Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/6A056E20BC8B11EFB075381FC4F9AE02.roa
File: 6A056E20BC8B11EFB075381FC4F9AE02.roa (raw, json)
Hash identifier: z9FtwRycmw1xJJubed7pKOkECuOqubJFRg9nEXMu5eI=
Subject key identifier: E3:04:28:30:C7:D9:30:EE:E4:70:82:71:D1:45:6E:87:5B:D7:25:F3
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 011F
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/6A056E20BC8B11EFB075381FC4F9AE02.roa
Signing time: Tue 17 Dec 2024 15:27:24 +0000
ROA not before: Tue 17 Dec 2024 15:27:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 8100
IP address blocks: 103.115.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 01:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D
Validity
Not Before: Dec 17 15:27:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6761985b-c0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:1a:59:81:47:7c:32:e4:92:d7:3d:eb:4f:
8a:55:3a:e2:b3:b7:72:71:16:eb:21:13:f4:bc:ab:
55:60:a4:60:b2:53:a9:e8:0b:6c:ac:4e:af:a3:2f:
c5:36:50:d5:71:74:cc:08:16:61:41:64:4e:f5:b6:
02:42:56:9f:67:05:40:19:d8:c5:bf:8c:f4:bd:44:
46:f3:98:4f:10:99:05:61:67:20:62:a4:75:14:0d:
00:e1:bd:55:80:c6:29:94:16:06:6d:dd:18:55:57:
10:14:c1:ae:65:31:37:15:e3:6b:da:93:c9:c5:3a:
59:90:e1:2f:fb:63:ca:e3:f7:c2:41:7f:ca:9e:69:
ca:28:81:a6:49:15:b0:1d:2d:ae:9a:f5:9d:4a:bc:
cb:ad:0d:e9:c2:9a:7a:f3:05:4b:f3:85:b6:b8:bc:
38:fd:d7:c0:a3:3c:21:08:27:58:f2:95:5e:b3:b5:
65:30:df:67:d3:b2:be:28:43:7e:57:99:fd:d1:b4:
04:04:91:6f:a4:5d:d9:9f:78:4e:c9:7f:a4:db:ca:
67:71:96:ec:6a:a6:2e:8f:a6:f9:24:53:86:33:da:
94:03:7f:df:e5:1f:1f:d4:f7:e0:e2:d5:c2:2f:0f:
f3:4b:1d:b7:c6:3e:71:79:d8:45:45:8f:07:04:e3:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:28:30:C7:D9:30:EE:E4:70:82:71:D1:45:6E:87:5B:D7:25:F3
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/6A056E20BC8B11EFB075381FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.17.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a6:99:30:82:20:b6:2a:03:fe:20:00:5d:61:2d:26:7e:97:
ef:51:7e:e2:0f:9f:d1:12:4c:e3:ca:03:ce:da:41:2c:5a:12:
0b:f5:ea:85:ca:fa:83:14:f1:6d:b0:93:3b:a6:00:0f:bd:f3:
72:87:c2:78:1a:a0:3c:3d:72:a4:a6:1c:33:57:20:ec:03:43:
a2:74:a6:e9:30:73:9f:b4:f8:5c:d8:fb:c2:fa:bb:1a:3b:8a:
b4:51:bf:ce:3e:e5:2f:b2:0c:8a:fd:62:d7:3e:88:21:f3:65:
89:ae:ac:df:99:7c:5c:e3:30:93:85:63:2e:e5:85:d2:5f:7e:
7c:1e:41:2d:2e:59:9f:14:dc:11:64:f8:55:f7:cd:23:61:b2:
6e:bc:ec:ec:01:e0:d1:ad:3b:77:a9:8b:f5:52:05:e7:25:13:
0e:96:8c:90:24:f5:29:81:7b:ef:92:93:ed:e8:27:77:f4:3e:
99:29:69:aa:63:62:16:4a:ee:ee:46:64:0b:aa:f3:bf:6d:4f:
46:53:b9:e0:6d:a1:4f:4a:3e:14:bc:9b:71:b8:11:2c:62:4f:
e7:b5:7b:44:69:39:90:57:8b:df:bb:9b:8e:70:06:f3:a1:35:
34:aa:cc:c6:8d:d9:a1:5c:1f:73:36:bc:8e:db:97:bd:d8:59:
b2:1a:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:06:05 2025 by rpki-client