Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/D96FDB32A57111EF9BA85A81C4F9AE02.roa
File: D96FDB32A57111EF9BA85A81C4F9AE02.roa (raw, json)
Hash identifier: j0WeveFat8+pSjES+Y1wJaerwrr++4fCNG/ZMhZVQS0=
Subject key identifier: 42:03:97:94:92:F4:F6:F9:C9:FE:CE:6C:9B:E9:C2:C4:FD:45:0A:AF
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 1318
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/D96FDB32A57111EF9BA85A81C4F9AE02.roa
Signing time: Sun 24 Nov 2024 15:18:02 +0000
ROA not before: Sun 24 Nov 2024 15:18:02 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 138039
IP address blocks: 103.120.118.0/24 maxlen: 24
103.120.119.0/24 maxlen: 24
2407:1840::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 02 Feb 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4888 (0x1318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD
Validity
Not Before: Nov 24 15:18:02 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=674343aa-d7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:25:5c:0b:43:d8:ab:46:65:ac:a8:43:82:
f9:b3:ae:d4:44:07:1d:1b:e4:21:a5:af:16:d3:b0:
91:25:30:56:cb:de:02:29:96:d3:c9:17:ea:80:c5:
cd:eb:78:21:ab:a9:52:a8:5d:7d:5b:8e:17:f9:40:
e2:29:c2:29:44:d1:5f:01:14:c3:89:47:b1:99:89:
8e:75:51:90:29:0a:06:e8:ae:e2:8b:c2:81:8a:af:
1a:09:75:25:8e:53:ec:e8:74:69:07:4c:b8:13:96:
60:f5:6e:6d:89:93:7f:75:2f:c3:60:42:00:88:ac:
f0:b2:94:8b:83:1b:db:8b:9d:c2:53:75:d0:35:09:
ab:8b:e3:5e:7f:a9:8c:29:64:b7:92:24:07:aa:2e:
77:7f:81:1a:36:25:69:85:60:93:a7:63:5c:c3:9c:
cc:1b:c0:cd:ed:e7:0c:5d:0f:65:8e:d9:bc:93:d6:
a8:dc:29:5e:66:cc:ee:c8:5d:d6:11:79:1a:66:4f:
d7:f3:7d:7d:a1:2c:a9:1e:18:46:79:e3:9b:72:e1:
53:96:93:68:14:8e:93:ee:f5:63:56:c4:da:10:2c:
96:63:a1:fb:97:6a:c1:15:ef:99:fb:c5:ea:1e:f7:
1d:cc:c7:57:b8:8f:4d:1c:de:53:ed:5b:14:2b:95:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:97:94:92:F4:F6:F9:C9:FE:CE:6C:9B:E9:C2:C4:FD:45:0A:AF
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/D96FDB32A57111EF9BA85A81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.118.0/23
IPv6:
2407:1840::/32
Signature Algorithm: sha256WithRSAEncryption
9d:a0:c8:fd:cb:44:d4:5e:72:67:87:56:e6:19:27:4d:40:ba:
32:f6:a8:b7:ea:48:2e:7b:21:f0:3d:17:bb:62:09:1d:50:ea:
a5:08:0a:1d:3c:74:0f:74:36:8f:74:7f:f4:5b:44:54:e8:53:
85:a6:0c:41:6c:1d:48:5a:42:38:d7:f1:b4:f1:f4:db:9e:9f:
d2:e0:7c:ae:ed:25:5e:d0:24:9a:7d:34:e3:9f:83:03:55:e5:
4c:dc:80:1a:71:4d:61:81:fe:9f:35:e0:24:08:4e:58:32:24:
e2:71:5c:81:30:29:5c:6d:a2:0c:6c:f7:3a:94:4b:1d:31:2f:
fe:53:d7:35:f9:23:aa:99:8b:58:a5:09:5a:ea:5c:bd:73:41:
3e:b0:fc:90:d6:52:2d:5e:31:b7:0c:37:c6:d2:3f:c5:3d:a9:
3f:2e:e8:ab:9b:54:60:8f:33:31:2a:f0:16:53:a8:1b:b7:41:
49:7b:61:6d:92:ba:cd:c3:4d:15:f9:91:5b:47:20:ac:39:93:
45:41:ee:51:0c:0f:d3:f3:fd:86:c8:36:59:dc:2a:3c:3e:2d:
86:15:03:d4:03:63:41:3e:6d:0a:f6:c3:52:0d:38:21:ce:fe:
71:36:38:e3:d3:65:02:b2:1d:37:e7:ad:74:b6:19:f9:8e:18:
9a:d2:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:40:11 2025 by rpki-client