Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3C63FD0A5A2611EF8C4A222CC4F9AE02.roa
File: 3C63FD0A5A2611EF8C4A222CC4F9AE02.roa (raw, json)
Hash identifier: FxRO0iN6PMQbWxcc5itr3YJ/gDQA6nqqJ4qZu1u7NVA=
Subject key identifier: 19:3A:3A:8E:9B:2B:8D:ED:43:07:B1:7F:83:B8:90:CC:3E:F0:5E:4F
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 0282
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3C63FD0A5A2611EF8C4A222CC4F9AE02.roa
Signing time: Wed 14 Aug 2024 10:16:14 +0000
ROA not before: Wed 14 Aug 2024 10:16:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137823
IP address blocks: 103.185.226.0/24 maxlen: 24
103.185.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 18:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B
Validity
Not Before: Aug 14 10:16:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66bc83ee-4641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:8b:82:87:65:94:4c:32:58:7a:51:5e:52:
79:c5:81:27:a9:9f:eb:33:66:04:ec:18:c0:ba:37:
e4:f0:be:1e:b7:3c:ab:f0:ff:a9:b7:85:0e:c7:8b:
32:dd:37:0a:b2:a5:b8:eb:54:da:f7:c0:35:a5:a3:
db:1f:46:ac:a2:b8:b8:24:24:ee:7d:ec:ca:c8:c5:
b3:65:5a:8c:43:d6:4a:5b:54:b8:77:fd:26:9a:70:
9c:d0:84:ba:79:e6:18:43:aa:fb:e5:ab:93:38:9d:
85:5c:a2:ba:32:f0:94:0c:38:0d:be:e1:e8:61:be:
5f:5f:71:9f:18:77:15:9b:68:e6:d3:9f:10:4b:3a:
bc:9a:f9:39:df:f9:62:5e:07:1c:8f:1e:0b:c8:80:
4d:7e:17:af:cd:13:19:76:03:d2:9b:a6:f7:35:61:
d6:d5:78:96:48:39:66:92:7a:92:f0:7c:6e:7c:20:
90:7f:04:b7:c7:ea:33:a1:af:a6:60:b1:1b:75:88:
90:df:7a:90:58:2c:bd:a4:e0:24:8b:d3:63:10:fa:
88:25:2c:d8:de:b2:33:e3:cc:02:50:29:57:05:75:
8f:76:0c:cd:83:18:f4:9f:56:db:1c:d0:9e:5d:d3:
12:40:60:ae:8a:1d:ca:14:64:0f:2e:df:dd:53:f6:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:3A:8E:9B:2B:8D:ED:43:07:B1:7F:83:B8:90:CC:3E:F0:5E:4F
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3C63FD0A5A2611EF8C4A222CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.226.0/23
Signature Algorithm: sha256WithRSAEncryption
46:b5:b6:eb:32:21:82:36:2a:9a:2e:97:b2:0d:38:a1:8d:f6:
c9:22:39:82:7a:88:d6:ec:a4:d1:6f:4e:e2:78:77:cd:dd:10:
ef:97:53:cb:98:0d:9c:3c:6a:b1:98:74:f4:ee:41:19:c3:09:
c7:e0:01:22:2e:c2:c2:fd:b9:c3:f2:6d:34:7c:f2:79:82:30:
b4:b6:89:3b:69:0d:61:38:c9:f6:cb:8f:c0:aa:9d:be:58:5f:
fe:65:8b:0f:17:12:7e:da:01:c2:bb:8e:df:a9:e7:40:10:2c:
d6:a8:57:b0:42:62:ed:52:a7:35:ec:07:d4:5b:5d:67:c2:23:
af:33:9b:46:ed:e1:f1:55:a3:cd:ee:30:10:16:4c:ba:89:2b:
5c:b7:cd:0e:a7:4b:df:9c:30:27:98:65:82:e7:e9:a6:39:4c:
93:43:e5:2a:e7:97:65:af:f4:83:99:39:4e:c7:7c:6c:69:bc:
a5:77:23:05:d2:61:47:57:25:bf:09:0b:25:c2:90:c3:8f:42:
5c:c5:96:40:32:46:9b:0b:df:70:a8:9e:5b:15:0b:da:3a:12:
39:22:c8:44:f8:61:20:ea:1e:5d:47:2e:7a:68:45:3d:63:ce:
6b:57:0f:ba:00:d1:5c:d0:ee:a8:fa:bf:8a:3c:ed:d4:fe:83:
1b:02:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:37:06 2025 by rpki-client