Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/015C4434CDBB11EF802BA13FC4F9AE02.roa
File: 015C4434CDBB11EF802BA13FC4F9AE02.roa (raw, json)
Hash identifier: 00rLSjj5n5TLLFydjQl1GrVh4lXl6nF+/ZPFOiAthtk=
Subject key identifier: 90:42:CB:13:7C:E4:CA:AB:83:75:E8:F1:E8:C3:F6:B0:32:FA:E2:6D
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 06DF
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/015C4434CDBB11EF802BA13FC4F9AE02.roa
Signing time: Wed 08 Jan 2025 12:22:08 +0000
ROA not before: Wed 08 Jan 2025 12:22:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 135000
IP address blocks: 103.165.158.0/24 maxlen: 24
2407:4ac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Jan 2025 15:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Jan 8 12:22:08 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677e6df0-f6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:d4:ee:69:e4:2f:79:19:f0:9a:6c:95:f3:
1f:00:f8:55:8b:83:9a:e2:21:ce:ba:df:50:2d:3a:
8e:cd:43:d6:46:16:83:ba:52:0f:57:24:89:cd:a1:
62:f4:fc:e1:fd:02:22:c7:eb:c5:35:79:ce:5c:a8:
3f:7b:82:96:ce:fe:da:68:83:75:ac:4d:28:27:a9:
82:c9:79:18:a8:e1:32:14:6e:b7:ca:dd:ec:60:61:
ce:d6:9c:fc:af:cb:3e:bf:89:e5:14:f5:57:92:07:
61:4d:c4:12:f4:13:38:ac:8e:6e:b2:65:a4:31:48:
1b:e0:e1:d7:34:10:31:57:60:4a:ed:33:f3:75:2d:
7c:f1:7f:2f:b2:be:8c:1d:fc:be:a2:60:39:41:44:
b6:4e:59:e5:5a:0f:e3:ff:87:08:83:b7:ff:93:5e:
36:59:ee:15:bb:97:2e:fc:ff:99:bd:1f:aa:0f:f3:
91:5f:c7:31:0c:55:73:a4:ce:39:02:05:0e:77:80:
59:8d:52:36:35:a6:29:9e:75:73:bd:66:4d:6f:71:
31:a1:b9:d5:9b:25:a8:09:54:ec:b4:a6:97:29:06:
a4:da:31:f7:7b:fc:45:7b:17:c2:b3:44:13:64:c1:
34:e4:e2:b3:f5:a3:cd:7f:c4:44:12:ed:c8:d8:fa:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:CB:13:7C:E4:CA:AB:83:75:E8:F1:E8:C3:F6:B0:32:FA:E2:6D
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/015C4434CDBB11EF802BA13FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.158.0/24
IPv6:
2407:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:2a:05:16:4a:25:cc:7f:54:b1:37:e2:65:7a:c6:fb:59:42:
24:fa:85:57:bd:96:bb:c4:5b:86:b6:af:ad:0c:bb:f1:f7:15:
1c:57:8d:20:36:87:59:f6:56:41:63:21:3d:86:e4:df:5b:6a:
6a:22:b3:e1:b1:1c:2b:b2:9a:e0:68:1e:2e:95:82:58:03:3e:
f5:44:28:87:a5:11:69:49:e9:24:25:16:63:03:4d:6e:f0:4d:
d1:36:41:d1:6a:66:7d:a1:67:c2:a5:4a:58:0e:25:17:a1:4d:
f3:a6:71:59:04:d1:73:56:47:94:6a:57:01:dd:02:b4:3d:ac:
b6:2a:3e:92:4a:6d:a7:13:91:b5:2f:eb:51:82:a7:37:21:9c:
b8:46:5b:9e:68:e4:4e:57:f4:40:a0:59:ad:62:ec:ec:c3:b4:
25:a8:d9:04:00:60:d9:42:83:aa:df:e5:6f:25:f7:4d:4a:3d:
57:7e:76:7a:b7:3b:ce:a7:4a:9a:ed:32:1d:d7:92:7d:23:35:
a8:f3:b6:0f:95:32:52:79:9b:ce:a5:77:88:73:10:11:49:0f:
d7:8a:68:19:f4:b8:53:b2:4c:51:b5:45:39:0a:6d:f1:5f:78:
be:e6:79:7f:dd:46:20:5c:e8:fd:da:2d:c9:41:8b:25:d8:9e:
05:64:5c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:00:37 2025 by rpki-client