Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB9CD68062311EFBEB3DB14C4F9AE02.roa
File: 0AB9CD68062311EFBEB3DB14C4F9AE02.roa (raw, json)
Hash identifier: 8dIDP0JJzESx77s/NOvTnMjt3IZPh4Oo1U3sNLLm/Vk=
Subject key identifier: C2:01:4B:A4:A7:8F:BC:20:56:71:7D:0A:20:60:BF:7A:09:8D:DB:57
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 909F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB9CD68062311EFBEB3DB14C4F9AE02.roa
Signing time: Thu 30 May 2024 16:28:43 +0000
ROA not before: Thu 30 May 2024 16:28:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17754
IP address blocks: 103.48.71.0/24 maxlen: 24
103.187.78.0/24 maxlen: 24
175.101.0.0/16 maxlen: 24
202.133.48.0/20 maxlen: 24
202.153.32.0/20 maxlen: 24
2401:fb00::/33 maxlen: 33
2401:fb00::/40 maxlen: 48
2401:fb00:100::/40 maxlen: 48
2401:fb00:200::/40 maxlen: 48
2401:fb00:300::/40 maxlen: 48
2401:fb00:400::/40 maxlen: 48
2401:fb00:500::/40 maxlen: 48
2401:fb00:600::/40 maxlen: 48
2401:fb00:700::/40 maxlen: 48
2401:fb00:800::/40 maxlen: 48
2401:fb00:900::/40 maxlen: 48
2401:fb00:7600::/40 maxlen: 48
2401:fb00:7700::/40 maxlen: 48
2401:fb00:7800::/40 maxlen: 48
2401:fb00:7900::/40 maxlen: 48
2401:fb00:7a00::/40 maxlen: 48
2401:fb00:7b00::/40 maxlen: 48
2401:fb00:7c00::/40 maxlen: 48
2401:fb00:7d00::/40 maxlen: 48
2401:fb00:7e00::/40 maxlen: 48
2401:fb00:7f00::/40 maxlen: 48
2401:fb00:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Fri 07 Feb 2025 08:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37023 (0x909f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:28:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a93b-7417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:f9:42:2e:a9:e6:44:bb:0e:7d:b9:ad:c3:
cd:8a:3c:cb:63:da:bd:4d:1f:59:ca:d6:34:f7:28:
0e:33:7d:31:4a:37:1e:45:5f:d6:9c:3f:ff:dc:44:
91:94:dc:05:e2:ba:b8:59:5c:22:13:09:31:ae:a7:
4b:3c:95:d9:12:5f:54:cb:80:df:ab:17:fb:e4:74:
59:e0:14:96:17:54:2e:84:57:ae:c2:5e:2c:f5:dc:
73:5f:af:07:36:52:b7:48:e6:25:1c:6b:1b:75:af:
0f:fd:70:8c:9b:d1:21:50:d1:86:db:0a:9d:f9:91:
96:79:10:f3:a3:fe:7a:25:91:64:e2:6e:cb:9a:20:
22:23:8c:49:0f:7c:0e:b8:2b:62:2f:8c:31:93:52:
63:32:b4:d6:bc:54:cc:e1:90:d4:fa:73:ab:ea:e7:
16:9a:ed:23:b1:d1:e4:04:f5:dc:c4:df:8f:83:00:
7c:a9:d0:00:11:0d:ff:f9:bf:e3:ae:4a:64:1c:48:
b2:dc:ab:0b:9c:ad:9b:57:6e:f6:80:57:17:2f:84:
48:96:eb:91:38:ac:ad:0a:88:e4:b4:77:d7:80:a4:
72:44:13:89:c3:76:57:35:51:0e:b1:3f:d0:c7:60:
25:60:59:4c:d0:0a:8b:96:5a:c6:e0:2f:8b:de:ff:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:01:4B:A4:A7:8F:BC:20:56:71:7D:0A:20:60:BF:7A:09:8D:DB:57
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB9CD68062311EFBEB3DB14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.71.0/24
103.187.78.0/24
175.101.0.0/16
202.133.48.0/20
202.153.32.0/20
IPv6:
2401:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
88:5c:6b:b8:ce:62:55:3c:f4:85:c3:27:16:65:0a:9e:47:b4:
31:20:be:a7:7f:28:2c:29:18:9e:12:cf:ff:62:da:73:fb:9e:
d0:f0:7a:46:75:2b:6a:16:22:0e:da:17:ed:a8:ad:6d:a6:56:
b5:ed:5a:62:31:8f:01:f5:b3:3d:4b:f1:bb:2b:c1:f0:15:c8:
4b:30:ff:95:c9:b1:61:55:99:dc:2b:b6:79:0c:fa:58:ee:27:
dc:61:91:53:48:ee:fd:ae:4e:5e:97:a4:80:2c:a3:08:e2:88:
20:aa:d8:1a:f4:fe:b1:68:b2:a2:a2:5f:33:4f:05:ea:81:cf:
af:19:c4:90:cc:f1:86:16:34:91:7d:16:2a:d7:eb:19:07:c6:
6f:3d:c0:52:2f:b6:88:48:82:85:9d:35:e5:14:f8:06:d3:0c:
1e:51:2d:d5:ff:0d:03:eb:ed:07:e1:12:5a:8a:3c:28:a6:73:
42:7a:7a:8b:a4:b3:58:c6:90:9e:39:3c:f6:df:6e:9d:77:4e:
a9:5a:8c:17:9f:d2:a4:21:66:1e:48:48:e5:cd:b3:5f:7c:e0:
d0:d9:b6:a7:a7:5f:c7:54:ea:50:04:c7:3e:bc:b7:24:5a:95:
13:1d:da:b0:7e:40:ac:1b:8d:2f:45:a1:ec:cc:54:de:9b:cc:
a7:1a:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:36 2025 by rpki-client