Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B4AC54C3A7811EDB71F1023C4F9AE02.roa
File: 1B4AC54C3A7811EDB71F1023C4F9AE02.roa (raw, json)
Hash identifier: Hd74V5XaVqkRPm4ytg8qHgvnQcWia6EM0AjaRa11lQE=
Subject key identifier: 22:C5:31:77:5E:AA:3B:66:E2:63:E4:08:85:36:74:E3:3A:D2:B4:D8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B4AC54C3A7811EDB71F1023C4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:09 +0000
ROA not before: Thu 30 May 2024 16:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21789
IP address blocks: 103.190.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 11:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37048 (0x90b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a955-45cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:a2:eb:69:40:5b:7c:77:81:03:97:90:09:
29:13:28:2b:e8:20:47:0b:69:9b:19:96:9c:28:e5:
95:05:f1:31:cf:6b:13:e7:65:1a:5b:2b:32:fc:29:
41:81:8c:f7:8b:3e:a5:0e:56:f5:7a:9f:d3:4e:fe:
a1:ca:10:ce:93:3f:0c:64:23:2d:9b:36:19:b4:87:
bc:12:e6:e2:1f:4f:85:fa:e8:36:fa:bd:5a:e5:ea:
f9:43:1c:ba:85:1c:55:c0:de:1e:03:de:48:df:b2:
c3:75:84:5a:05:8e:37:05:71:ab:9c:6e:5b:f8:57:
51:ab:56:84:3e:9d:f5:5b:af:17:ff:03:e3:94:47:
e1:7a:ee:03:ae:e5:59:e6:23:11:9e:a2:60:1e:6d:
86:5b:e4:7a:f4:40:64:79:2f:06:a7:63:95:49:16:
33:2b:86:bb:6e:7e:21:2d:c5:b2:9a:49:2c:2d:98:
1c:90:14:94:49:83:d1:30:3c:9a:e0:a2:aa:52:3d:
b0:67:ab:c7:71:fb:6f:65:9e:26:74:6e:83:5f:2d:
b3:61:1d:29:55:d3:eb:24:52:92:fc:a8:e3:71:36:
ac:77:c2:10:59:ef:70:9c:81:97:ed:ec:0b:12:82:
60:77:5b:41:b2:2f:05:be:00:e8:02:63:66:af:54:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:31:77:5E:AA:3B:66:E2:63:E4:08:85:36:74:E3:3A:D2:B4:D8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B4AC54C3A7811EDB71F1023C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:96:ed:8a:5b:aa:71:f4:ec:ea:7f:7c:d2:cb:ed:c4:81:65:
7f:5d:59:bc:94:8a:e4:67:b6:60:e1:85:6a:96:cd:b3:1f:13:
9e:30:20:fd:f1:00:c8:9b:0e:d1:b2:fd:6b:63:d2:70:4c:a1:
44:47:b8:45:04:8f:6b:fc:8f:56:78:7b:ba:68:17:df:41:f6:
9d:c2:54:45:25:22:a0:b0:86:78:01:80:4e:b9:a4:20:30:e4:
47:6e:68:bb:b8:bb:35:31:50:3d:54:b5:aa:9f:fd:33:1b:07:
41:ab:2c:0a:81:d6:09:c7:c7:df:e5:da:c9:78:11:f3:d3:29:
7e:9f:90:84:a4:e4:a5:68:1c:c0:7f:52:24:aa:a4:f3:ac:81:
51:b0:f3:e4:5b:cd:1f:c9:8f:f7:f0:f5:3f:0a:c0:55:05:2b:
a7:e7:af:6b:4c:17:0f:d1:a1:58:af:42:d0:ca:61:d2:55:12:
fc:4f:38:ed:22:67:de:a1:2c:ec:45:5a:53:d9:f8:89:59:73:
18:fe:57:f0:82:a9:e9:e3:14:02:ad:2e:8b:33:ba:31:99:f3:
e1:3b:0b:52:9d:a1:f5:0a:a3:3b:0a:d9:f6:7d:0a:dc:7e:8f:
12:52:01:d0:f1:06:88:bd:7b:ac:36:84:e9:c8:9c:78:6c:2d:
d2:eb:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:29 2025 by rpki-client