Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/4F00BAC8BDB511EF966A4143C4F9AE02.roa
File: 4F00BAC8BDB511EF966A4143C4F9AE02.roa (raw, json)
Hash identifier: HrEx83mn3UlSIAruoEF8YbdEaRaAvfJycSzbJf/wAiE=
Subject key identifier: 40:1C:CF:0B:18:4C:CD:6F:D9:76:01:DF:F3:4B:AD:C6:84:EC:D9:DB
Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045
Certificate serial: 06A3
Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/4F00BAC8BDB511EF966A4143C4F9AE02.roa
Signing time: Thu 19 Dec 2024 02:59:48 +0000
ROA not before: Thu 19 Dec 2024 02:59:48 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58712
IP address blocks: 103.20.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Dec 2024 09:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699 (0x6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E157
Validity
Not Before: Dec 19 02:59:48 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67638c24-42e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:bc:fb:30:04:79:a3:e7:a2:a5:3d:61:5e:
99:c7:10:db:bc:5f:02:54:c3:d3:64:d5:af:c8:6a:
78:34:45:dd:c9:b2:d3:23:30:90:d2:a6:5a:8f:db:
64:91:86:97:b4:51:9f:42:da:81:12:9d:cf:af:b4:
1e:42:a1:00:5f:b5:04:52:5f:90:26:56:d5:19:93:
42:8c:35:5f:c1:d2:13:05:ab:ee:b7:58:05:09:8e:
34:fa:5d:34:73:40:74:e8:4e:96:5e:26:46:77:c9:
f5:3c:44:1b:bd:bc:97:d1:94:83:48:ae:75:88:a7:
79:2d:0b:5c:ee:21:55:63:fd:fb:e7:cb:da:c5:c0:
3b:ca:4c:29:a3:bd:c4:b0:19:18:d7:c2:53:a7:4f:
3b:97:e2:fd:f9:76:cf:0a:70:9f:02:fa:a9:ad:fb:
99:f1:ff:2b:6c:90:98:44:2d:2b:e7:3a:f3:77:9e:
ef:4b:9f:64:12:4e:88:0a:5f:86:f9:2b:95:54:fb:
a7:9b:2c:dc:a1:94:1a:11:2e:52:25:f1:fd:3c:8a:
f3:58:95:5d:e2:0a:bf:27:75:48:db:8d:b5:5c:46:
32:74:0b:fc:aa:57:fb:21:4f:3e:63:a9:11:d8:0e:
24:0a:d6:16:84:de:4c:23:d7:57:5f:7b:a7:0f:6f:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1C:CF:0B:18:4C:CD:6F:D9:76:01:DF:F3:4B:AD:C6:84:EC:D9:DB
X509v3 Authority Key Identifier:
keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/4F00BAC8BDB511EF966A4143C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.246.0/23
Signature Algorithm: sha256WithRSAEncryption
06:e8:e7:55:d4:92:3a:ec:a7:d7:c6:9a:0f:42:9d:55:bd:5b:
ec:dc:30:0b:3f:14:76:da:96:47:fc:d1:41:65:b8:1e:86:0f:
47:23:ed:63:54:48:12:6b:96:00:59:73:f5:14:6b:05:59:6f:
e7:70:71:41:7d:e3:64:bb:ac:d5:f1:32:b4:14:49:72:ba:43:
de:49:9c:fc:b4:bb:51:96:87:72:65:61:2f:94:82:67:be:df:
d9:b0:4e:72:3c:ac:70:7a:82:85:75:de:d2:7b:7e:ed:24:6b:
ca:e7:aa:1a:89:e5:e9:82:88:ba:93:db:af:19:79:f1:8a:b8:
62:10:56:dc:67:28:00:60:dc:a2:8f:72:2d:90:1b:0c:2a:bb:
d9:87:e7:29:29:cc:43:c5:3d:c9:11:d4:2c:56:5c:0e:e7:e9:
c8:9e:25:2b:5d:db:3f:2f:81:86:66:a4:95:5c:ca:9f:0a:37:
71:06:1d:29:69:4b:de:86:b9:98:02:f9:55:07:00:b5:80:ea:
60:99:ab:c4:d5:b9:7e:d9:25:a8:e8:87:f6:a7:ea:18:a0:4c:
df:90:9c:8c:73:b7:60:d6:95:bd:09:a3:20:c6:3f:05:ad:49:
93:06:50:53:ee:93:b2:24:6b:ab:ef:e7:a7:c3:58:a9:3b:b9:
70:1b:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:00:45 2025 by rpki-client