Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/5CC30720B1F711EFB7EDF669C4F9AE02.roa
File: 5CC30720B1F711EFB7EDF669C4F9AE02.roa (raw, json)
Hash identifier: je3ANcjPfPLfE5lJCPbk1fDoJkS62sBC0wskk8yET/E=
Subject key identifier: D3:AA:FD:58:A9:7E:4D:34:B7:D8:21:0F:75:FC:CD:DB:A1:0A:E5:7A
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 1321
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/5CC30720B1F711EFB7EDF669C4F9AE02.roa
Signing time: Wed 04 Dec 2024 04:22:24 +0000
ROA not before: Wed 04 Dec 2024 04:22:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 58895
IP address blocks: 103.120.117.0/24 maxlen: 24
103.120.118.0/24 maxlen: 24
103.120.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 10:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4897 (0x1321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD
Validity
Not Before: Dec 4 04:22:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=674fd900-353f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:3f:6f:4c:c4:fb:cb:cf:ef:70:01:b9:d4:
ce:c6:c3:c2:62:e8:d5:89:f6:da:fb:09:f1:bd:bd:
3f:74:9d:19:f6:2e:17:75:b0:e7:21:0b:63:b7:6d:
17:c9:61:70:6f:dd:be:80:18:74:a4:c9:a4:be:d8:
b7:14:0d:d8:fe:8a:90:63:af:d3:df:12:42:ff:4e:
3a:37:18:03:e3:df:38:ca:bb:ae:d2:73:1c:55:7b:
d9:f7:d7:c5:a4:f0:b4:ed:21:09:5d:ab:7f:b6:7a:
39:4f:17:0a:11:e0:4f:54:76:d8:fc:42:8c:73:13:
b9:f3:ab:b0:5f:32:62:2e:75:42:f7:f9:28:4b:c7:
2b:9d:9f:c5:b7:65:4e:87:fd:8e:b7:c1:40:d3:dd:
88:3e:c8:fb:39:2e:8c:7d:9c:ec:8a:0b:7d:55:dd:
48:b4:b5:64:cc:8b:d9:19:89:8d:8f:31:32:cb:43:
19:8a:94:45:ef:22:a0:d3:6a:32:74:cd:e4:80:19:
1a:f3:d1:d9:0c:88:87:36:28:5e:bb:d6:77:23:e2:
22:bc:0b:1a:0e:33:e5:af:92:0a:58:3c:5f:86:22:
91:e7:02:14:71:65:7b:ee:f0:71:71:06:a8:77:90:
93:19:86:90:57:15:d4:5a:a8:58:bd:ca:ca:60:f2:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AA:FD:58:A9:7E:4D:34:B7:D8:21:0F:75:FC:CD:DB:A1:0A:E5:7A
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/5CC30720B1F711EFB7EDF669C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.117.0-103.120.119.255
Signature Algorithm: sha256WithRSAEncryption
99:8a:eb:a7:ee:b9:0d:b4:98:45:8c:0e:6a:ea:6a:b1:8a:78:
00:85:c5:bd:a3:b3:ea:57:10:01:87:42:26:d3:a2:e2:34:0e:
cb:08:00:3b:21:0c:0e:df:a9:05:ce:aa:18:a7:b0:3d:2f:23:
14:8c:16:78:a8:79:3d:6a:7f:17:77:79:88:6c:fd:7d:b7:30:
b9:3a:3f:32:78:31:76:85:9a:a2:0b:51:26:f9:b3:71:90:70:
7c:58:b5:f9:2c:10:3f:ad:d7:7e:6a:d8:b3:55:39:3f:a9:93:
4b:59:93:56:9b:e5:1d:71:78:33:49:60:3e:ad:2c:4e:ad:3f:
03:2f:45:d6:31:7d:aa:3a:ad:8b:f3:d7:e4:13:65:ba:6d:01:
84:11:5e:f9:44:59:b7:a3:5d:7e:0e:e8:07:59:1c:81:4b:86:
56:27:ec:f3:15:2e:1d:f3:64:af:87:99:be:76:21:eb:00:4b:
b5:f1:61:7e:1d:6d:52:e6:bd:27:06:32:0f:00:dc:66:72:f3:
cd:98:ae:90:cf:c0:48:39:a4:61:9c:00:0b:14:82:13:4a:38:
a0:2a:9a:19:6a:37:3e:62:ab:d9:06:ae:d9:b0:af:2a:3d:4c:
e8:46:9d:1c:10:8a:fd:86:bc:84:a7:d0:27:43:be:f5:65:84:
7a:53:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:40:11 2025 by rpki-client