Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/783B9366BCEA11EF9C9D3264C4F9AE02.roa
File: 783B9366BCEA11EF9C9D3264C4F9AE02.roa (raw, json)
Hash identifier: NPSnYkbl4n8AgBlWIVQqhCRHVsZQfwHEL/CnRxlURiU=
Subject key identifier: F1:05:E8:83:5F:17:CE:0C:6A:FF:F0:D1:94:54:E5:A4:0F:52:06:1D
Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045
Certificate serial: 069E
Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/783B9366BCEA11EF9C9D3264C4F9AE02.roa
Signing time: Wed 18 Dec 2024 02:47:50 +0000
ROA not before: Wed 18 Dec 2024 02:47:50 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58712
IP address blocks: 103.20.246.0/23 maxlen: 23
103.20.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 02:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694 (0x69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E157
Validity
Not Before: Dec 18 02:47:50 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=676237d5-76a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:57:4f:ea:6a:41:ff:d5:9b:a8:09:bd:9d:
60:56:aa:cd:d3:99:51:bd:03:ab:4f:b8:01:2f:ee:
dd:63:d1:6a:75:ef:53:8c:37:69:99:66:a5:1a:66:
d8:84:21:e8:66:c3:60:03:9d:17:77:80:61:f0:cd:
63:bc:97:7b:c3:41:c9:89:d4:9b:ff:03:01:28:55:
05:76:11:ef:1b:f5:2c:45:66:dc:6f:9f:08:fa:47:
11:96:f9:03:c9:0f:ba:57:c6:82:4b:7e:1c:ba:b8:
99:f9:84:6d:66:69:35:e9:37:81:39:ab:30:0a:5b:
54:b9:d8:f0:cf:53:6d:8a:65:53:69:8c:b3:4a:22:
a0:a1:ca:c6:f0:e4:ba:25:78:8e:e0:e2:e1:ae:62:
4a:b1:e3:92:ca:06:da:f8:ce:9a:19:b1:60:ed:a6:
88:ff:c2:f3:3c:0b:48:24:ff:04:07:12:d5:bf:ba:
f7:ff:a5:2a:55:f5:9b:6f:ad:39:fc:fd:7e:ae:d4:
7e:f6:7d:7f:68:da:8c:23:7b:79:bb:cd:e7:ac:f9:
f6:3c:99:1c:e5:ed:4d:77:c3:2f:dc:88:b8:b5:ad:
be:11:05:72:8b:fd:3a:f6:1f:9f:d5:4d:a7:e1:1b:
bb:05:f8:b3:c7:77:6f:b4:73:f1:c8:c1:de:d3:bb:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:E8:83:5F:17:CE:0C:6A:FF:F0:D1:94:54:E5:A4:0F:52:06:1D
X509v3 Authority Key Identifier:
keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/783B9366BCEA11EF9C9D3264C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.246.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:c4:7f:f5:51:7d:21:ab:95:bf:ac:06:65:93:16:a9:96:e5:
2a:71:9a:ac:a8:ff:2d:43:41:fb:bc:bb:57:08:1d:4f:23:44:
22:58:91:23:c3:fc:4e:92:6e:79:03:d7:26:53:ee:2a:c4:76:
6f:99:cf:ca:17:36:bc:4e:76:c5:52:c8:38:10:5a:95:ef:5d:
dc:b8:1f:10:26:9b:fe:87:ef:10:cd:14:7d:53:90:f2:63:27:
65:f8:d4:79:5b:30:c6:60:3d:e5:68:04:d0:3c:ee:b7:8b:f3:
d8:da:e6:73:45:96:3b:c5:e5:c4:ff:68:83:1e:c8:bd:74:73:
4d:4a:50:30:b7:72:00:d2:b7:ce:2c:1b:bc:98:35:15:cc:b0:
cd:4c:9e:fe:e8:d9:42:dc:11:ba:94:3c:8e:b0:d5:d0:e7:61:
8b:04:ef:0f:cf:30:c5:7a:aa:4f:52:8d:4f:84:3d:47:a3:08:
b5:ed:9e:6d:34:94:58:14:76:eb:81:d3:47:80:c1:58:18:8f:
9e:af:31:88:b3:f7:76:5d:11:81:06:cd:4e:51:d7:df:6f:79:
d9:7c:ff:da:21:dd:d6:5d:02:77:66:e5:d0:ff:0f:a9:15:85:
5c:2b:86:1c:5d:fd:fd:13:cb:e2:88:b2:36:c6:5a:ce:8b:d1:
7a:be:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:06:09 2025 by rpki-client