Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/46726A44E22E11EF90B9F456C4F9AE02.roa
File: 46726A44E22E11EF90B9F456C4F9AE02.roa (raw, json)
Hash identifier: x5WhVh799aMt5Ghc8I65hv+hE9BF91MxIHs+tbRI+PU=
Subject key identifier: 05:9B:94:80:8B:F0:20:C7:6B:36:34:4B:1F:1D:B1:E5:37:B3:1D:41
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 0185
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/46726A44E22E11EF90B9F456C4F9AE02.roa
Signing time: Mon 03 Feb 2025 12:56:25 +0000
ROA not before: Mon 03 Feb 2025 12:56:25 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 23674
IP address blocks: 103.122.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 13:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E
Validity
Not Before: Feb 3 12:56:25 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=67a0bcf9-48f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:d3:8f:1b:4d:64:97:02:60:61:3c:b9:d7:
b1:a0:7a:50:d0:db:0e:9c:93:29:1b:6f:75:5d:84:
db:23:0f:f3:91:01:cc:00:a6:c5:31:b8:fc:b6:bb:
80:ce:5d:7c:f2:89:f9:4b:3f:af:32:88:7a:49:5a:
21:ee:6e:59:1f:9d:80:e5:7a:09:4f:da:a3:fa:cb:
d3:6d:7c:8f:97:7e:bd:ab:15:d1:b9:b5:df:c0:f1:
a7:f7:7e:06:91:04:aa:c1:d3:e7:db:60:0e:24:83:
3a:99:79:4c:d6:ac:e1:20:f0:cb:a9:b8:42:3c:6a:
1c:55:ef:ea:18:2b:f8:92:80:be:22:1c:16:e8:ea:
8c:b0:b0:36:c1:46:00:41:af:bc:d2:9a:9c:da:b1:
9e:f3:24:eb:93:7b:38:6d:71:65:8d:7e:39:82:6b:
26:e5:78:8d:43:00:da:cb:29:48:f9:ba:39:9c:8e:
a9:e0:2a:bf:01:59:45:ec:a6:94:f7:3b:8d:4c:47:
20:12:55:2b:5a:8d:13:82:b5:ae:df:87:cb:1a:bb:
5a:17:89:79:a2:8a:1d:ff:b2:32:5d:96:6d:49:9b:
59:0b:27:7d:7a:cd:31:15:09:d5:ce:91:fa:a6:02:
7b:13:13:31:03:5d:ba:f7:a8:5f:c7:e0:c6:2c:c2:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:94:80:8B:F0:20:C7:6B:36:34:4B:1F:1D:B1:E5:37:B3:1D:41
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/46726A44E22E11EF90B9F456C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:1c:11:00:8d:4e:25:fc:f0:76:60:d1:9c:7d:af:a5:22:16:
04:0d:ba:79:e6:f8:e0:2c:68:8d:17:2f:21:0e:ae:25:90:ce:
22:4b:64:46:fe:77:05:2c:33:49:2e:eb:59:a6:01:f3:a6:66:
fd:dc:63:d5:c0:37:8f:c4:4d:b9:8c:0f:ab:cf:9a:92:fd:9b:
b1:37:29:37:5b:48:af:bf:d3:9b:f2:76:b5:01:f8:a3:ba:d0:
db:12:8e:3d:58:de:e6:f5:92:90:0d:c6:3b:5f:96:d8:85:17:
54:7d:5b:cb:5b:7a:9d:38:ed:03:5e:4e:54:81:22:bd:9a:c0:
1d:27:eb:df:0f:d2:bc:2e:d0:67:4b:38:37:c5:0c:aa:67:b2:
88:f9:33:19:f9:31:e4:d3:17:47:6f:06:70:c3:d4:0c:f3:07:
d5:4e:10:6c:54:40:f9:d0:56:4c:2b:b5:b6:68:ec:c8:2a:1e:
50:3b:01:6f:9d:6f:fe:13:59:8f:59:84:05:d4:48:08:b9:0e:
11:14:6a:4f:cf:87:38:c4:37:28:2f:9a:ed:60:3e:f5:42:9f:
23:12:f5:ca:a4:b4:ca:1c:da:ac:be:72:4b:d9:e0:58:3f:a4:
6f:c1:01:f5:8a:5f:06:3e:04:d8:0b:b8:0a:56:cf:d7:09:c3:
49:da:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:00 2025 by rpki-client