Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa
File: 2663C7EA402011EEB5DD5049C4F9AE02.roa (raw, json)
Hash identifier: 4G5PHynkmyxiw/l8FocboVzJYSYJbVO+FoS1sDhZxuo=
Subject key identifier: 8F:EE:AD:57:C4:DD:79:89:AB:1B:4D:3C:78:DE:48:26:62:C3:C6:E8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A692
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa
Signing time: Wed 19 Feb 2025 05:37:14 +0000
ROA not before: Wed 19 Feb 2025 05:37:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133007
IP address blocks: 103.119.196.0/24 maxlen: 24
103.119.198.0/24 maxlen: 24
103.155.210.0/23 maxlen: 24
103.159.239.0/24 maxlen: 24
103.170.148.0/24 maxlen: 24
103.183.90.0/23 maxlen: 24
103.187.248.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.252.168.0/22 maxlen: 24
2402:81c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Feb 2025 08:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42642 (0xa692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 19 05:37:14 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b56e0a-3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:b2:6c:39:43:81:d3:f4:f3:d3:b8:50:97:
fb:3d:19:e1:7f:54:e9:e7:f6:01:a7:3d:66:cd:a4:
36:6f:d7:36:a7:f3:52:bc:b5:6b:23:2d:bc:ff:48:
c7:9a:fc:7c:70:37:55:d2:d8:9d:c9:7c:75:7b:e1:
b9:66:ec:5b:b1:6c:8b:32:ca:80:6f:89:0f:54:51:
d0:ff:c3:4e:6e:36:bb:ab:39:ae:c2:17:7f:e3:4c:
79:61:7f:03:fa:45:2b:23:4e:9b:3b:5b:2f:cd:de:
de:f8:26:e1:64:e5:25:6e:eb:48:d5:90:9b:2b:d1:
8c:95:c6:1e:fd:9d:4f:e9:0a:22:38:ae:16:93:1d:
92:7c:3f:29:15:d5:8b:18:d4:3c:b6:d3:ab:89:84:
3e:f0:d0:6f:c8:c3:6e:cb:4f:c0:ce:86:ac:e6:fa:
48:72:b1:42:9f:c2:54:7d:66:ef:e0:24:54:cf:f2:
e6:2c:01:52:f4:4a:9f:55:c6:91:86:f9:53:a7:32:
ae:c2:a6:d8:cc:3b:e8:4d:e5:db:b9:bd:6b:d6:98:
03:ef:8d:cd:c9:99:e8:7e:49:63:7f:27:73:0d:af:
99:9e:64:ab:98:5b:04:7e:4f:76:2a:8b:9f:03:84:
4d:2b:f3:1b:e0:46:22:f6:c5:b2:d4:97:62:a8:ac:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:AD:57:C4:DD:79:89:AB:1B:4D:3C:78:DE:48:26:62:C3:C6:E8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.196.0/24
103.119.198.0/24
103.155.210.0/23
103.159.239.0/24
103.170.148.0/24
103.183.90.0/23
103.187.248.0/23
103.190.12.0/23
103.252.168.0/22
IPv6:
2402:81c0::/32
Signature Algorithm: sha256WithRSAEncryption
56:b9:ac:a9:ac:b9:b4:be:c5:81:81:ea:4b:51:e2:82:32:7f:
3f:6e:b6:c4:60:48:93:d2:fe:9f:52:02:ad:ce:bf:38:1f:f4:
73:1d:73:d6:b1:0b:23:bf:74:44:9e:91:f2:9c:1a:e6:ed:4e:
f6:d4:8c:c2:64:48:a4:64:86:ef:d5:4f:25:3f:46:a4:79:3d:
46:1d:fb:7b:1c:a4:30:8f:ba:3c:a3:e1:0d:de:ad:12:2e:22:
90:fb:d1:f9:51:b0:1b:84:07:d7:d5:ae:a5:51:55:a4:09:09:
bc:6f:7b:ff:35:17:37:cf:9a:cc:d9:33:34:51:c5:8a:39:63:
fe:4d:d6:ba:73:6d:12:4c:71:53:05:b1:20:ad:3a:14:e4:50:
fa:0a:76:9a:0c:9a:5e:3d:65:ab:d5:fb:e3:7e:fa:bc:bd:2e:
ae:c4:38:c9:4a:9e:b5:6e:8c:07:eb:a6:93:40:47:41:13:1b:
22:e3:31:43:97:10:0d:ce:ef:6a:fa:4e:30:69:5d:d5:08:5c:
77:e0:30:e2:ee:0c:a6:e5:08:51:9c:c9:a6:6f:68:c9:a4:49:
0c:8d:d8:02:63:73:a0:e1:5f:13:cd:35:4b:ee:01:b1:9f:fc:
10:4a:3b:b0:a5:05:26:84:0e:2f:18:f6:19:4d:41:5b:31:ab:
c5:ad:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:50 2025 by rpki-client