Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/705761A8F1DC11EAA5889B0CC4F9AE02.roa
File: 705761A8F1DC11EAA5889B0CC4F9AE02.roa (raw, json)
Hash identifier: 9IKIuxWIRGS18d0iLuyI925OCeYDWAtRkXlzfG5kt0A=
Subject key identifier: 41:53:E3:FC:DF:2A:3F:68:59:32:AA:FB:E0:6C:8E:13:09:37:71:B2
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 06C9
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/705761A8F1DC11EAA5889B0CC4F9AE02.roa
Signing time: Fri 03 Nov 2023 05:29:25 +0000
ROA not before: Fri 03 Nov 2023 05:29:25 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Nov 2023 05:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Nov 3 05:29:25 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65448535-fb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:08:73:f3:3e:23:90:eb:7b:5a:83:3e:42:
67:ee:9f:da:ee:b2:24:56:2e:1e:a8:3b:54:6d:c7:
7c:c2:b5:f8:45:80:30:7c:cf:0b:64:6c:35:81:d1:
33:e1:d7:65:52:59:32:60:68:e4:a1:95:21:26:9e:
8a:be:37:fb:5d:d5:13:18:48:91:a1:2f:c2:50:ef:
91:47:9f:f1:4d:45:e0:90:24:c6:a3:c5:38:17:f0:
1d:3a:ed:d9:8a:ca:8c:d6:2d:44:80:42:55:b8:c1:
05:46:be:41:78:be:9a:53:5b:b3:b8:12:1d:6e:4c:
4f:1e:59:1a:a0:d6:5c:5a:e4:bf:0c:f6:4e:22:b7:
cc:32:0f:77:01:2b:30:7b:59:bd:ae:2b:43:96:05:
6a:7d:d9:9e:fc:31:94:5e:bd:50:86:b1:5d:d8:53:
5c:5d:bb:3a:fd:ac:76:fd:14:91:71:9a:ba:66:d0:
70:f7:06:59:ba:e1:0a:b2:4d:9e:28:9e:2f:91:83:
1d:fd:91:64:c9:44:0f:b3:a9:cd:de:8f:99:1b:5a:
15:f5:30:f2:4b:80:e1:76:9c:11:b6:6d:97:8d:b8:
23:0d:07:c0:e0:76:21:c5:b8:05:14:c3:83:cd:ec:
f4:4f:de:2b:f8:5d:66:d7:3b:82:29:29:c7:4e:e8:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:E3:FC:DF:2A:3F:68:59:32:AA:FB:E0:6C:8E:13:09:37:71:B2
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/705761A8F1DC11EAA5889B0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.225.176.0/22
103.244.4.0/22
150.129.124.0/22
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
8c:c2:6b:9a:36:dc:3d:d8:4c:33:76:1f:87:71:d9:64:ca:73:
02:16:38:48:a3:8c:49:88:69:35:8d:6f:b4:5d:98:c6:bb:48:
f4:1d:5f:54:1a:9c:98:5f:df:ae:9c:4a:af:28:f0:fe:03:da:
c4:8c:31:fa:8d:ce:2e:66:d8:bd:e5:29:36:c9:41:d1:39:38:
b0:8b:6a:3a:83:df:74:5b:f0:e0:76:c1:1a:16:e4:9d:db:df:
2a:8c:a1:7b:fb:2e:54:c5:f3:e9:b0:d6:c7:38:ed:32:7a:d6:
aa:09:93:0c:d5:84:14:ba:32:fb:32:4f:66:b5:74:8c:6f:fc:
62:a8:af:37:6d:4d:6e:cf:6a:af:f6:49:2d:c3:3e:8a:4a:8a:
a5:a8:62:93:7f:ab:ba:df:fe:ba:f7:d7:ef:f9:10:6f:2a:1f:
1c:02:db:32:9b:32:a1:d9:ef:c5:42:58:7a:6e:53:c8:00:f6:
b7:e1:63:99:7b:3e:bd:5d:77:43:1c:29:5a:74:59:41:7a:85:
f6:34:d5:de:e2:8a:84:60:d7:24:52:2a:4d:9d:ee:d2:5e:5d:
8a:27:64:2f:d8:7a:71:aa:8b:6e:78:7d:f9:48:58:cb:8c:5b:
49:a7:d6:29:bd:7c:b0:c0:eb:0b:a0:04:25:f4:e1:59:40:a0:
76:aa:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org