Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12906242876E11EE9DB65984C4F9AE02.roa
File: 12906242876E11EE9DB65984C4F9AE02.roa (raw, json)
Hash identifier: Ycwg+KTrcej6K8JwMzMjxnUhL+kH8NgeqRqnKGEFsYQ=
Subject key identifier: EB:A7:7D:E2:48:3F:7E:B3:2D:ED:7E:2C:AF:27:B2:DB:8D:EC:54:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8DD0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12906242876E11EE9DB65984C4F9AE02.roa
Signing time: Thu 30 May 2024 16:17:10 +0000
ROA not before: Thu 30 May 2024 16:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141853
IP address blocks: 103.171.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 05:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36304 (0x8dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a685-3de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:f4:8a:da:07:95:23:6a:2b:33:b2:8a:00:
c8:fa:b7:14:d6:36:c8:4e:53:46:ab:0c:2e:2e:07:
30:b9:86:cf:3f:99:5f:72:a3:63:a8:68:34:ed:19:
fa:7a:9f:73:eb:44:29:40:c1:4f:61:90:18:7b:be:
2b:dc:4c:90:81:48:7a:df:99:62:ba:36:90:0e:41:
3f:85:85:db:76:3a:1e:c9:c6:87:34:45:71:a2:fc:
11:22:2c:ab:a6:eb:81:ed:e5:af:9a:6b:d6:81:51:
0d:61:d6:c2:a9:ef:8f:14:38:58:85:2e:39:6c:f5:
8f:c3:e6:5e:34:ae:68:b3:4e:5b:d7:25:fe:ff:20:
5b:03:21:fc:68:84:e3:48:ad:40:7b:72:b9:b2:97:
64:04:27:ce:5f:54:ff:f0:e6:df:91:24:72:8a:ec:
20:89:92:77:8e:a2:e9:9e:c1:ac:f9:86:69:80:9c:
f2:20:de:f2:f1:91:36:e4:89:66:a9:52:ed:af:84:
88:b1:16:2a:4c:97:7f:ee:86:2d:d0:45:7e:c6:a1:
08:73:79:b5:2d:4d:e1:00:f7:1f:37:17:99:ac:36:
76:91:3a:dc:24:c1:1b:cb:5c:59:cf:23:e7:fa:9b:
1b:2e:33:ab:7b:47:92:4a:65:13:1b:ad:53:00:d0:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:7D:E2:48:3F:7E:B3:2D:ED:7E:2C:AF:27:B2:DB:8D:EC:54:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12906242876E11EE9DB65984C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c5:0a:2b:a6:dc:b5:7a:b7:c5:e7:aa:b5:a7:1e:63:0a:5d:
97:dc:6e:ce:35:64:0a:40:cc:d8:2e:eb:9b:7c:9e:cb:4b:a6:
7d:ad:6a:8e:c5:42:f3:6e:0e:ad:c8:83:0e:a4:05:b5:1d:0f:
82:bc:06:70:e3:fc:7e:9d:f3:d5:48:9a:54:a5:6e:ec:7a:83:
94:fa:03:e6:10:05:03:10:29:39:a2:23:38:bf:f7:34:e6:8d:
05:48:64:43:96:ca:a9:d7:8c:60:47:a2:9b:72:ae:06:7b:23:
9c:9f:e5:90:2b:db:4a:85:d8:c3:9f:43:85:cb:1b:a3:01:de:
fd:70:28:f8:4d:1c:9e:1e:13:94:35:2e:c7:84:a4:06:97:47:
67:98:8d:56:68:7b:d0:9d:ac:85:bb:b4:33:23:88:90:52:19:
46:8b:0a:b8:cf:03:74:44:e6:85:22:be:97:ca:4e:2a:f5:7e:
5e:c8:ce:bf:74:27:6e:65:e7:34:77:83:c3:28:a2:39:cc:69:
8c:09:19:60:12:50:90:9f:c4:e2:96:c7:e4:20:17:b9:68:39:
3d:4d:a1:11:0b:da:3e:7e:9c:3e:63:85:4b:6d:e4:30:5f:f8:
34:64:28:97:1b:70:eb:e4:09:37:a7:eb:6c:1a:e4:85:e3:89:
9c:61:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:27 2025 by rpki-client