Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/149AAD1AE5F311EFA523BD31C4F9AE02.roa
File: 149AAD1AE5F311EFA523BD31C4F9AE02.roa (raw, json)
Hash identifier: 0NSliXo+zqR4LrMeJxKELUAC3+Jbn0sBVvqZjyGwuKU=
Subject key identifier: 78:56:4F:18:10:BC:BC:54:54:F7:79:55:E8:BE:45:45:85:33:C7:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A572
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/149AAD1AE5F311EFA523BD31C4F9AE02.roa
Signing time: Sat 08 Feb 2025 08:02:46 +0000
ROA not before: Sat 08 Feb 2025 08:02:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 843
IP address blocks: 103.97.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 05:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42354 (0xa572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 8 08:02:46 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a70fa5-c005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:36:5e:81:8f:c9:3d:f9:36:67:8c:81:bc:
8b:d2:94:cf:67:d5:91:f2:1e:8e:5a:56:42:51:b4:
bb:63:32:25:47:32:cb:51:40:c3:0c:72:a4:c1:36:
80:06:32:5b:ba:f9:ab:2c:00:4b:81:9e:3f:64:42:
6c:33:51:94:8b:d7:e5:3d:95:7f:c4:9d:83:a6:1a:
1d:33:18:2c:81:12:df:1e:13:9e:21:68:39:2c:bb:
6c:ae:dc:b4:d2:c1:95:5b:52:9f:8f:b9:d3:f2:b5:
5b:5b:26:0b:f2:ef:13:22:7c:f1:94:65:ae:d0:15:
8d:3d:be:d0:7e:92:6c:19:d9:2d:7b:f4:52:86:b8:
68:83:b7:83:d0:c2:6d:16:e0:bb:fd:bf:30:1e:54:
17:02:00:f9:0e:57:1d:0f:d7:ec:dc:27:9a:99:6e:
56:06:f6:74:fc:08:69:10:c7:7c:01:86:ed:27:a2:
e2:b0:c9:4d:eb:aa:f2:b8:53:16:c6:76:2c:f8:60:
b5:91:6c:16:e2:cf:69:bb:ec:e5:91:bf:6f:0a:52:
6f:9d:b0:9d:11:0d:d8:0b:70:58:0f:76:00:d5:6a:
5f:ca:79:24:d5:c6:97:24:97:60:08:29:3a:25:fc:
fc:0a:d5:13:72:43:1c:5e:e0:5f:cb:fb:90:d8:d1:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:56:4F:18:10:BC:BC:54:54:F7:79:55:E8:BE:45:45:85:33:C7:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/149AAD1AE5F311EFA523BD31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:56:7e:b3:51:1f:47:48:d5:f0:a6:33:af:c8:64:2e:7c:4a:
6d:72:42:ef:3b:39:75:42:88:20:bb:ec:0a:d6:18:57:96:f0:
ed:7b:77:b5:70:cc:32:49:84:f8:3f:03:d3:18:f1:5c:eb:ff:
a2:9d:dd:24:18:1c:14:17:e5:dc:73:9d:a7:7f:23:9b:a7:90:
74:55:c8:0b:ba:e9:78:62:c3:10:13:29:9c:47:86:e4:e6:8e:
e6:d3:71:18:aa:c6:10:ce:1b:d6:63:58:ec:88:38:25:7d:02:
de:ac:29:ef:f8:ed:c6:60:40:6e:4f:3f:b0:d8:3e:40:6d:96:
a0:7e:70:7a:6e:9b:9f:e6:47:40:16:ce:55:97:d6:b2:47:69:
f1:54:95:ab:57:73:04:07:fd:60:90:41:4c:d7:59:9e:57:9a:
ed:dd:aa:bb:8e:ae:ca:42:5c:ec:84:25:cb:b2:2f:ca:6c:5a:
c5:9f:cf:8f:f4:d2:49:7e:1a:9c:b7:2a:2c:f1:91:bb:b6:e7:
48:45:cb:19:d9:34:3b:ca:65:4c:1f:5b:00:2a:af:3f:ae:be:
6f:10:a6:46:17:ba:b9:03:2f:b7:5a:f4:fc:10:b6:a0:f5:93:
29:c3:0a:0b:69:c9:4d:f3:01:93:f1:4f:30:96:a9:64:ea:79:
89:63:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:28:56 2025 by rpki-client