Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa
File: 2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa (raw, json)
Hash identifier: 2A4prSRmdlUqxIE2YZmLaO3MUoAPPzpF5hOOF8jFYas=
Subject key identifier: 22:01:81:DE:3C:64:44:23:5D:ED:86:A2:E3:9A:1B:61:8F:8F:95:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 94D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa
Signing time: Thu 18 Jul 2024 12:59:24 +0000
ROA not before: Thu 18 Jul 2024 12:59:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136698
IP address blocks: 103.83.8.0/22 maxlen: 24
103.147.94.0/23 maxlen: 24
2001:df4:12c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jul 2024 06:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38097 (0x94d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 18 12:59:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=669911ac-e84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:6e:eb:a2:a8:92:45:c9:b9:58:96:ca:6a:
88:3e:6c:9e:f7:c3:b0:d2:38:41:77:6f:42:3f:d6:
26:66:03:34:91:46:54:94:4c:86:e3:68:37:e8:f0:
7a:ea:33:6f:ea:3e:ed:10:02:56:50:15:2f:a1:04:
0c:cb:fb:ed:d2:17:6e:0d:9f:79:20:f1:03:ab:8d:
16:1b:25:66:5b:19:bf:f0:eb:00:ac:19:65:d0:73:
25:de:54:52:e4:55:f8:09:f0:f8:3c:4f:29:f3:58:
7b:74:2b:b8:33:dc:e6:ff:a4:4d:18:97:f9:d4:cf:
d5:b4:dd:49:72:81:7a:7d:43:31:45:87:a4:34:93:
49:4d:2b:89:37:2a:cf:6b:be:84:82:6a:6d:c4:8b:
59:da:65:c3:e5:87:f0:a5:a3:85:6b:05:55:6c:96:
78:5d:d7:4a:f7:a3:18:bf:b4:66:18:28:57:a3:f6:
6f:aa:c8:88:ec:db:58:53:ed:28:97:75:8c:f5:c7:
03:4e:89:9b:3b:8f:14:be:7e:61:3a:38:9a:c5:36:
38:aa:4b:a6:9a:9a:52:08:60:93:bf:57:57:20:8f:
1e:10:24:94:31:a1:66:2a:b0:6f:aa:91:3e:79:7a:
6c:70:89:f6:27:41:e7:cf:12:02:5f:9c:8b:e2:c7:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:81:DE:3C:64:44:23:5D:ED:86:A2:E3:9A:1B:61:8F:8F:95:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.8.0/22
103.147.94.0/23
IPv6:
2001:df4:12c0::/48
Signature Algorithm: sha256WithRSAEncryption
59:08:2c:1f:3e:d4:ba:6e:32:d3:bb:66:d7:70:7b:f3:d8:c9:
b7:cc:3f:53:dd:f2:1c:61:7a:ae:bb:39:35:73:05:b4:96:ce:
c4:2d:46:73:df:50:57:90:1a:31:c8:87:b9:8c:9f:07:b4:55:
a1:f6:06:67:4d:59:59:56:4f:5e:d2:3d:74:fc:55:1e:22:dd:
81:57:39:20:46:01:e6:f8:90:f3:f6:a9:fd:7e:21:78:b2:d4:
99:59:65:8d:db:ba:a4:b1:2e:41:dd:3b:77:48:42:49:58:c5:
64:b7:3d:06:9d:68:c3:e5:4e:75:7b:28:0f:3c:e3:b0:12:ea:
4e:92:92:52:81:e2:d0:d1:d3:f9:16:49:47:f7:9d:15:77:37:
54:27:51:5e:61:e7:d7:d7:64:28:0d:51:99:c2:a7:ec:fc:91:
99:fa:0a:8d:95:c9:7c:da:e7:10:bf:0c:92:7f:cc:0d:64:e7:
df:67:65:1e:ad:b0:ef:39:d1:11:aa:91:91:c5:bb:55:ed:fe:
73:c1:73:b3:df:64:34:f0:8f:7c:ba:95:0e:7b:be:d9:ac:d5:
85:d0:45:12:55:84:11:b0:c0:d4:4d:7e:c9:16:32:e2:87:f0:
f4:29:7d:84:5d:3f:e3:0c:68:40:5c:68:a1:fb:47:8f:cb:85:
2e:7b:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:55 2025 by rpki-client