Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/46BFDE9ABECB11EF9D14EA70C4F9AE02.roa
File: 46BFDE9ABECB11EF9D14EA70C4F9AE02.roa (raw, json)
Hash identifier: cNT0PlgapCE+dRcnjEdiLvrJ4CRnMug3vtWKUk/bErI=
Subject key identifier: A3:A3:2C:7A:55:CF:A5:C8:17:1C:01:6F:53:B7:90:B5:E2:57:A7:D9
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 02B1
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/46BFDE9ABECB11EF9D14EA70C4F9AE02.roa
Signing time: Fri 20 Dec 2024 12:10:10 +0000
ROA not before: Fri 20 Dec 2024 12:10:10 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 208171
IP address blocks: 103.189.191.0/24 maxlen: 24
2001:df0:d840::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Dec 2024 12:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B
Validity
Not Before: Dec 20 12:10:10 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67655ea2-6f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:3b:ee:07:22:5d:95:7a:12:77:de:6f:e9:
4b:6f:b8:d1:c4:70:40:e3:88:92:b3:16:b6:21:24:
73:c3:29:24:a7:90:96:8a:68:e1:7e:ec:bb:af:cf:
2f:0d:1b:27:db:8f:77:cb:d8:1e:03:c0:61:cb:d2:
c2:16:b8:e4:4c:79:c1:38:52:d3:ae:22:c1:69:e1:
58:5b:aa:ac:12:23:ba:3e:40:3a:1e:2f:a1:e5:67:
65:f2:ff:20:46:a2:3f:ba:cb:62:78:81:05:60:98:
90:b1:a9:66:42:db:7d:70:48:d7:85:ae:15:81:15:
4d:ee:73:ce:2d:8e:b7:00:b5:a2:f4:fe:2b:69:78:
08:dc:26:86:e6:39:69:07:bd:b9:a8:ac:15:9c:bf:
35:44:16:4d:d5:0f:12:80:d0:1d:a9:75:da:0b:a3:
05:fb:fa:d6:89:f1:87:31:81:3f:63:8a:60:e7:78:
81:ba:55:57:b6:c3:cd:fe:32:83:50:2a:06:ad:63:
7a:ef:ce:09:5f:01:49:fa:fd:f0:23:a4:2d:f0:11:
d6:65:79:44:6a:6f:4b:92:f3:2b:d8:58:5d:47:d5:
fa:e9:0d:08:03:8c:39:19:8e:24:cc:fc:8b:40:0e:
15:b4:cc:e7:1d:1f:3c:e5:79:ee:36:ca:ce:63:2e:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:2C:7A:55:CF:A5:C8:17:1C:01:6F:53:B7:90:B5:E2:57:A7:D9
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/46BFDE9ABECB11EF9D14EA70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.191.0/24
IPv6:
2001:df0:d840::/48
Signature Algorithm: sha256WithRSAEncryption
26:d3:8b:ed:a6:31:1d:b7:6b:01:94:da:48:ad:cb:99:aa:c1:
08:45:b9:65:a4:6d:4e:6b:20:eb:ad:be:22:8c:19:21:44:34:
aa:d2:32:44:02:25:13:08:77:df:30:63:69:ce:20:dd:dc:75:
35:a2:e8:b6:13:79:2c:15:3f:9d:df:4a:b0:2e:7f:bd:3d:da:
85:5d:b2:d9:2f:fa:7f:90:63:c1:60:14:a0:cc:2f:8a:b7:e5:
b0:9d:e6:4a:5c:13:d8:64:3a:cb:a2:f6:ce:cc:3c:2e:b0:35:
68:8e:54:66:fd:ad:15:1c:e6:17:c0:61:88:f2:ef:38:3f:dd:
55:c8:65:61:9c:5b:d0:0d:16:9b:13:ca:eb:f5:3a:83:5b:b5:
4a:1f:6a:45:56:6c:04:c7:74:ea:14:5f:c3:75:d8:bf:05:39:
12:2f:5b:d5:8a:2a:05:79:5e:70:15:0f:29:7f:45:c7:1e:c8:
7f:c4:84:ad:27:2e:a8:ce:de:89:3b:ca:91:c3:94:90:9c:d3:
03:85:23:3a:b0:a4:ce:43:6f:70:6a:d7:f6:dc:3e:9b:9a:99:
e8:6c:e0:09:0e:9b:07:9f:eb:f0:5f:37:97:3c:56:9b:aa:68:
9e:71:40:86:c2:78:fc:81:bb:54:82:08:33:66:c7:aa:80:6f:
39:b5:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:15:24 2025 by rpki-client