Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05E10D62719211EF9E29B521C4F9AE02.roa
File: 05E10D62719211EF9E29B521C4F9AE02.roa (raw, json)
Hash identifier: 2g3hjSo2UdVjdtfcs8kTH70IW84OLlcoDNQdU3xHyTw=
Subject key identifier: 30:2E:AB:83:36:FA:44:58:49:9A:26:14:92:00:CA:1C:F6:40:CE:04
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9886
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05E10D62719211EF9E29B521C4F9AE02.roa
Signing time: Fri 13 Sep 2024 05:35:45 +0000
ROA not before: Fri 13 Sep 2024 05:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
103.14.197.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.110.248.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Sep 2024 11:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39046 (0x9886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 13 05:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e3cf31-7ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:8a:68:95:9f:17:b2:b6:86:4e:ba:95:32:
d8:e4:af:0a:2a:df:56:de:a9:ae:16:1d:03:a6:28:
99:d5:87:e6:13:eb:6f:88:a2:dc:18:64:e2:2e:58:
55:e5:a8:d2:3c:b9:1a:9c:04:87:f0:99:70:6d:88:
06:34:28:16:94:25:f8:3e:2f:e2:e3:12:b9:44:ed:
cd:9c:dc:80:6c:75:4f:36:4b:fe:cc:8a:3e:ca:d2:
0a:02:85:af:15:bc:39:20:25:89:66:50:d7:40:d2:
d8:04:17:9c:72:fa:d4:ca:c2:2f:ba:c7:48:47:7e:
ac:ad:f3:3b:77:7b:97:32:72:07:48:3a:06:38:9b:
34:ae:bb:ed:69:1f:cf:70:64:d4:e0:65:47:2d:b8:
cc:a9:f5:b3:82:3b:15:3c:07:1d:e3:88:83:00:fa:
8d:40:6d:a2:ee:ab:7d:5e:16:c9:fc:b0:2e:ee:2f:
41:16:16:30:ee:a1:c5:ed:df:d6:34:46:0d:b9:94:
ee:36:03:d0:33:a2:3e:77:44:13:08:a4:e4:28:0b:
12:82:62:36:02:53:20:e8:41:96:cb:fa:bd:4f:7a:
96:81:d2:a2:b5:ac:38:b0:9d:27:48:c4:5b:f3:fa:
48:51:65:04:65:ed:af:6f:51:b6:00:b3:a6:4f:ec:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2E:AB:83:36:FA:44:58:49:9A:26:14:92:00:CA:1C:F6:40:CE:04
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05E10D62719211EF9E29B521C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
103.14.197.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.55.84.0/22
103.86.20.0/22
103.108.76.0/22
103.110.248.0/22
103.118.8.0/22
103.142.64.0/23
103.171.236.0/23
103.180.216.0/23
103.200.48.0/22
103.206.64.0/22
103.226.224.0/22
103.228.172.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
04:e6:a0:cf:be:b4:e5:5a:ea:40:62:a4:d3:9b:a2:37:44:7c:
30:c8:38:d2:71:c0:7c:6f:68:c2:fd:a9:ca:1f:87:d9:9f:a7:
37:61:4e:6e:d4:81:a7:33:5a:40:29:89:4d:62:60:cf:c9:ed:
f1:79:4d:e7:7f:56:7a:d7:9a:8c:95:aa:85:db:c9:6b:fd:b3:
35:25:1d:3b:e2:88:09:ad:cd:c6:28:24:a3:3a:c0:14:e3:99:
d8:03:2f:d3:b9:0c:24:0a:c7:d3:36:a5:76:f4:e1:bf:11:55:
41:bf:d7:87:50:6b:f1:a5:01:5e:44:8e:12:4a:d6:f5:c9:de:
e7:84:b7:ed:cd:75:a6:e3:99:02:56:8f:8f:03:a6:9a:46:16:
7b:70:92:07:8b:8a:19:11:93:c1:55:68:2d:5a:bf:d1:35:27:
a5:fb:f0:87:15:76:b3:4f:1c:dc:31:ba:02:d4:02:b1:71:36:
87:0e:2d:82:b1:61:d5:c8:bb:bb:43:aa:80:2b:cb:b6:42:c2:
6a:d1:5b:3c:88:01:df:04:c9:c7:88:d6:4e:a9:5c:c0:94:59:
13:2c:8e:11:f8:00:52:be:fd:f7:f0:be:cb:24:1d:d0:d2:e4:
be:9a:90:1a:58:4a:b7:70:b9:23:86:6f:92:8f:d1:60:ff:d5:
97:33:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:51:21 2025 by rpki-client