Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2ADAC626EE8D11EA96BA331FC4F9AE02.roa
File: 2ADAC626EE8D11EA96BA331FC4F9AE02.roa (raw, json)
Hash identifier: BLrNQyL6RtXHkkuWUipdegfRB6DR2Qn7Ctd6RF9xmjA=
Subject key identifier: 82:2D:94:C5:7C:D9:7F:8D:2F:E6:EC:14:86:0F:31:E6:76:92:FF:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A45
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2ADAC626EE8D11EA96BA331FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:17 +0000
ROA not before: Thu 30 May 2024 16:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135685
IP address blocks: 103.68.176.0/24 maxlen: 24
103.102.86.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 05:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35397 (0x8a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a309-c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:01:e1:5b:58:33:90:1e:0c:84:d2:8b:7f:
c4:82:3d:83:ec:e2:46:c7:f3:8a:21:36:79:48:a7:
07:5a:cf:17:9e:74:81:1c:12:cc:23:13:f4:4f:bd:
63:c3:88:3e:86:b4:36:94:a8:7c:61:09:c8:ae:09:
2a:7b:40:71:33:dc:e7:6f:e1:88:0c:f2:56:85:f6:
64:09:66:5b:e9:44:ff:a6:75:d8:3d:79:28:9a:ea:
dd:de:3a:44:81:64:4a:4c:27:07:f3:0e:75:a6:64:
c9:b8:ee:96:3b:94:21:f7:3b:2b:1f:ca:00:35:9d:
61:ff:18:d2:de:9d:fc:4b:95:da:79:6f:39:51:dd:
64:82:b4:4c:7c:3f:51:54:ac:a9:a6:a2:d7:27:9b:
90:f3:aa:07:56:ab:ff:3f:0d:a3:a6:e9:89:9a:81:
d5:b9:53:c2:ca:32:eb:ea:66:a8:85:33:49:9d:19:
b2:9f:28:a1:7b:f7:a4:29:79:07:3d:4a:bf:c2:92:
45:0e:82:8e:8f:2f:6e:06:92:65:d7:a7:33:d2:db:
bb:73:db:da:5b:d1:07:fa:f7:f9:b2:d4:94:41:04:
57:57:45:55:8c:17:41:eb:8f:56:9f:55:94:73:3d:
67:96:3d:50:a7:0a:dc:50:4f:f8:2c:01:4c:ff:e1:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2D:94:C5:7C:D9:7F:8D:2F:E6:EC:14:86:0F:31:E6:76:92:FF:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2ADAC626EE8D11EA96BA331FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.176.0/24
103.102.86.0/23
Signature Algorithm: sha256WithRSAEncryption
23:08:20:c0:ff:67:2b:d9:b5:52:d8:20:76:ab:d7:15:c9:56:
90:d5:b0:b0:17:98:81:8c:d9:80:a4:76:20:62:a1:c5:14:49:
d2:46:14:a8:c6:05:8b:a2:c8:34:b6:77:cf:4c:ef:bb:81:c9:
80:93:a7:3f:f5:1e:d8:ef:78:88:b4:e7:50:50:24:7c:dc:75:
e6:2c:55:88:15:bb:f4:a8:57:6e:5f:f6:6c:b0:c7:00:ba:f4:
dd:4d:4f:e9:73:a6:c9:e4:e9:fe:9a:0a:e5:d8:ef:ce:76:5f:
5b:65:53:1d:97:b8:1b:ba:3e:d6:40:e2:15:38:71:b0:67:1c:
8d:c5:d3:b4:a3:c4:c7:97:95:cc:ae:2d:69:02:de:78:b9:31:
66:7b:8e:ae:f2:af:c1:f1:91:68:bb:73:14:8a:fe:70:f6:15:
34:46:7f:ca:c9:cb:6a:17:7b:35:79:2f:e9:81:f7:56:a1:48:
9f:87:c8:84:71:37:17:2b:3d:aa:c0:9c:6b:cf:3a:e2:45:aa:
41:95:31:29:90:04:24:49:1c:cf:5c:71:c3:4b:a4:10:2e:e3:
71:76:29:6b:61:eb:f0:61:74:1f:bd:bc:52:42:4b:95:fd:b6:
dd:21:74:ad:0e:f6:b2:2f:3b:00:33:dd:37:6e:67:b3:b6:3a:
4c:c2:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:15 2025 by rpki-client