Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/143BA5EA7F2311EFBA5E2D09C4F9AE02.roa
File: 143BA5EA7F2311EFBA5E2D09C4F9AE02.roa (raw, json)
Hash identifier: QSGCEtXOVUeFblU5hpZxcNLgWZm3IwJfZ2GOVJsJS28=
Subject key identifier: A5:37:76:E0:8B:11:FA:0C:DC:90:51:FF:A0:CE:11:4E:F8:87:CE:32
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 12E7
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/143BA5EA7F2311EFBA5E2D09C4F9AE02.roa
Signing time: Mon 30 Sep 2024 11:59:48 +0000
ROA not before: Mon 30 Sep 2024 11:59:48 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.120.117.0/24 maxlen: 24
103.120.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 16:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4839 (0x12e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD
Validity
Not Before: Sep 30 11:59:48 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66fa92b4-0be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:97:3a:15:69:f2:71:d0:9e:a2:ae:1d:27:
dc:37:2c:78:1e:a3:30:a0:4c:c5:b6:aa:98:6c:67:
a7:92:7f:3d:f1:ed:5f:1f:a7:8c:80:0a:06:81:6d:
98:96:9e:50:bb:69:f4:89:59:89:da:6b:80:a9:fb:
3d:83:64:be:90:a0:6d:30:52:46:50:11:6e:dc:b9:
f7:c6:17:36:eb:d8:bb:67:d8:fe:85:4b:1c:01:57:
5a:aa:c0:01:b7:59:d7:e6:ce:37:34:21:96:9e:5b:
c0:64:f6:06:16:4f:bd:87:87:f9:0d:31:1e:09:3d:
eb:af:bb:09:29:b2:ad:3f:b8:ce:65:bb:fe:70:e8:
34:7f:95:62:cb:0f:fd:94:bc:d0:08:a8:fd:99:1a:
80:bd:fd:c1:e2:ac:a1:73:1c:9a:40:75:b5:ca:3c:
6a:fb:c5:e7:51:d5:36:02:95:a5:01:d1:27:9b:77:
2f:61:8c:dd:35:b5:86:c1:00:4c:8a:4d:8a:ed:e4:
38:cb:05:8b:77:4e:b2:42:56:f1:d9:92:7a:36:52:
0b:7a:28:3f:cb:d0:e8:0b:eb:6f:80:59:dd:ff:59:
c7:b8:f2:5a:fc:3f:08:a5:9b:ab:b2:df:19:9e:9b:
fa:eb:76:d6:8f:48:e6:ea:4a:e2:2d:32:2c:5b:cb:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:37:76:E0:8B:11:FA:0C:DC:90:51:FF:A0:CE:11:4E:F8:87:CE:32
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/143BA5EA7F2311EFBA5E2D09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.117.0/24
103.120.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8e:ce:f3:e4:be:67:73:2d:4e:84:b3:4e:90:76:fc:e4:3d:
73:d4:5b:af:76:13:26:9d:9c:14:51:59:c9:59:8b:d9:2a:ab:
61:dd:23:53:17:ac:41:08:f7:b9:48:6f:5e:58:77:81:bf:72:
ef:47:80:75:35:e7:4c:8c:d4:d9:bd:cc:24:6a:7b:a1:57:8a:
d8:0b:cf:cf:22:40:58:0e:d7:93:f3:a6:8e:f9:3a:ae:d1:10:
0d:ea:47:ad:c3:d3:ce:a8:6e:4c:c5:f6:3b:98:17:e4:fa:cd:
c7:29:46:71:cb:7e:0a:96:4c:52:fd:30:e1:af:40:67:e9:a6:
ce:e4:cd:44:58:24:29:5d:6d:70:b8:7a:cb:f9:76:9a:5c:52:
e8:15:76:46:dc:43:89:79:12:40:37:74:3b:47:e7:ce:28:59:
c4:16:84:02:02:b4:52:ed:af:d1:60:ff:bf:e0:68:3d:00:b8:
42:42:a0:5c:76:16:cb:60:b7:6d:bb:27:d1:1c:5f:de:e8:eb:
eb:b8:4c:82:4a:a6:6f:b1:3e:e8:ed:b5:cb:0b:00:05:3d:5a:
ad:57:a5:4d:1a:72:44:f3:9b:50:78:bc:b6:05:d1:fd:31:26:
ab:b7:23:46:d4:62:a7:0f:9f:50:6e:6a:14:e5:29:60:66:ab:
40:ed:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:57 2025 by rpki-client