2:27:97:a2:53:6e:85:ca:e5:47:d3:
95:43:68:02:5d:22:4e:31:a9:d4:61:a3:06:c3:5a:49:25:c3:
06:98:ea:35:30:e9:40:3c:9f:08:47:df:cb:40:59:b4:73:48:
20:25:8f:7a:bd:dc:69:a6:27:e7:69:0e:cf:4c:8c:8b:c8:f7:
1f:17:cc:4b:e6:9c:49:78:a3:07:86:c8:d9:b3:1d:37:cb:43:
ee:03:27:89:f7:05:d5:06:97:f4:d5:3c:94:98:b2:7b:e0:54:
d3:fe:6b:66:f8:27:75:80:97:99:c8:24:8b:3d:5f:f2:e4:f7:
98:46:88:29:3d:08:7d:53:9c:7e:08:a4:35:a0:d8:a3:85:68:
a5:ce:9b:cd:2c:88:eb:f0:52:78:d2:a7:34:7b:90:2b:54:08:
b3:a3:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:04 2025 by rpki-client