Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/304CEB08C34911EFAE79836BC4F9AE02.roa
File: 304CEB08C34911EFAE79836BC4F9AE02.roa (raw, json)
Hash identifier: gs74PkdCpzlWbJfXRlZGNtBOe1cJfHXtsYzw12lCUgk=
Subject key identifier: 62:94:06:A6:2F:95:C0:97:F2:76:EE:08:FF:6F:A2:B4:F9:3C:E1:3E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A003
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/304CEB08C34911EFAE79836BC4F9AE02.roa
Signing time: Thu 26 Dec 2024 05:24:44 +0000
ROA not before: Thu 26 Dec 2024 05:24:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135422
IP address blocks: 103.80.248.0/24 maxlen: 24
103.80.249.0/24 maxlen: 24
103.95.48.0/24 maxlen: 24
103.107.36.0/24 maxlen: 24
103.107.37.0/24 maxlen: 24
103.112.47.0/24 maxlen: 24
103.219.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 09:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40963 (0xa003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 26 05:24:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676ce89b-057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:33:44:eb:cf:d5:04:02:d3:f1:87:a8:4d:
c4:d0:f5:4d:3f:76:bf:8c:72:e1:02:0d:6c:4c:0b:
b0:88:c6:64:69:b0:a7:a1:c0:b7:81:32:2b:8d:5c:
a0:3b:ce:7e:af:17:bd:78:87:81:1f:1e:bb:ce:e9:
23:fb:fa:11:39:78:1c:b8:dc:44:e8:59:d7:9b:ec:
6b:d2:a7:ce:3e:e1:30:49:82:29:8a:a6:2b:e5:f5:
52:19:7a:e3:1c:91:ee:fe:21:e3:47:f9:88:6a:53:
71:3a:d0:8d:9e:0a:41:87:2d:ae:06:ff:27:07:f0:
79:b0:ca:2f:f9:76:7a:47:05:ab:81:66:1d:eb:4c:
7c:f9:bf:13:9e:6d:6a:ed:03:c6:c5:85:c7:c6:f5:
eb:40:5e:98:e1:ac:f5:39:41:54:bd:0c:f7:85:d7:
4b:40:07:58:d2:f6:4d:80:5a:77:40:44:d5:cc:76:
f0:58:ef:47:95:16:01:5c:55:5b:d7:75:f5:bf:23:
b1:f4:cf:13:f2:a7:fe:68:67:b5:9a:a8:8b:65:74:
e4:17:a0:b3:75:10:d9:d1:f0:aa:2f:e1:dd:0b:7f:
4a:13:fa:e5:aa:c8:75:06:56:da:07:ba:4d:46:43:
be:09:41:38:cf:38:a7:0f:55:4a:df:35:d4:dc:41:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:06:A6:2F:95:C0:97:F2:76:EE:08:FF:6F:A2:B4:F9:3C:E1:3E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/304CEB08C34911EFAE79836BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.248.0/23
103.95.48.0/24
103.107.36.0/23
103.112.47.0/24
103.219.61.0/24
Signature Algorithm: sha256WithRSAEncryption
36:63:c7:96:2d:50:33:eb:ea:36:38:f1:50:ad:be:37:13:c1:
e6:8f:a7:f2:d1:5c:2e:6b:ac:01:fb:40:40:a4:7a:2b:aa:3e:
02:9d:81:67:c7:fc:eb:cc:f5:64:3a:95:83:1d:c0:a7:d0:ad:
0a:55:79:0e:4f:70:d4:b3:b0:07:ce:05:da:f5:c7:4f:2a:c9:
fd:7f:16:a9:f2:21:aa:43:d5:24:ed:1a:56:0c:5a:55:04:63:
32:69:70:9b:f8:26:a2:7a:bc:b1:f0:bd:b6:9f:a5:e4:3c:f1:
90:c2:2f:ff:76:e4:c3:b6:d1:d6:1a:e7:bc:cf:60:87:1c:1e:
f3:cc:f0:11:29:d5:99:e8:72:5c:a0:d9:ca:09:61:6b:69:a4:
f3:f2:51:af:ea:ab:8b:d8:6d:8c:10:11:69:39:45:c1:6f:23:
53:4e:22:13:69:54:be:01:42:e8:4a:6e:06:84:ba:34:74:0f:
0c:1a:af:a3:f9:f9:70:48:c1:62:92:04:9c:d0:1b:e4:a9:06:
e1:f6:0e:8c:8d:a8:aa:65:cb:ee:b4:f3:4b:91:d0:49:06:dc:
67:22:02:96:38:42:67:af:ca:50:af:9d:cb:87:5a:3c:9d:a5:
7f:eb:a9:e5:22:e5:23:94:da:98:20:da:51:4a:0e:0f:b2:10:
73:4a:bc:a7
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAKADMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTIyNjA1MjQ0M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc2Y2U4OWItMDU3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrWM0Trz9UEAtPxh6hNxND1TT92v4xy4QINbEwLsIjGZGmwp6HAt4EyK41c
oDvOfq8XvXiHgR8eu87pI/v6ETl4HLjcROhZ15vsa9Knzj7hMEmCKYqmK+X1Uhl6
4xyR7v4h40f5iGpTcTrQjZ4KQYctrgb/JwfwebDKL/l2ekcFq4FmHetMfPm/E55t
au0DxsWFx8b160BemOGs9TlBVL0M94XXS0AHWNL2TYBad0BE1cx28FjvR5UWAVxV
W9d19b8jsfTPE/Kn/mhntZqoi2V05Begs3UQ2dHwqi/h3Qt/ShP65arIdQZW2ge6
TUZDvglBOM84pw9VSt811NxBcYkCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBRilAam
L5XAl/J27gj/b6K0+TzhPjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMwNENFQjA4
QzM0OTExRUZBRTc5ODM2QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/
BCgwJjAkBAIAATAeAwQBZ1D4AwQAZ18wAwQBZ2skAwQAZ3AvAwQAZ9s9MA0GCSqG
SIb3DQEBCwUAA4IBAQA2Y8eWLVAz6+o2OPFQrb43E8Hmj6fy0Vwua6wB+0BApHor
qj4CnYFnx/zrzPVkOpWDHcCn0K0KVXkOT3DUs7AHzgXa9cdPKsn9fxap8iGqQ9Uk
7RpWDFpVBGMyaXCb+Caieryx8L22n6XkPPGQwi//duTDttHWGue8z2CHHB7zzPAR
KdWZ6HJcoNnKCWFraaTz8lGv6quL2G2MEBFpOUXBbyNTTiITaVS+AULoSm4GhLo0
dA8MGq+j+flwSMFikgSc0BvkqQbh9g6MjaiqZcvutPNLkdBJBtxnIgKWOEJnr8pQ
r53Lh1o8naV/66nlIuUjlNqYINpRSg4PshBzSryn
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:56 2025 by rpki-client