Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/9CD95058D40C11EFB524AC0EC4F9AE02.roa
File: 9CD95058D40C11EFB524AC0EC4F9AE02.roa (raw, json)
Hash identifier: MTx22ve0ioPkBTZOmrZZqnxWHi/Vk8/5RNUSwST6jm4=
Subject key identifier: 31:9D:23:F9:D8:80:CA:0D:1F:1F:E6:42:3B:37:88:6A:7A:93:F8:C8
Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial: 15
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/9CD95058D40C11EFB524AC0EC4F9AE02.roa
Signing time: Thu 16 Jan 2025 13:20:11 +0000
ROA not before: Thu 16 Jan 2025 13:20:11 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 398704
IP address blocks: 103.75.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 08:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Validity
Not Before: Jan 16 13:20:11 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6789078b-ae07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:d6:c5:95:0b:96:b1:0d:1e:33:cb:05:00:
ec:18:0e:f2:a8:18:02:a4:fd:e4:8c:9e:be:fa:01:
93:7c:03:6f:17:79:ad:8c:14:f5:63:c0:c8:d1:50:
a1:d0:2b:37:44:4b:91:44:44:01:8b:fa:ba:60:74:
68:37:d1:2c:87:ae:5a:b9:7f:df:96:e9:46:57:bd:
65:33:a4:71:b3:37:26:ff:cf:9e:b9:63:d4:c8:dd:
8c:f0:b2:c6:97:65:46:28:26:15:ab:80:f0:f5:5c:
47:c6:79:f2:11:e2:25:d5:be:9b:4a:7e:d0:f0:21:
17:49:54:ac:79:27:1f:f8:6c:d0:39:c9:02:69:f7:
bd:31:a9:64:2c:a1:d9:14:81:29:0c:31:c1:a1:02:
b1:f5:0b:b7:39:43:d5:2c:81:e7:f4:27:21:b5:75:
c5:30:e8:a5:fc:45:a1:63:92:62:26:24:3d:0e:67:
9a:72:32:06:b5:96:98:27:44:fc:82:b0:ef:01:f3:
7e:f9:53:58:e8:b6:fd:81:cf:c9:e5:f8:c9:cd:ac:
54:de:c8:ad:4d:3f:07:1d:51:c2:ce:df:d5:54:04:
f8:de:4c:79:f6:19:d0:c5:86:a2:1b:50:7f:b2:2c:
90:f4:5f:96:cf:27:f6:6f:bd:83:93:64:6b:8d:8e:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9D:23:F9:D8:80:CA:0D:1F:1F:E6:42:3B:37:88:6A:7A:93:F8:C8
X509v3 Authority Key Identifier:
keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/9CD95058D40C11EFB524AC0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:56:52:f0:c3:82:3e:20:1d:9b:85:da:c9:07:6c:ed:dd:e4:
b5:5d:c1:f1:ea:b4:9b:04:49:ef:8e:a9:6e:52:60:98:7b:8f:
f1:be:55:11:8f:0a:2b:e3:3a:ae:ae:76:51:21:98:68:e0:1e:
ac:d9:2f:38:16:9e:17:68:8d:02:72:fd:82:5d:8b:8a:a6:74:
e9:d9:80:16:f6:21:5a:91:17:40:47:1a:e2:32:69:1b:a3:7d:
e1:5c:4f:07:50:bd:de:30:dc:c2:c2:53:e6:86:63:10:84:97:
ae:90:92:33:43:6e:32:b4:ba:19:67:64:92:24:b1:97:48:0d:
47:54:cc:bf:f8:50:bd:a1:4c:0f:cb:e1:12:c3:24:85:b3:3b:
51:8c:cb:51:dd:cc:69:a2:79:20:ba:9b:7c:8b:09:bb:fc:02:
2e:6b:05:8d:57:04:62:f0:8a:1a:12:b4:8d:64:8f:10:b4:cc:
55:6e:74:49:37:7a:42:9d:33:73:b7:a9:a4:03:44:a1:24:65:
ec:fe:d7:9e:cd:5b:fa:01:49:1a:13:1f:99:ad:5d:08:2e:56:
7b:0a:a5:ad:ea:12:3a:3b:09:d6:40:7e:80:8f:6a:90:0d:32:
ec:4c:c9:ef:5d:17:5c:33:dd:71:77:36:d7:96:05:e6:aa:f9:
de:3d:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:28:52 2025 by rpki-client