Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/343C9A323AC411EFBCF0E560C4F9AE02.roa
File: 343C9A323AC411EFBCF0E560C4F9AE02.roa (raw, json)
Hash identifier: N9oa248+QS/cyStGnvhT8gROooh8dUDQjQjNwirBC6I=
Subject key identifier: A8:CE:0E:4B:3D:40:FD:84:48:E0:A4:EF:96:B7:50:C2:A7:65:7E:87
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9414
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/343C9A323AC411EFBCF0E560C4F9AE02.roa
Signing time: Fri 05 Jul 2024 11:46:24 +0000
ROA not before: Fri 05 Jul 2024 11:46:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45804
IP address blocks: 43.251.168.0/22 maxlen: 24
43.251.172.0/22 maxlen: 24
43.251.176.0/22 maxlen: 24
45.116.188.0/22 maxlen: 24
45.248.56.0/22 maxlen: 24
103.27.140.0/22 maxlen: 24
103.56.236.0/22 maxlen: 24
103.59.88.0/24 maxlen: 24
103.60.219.0/24 maxlen: 24
103.76.80.0/22 maxlen: 24
103.93.100.0/22 maxlen: 24
103.147.239.0/24 maxlen: 24
103.168.79.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.193.88.0/22 maxlen: 24
103.205.163.0/24 maxlen: 24
103.216.204.0/22 maxlen: 24
103.234.93.0/24 maxlen: 24
103.244.240.0/22 maxlen: 24
103.244.244.0/24 maxlen: 24
103.245.2.0/24 maxlen: 24
103.245.20.0/24 maxlen: 24
103.251.80.0/22 maxlen: 24
114.29.224.0/22 maxlen: 24
139.5.140.0/24 maxlen: 24
139.5.141.0/24 maxlen: 24
139.5.142.0/24 maxlen: 24
139.5.143.0/24 maxlen: 24
150.129.108.0/22 maxlen: 24
150.129.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 10:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37908 (0x9414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 5 11:46:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6687dd0f-8271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:a2:a5:43:fa:7e:83:9c:b3:67:35:c0:b1:
a8:62:68:89:54:e1:67:4e:71:eb:77:38:30:b4:39:
b4:51:b3:c7:0d:81:1a:20:23:c5:2b:99:71:fa:1f:
12:69:ac:d6:13:3e:dd:fb:db:dc:f0:43:42:7f:e2:
c6:52:e3:fb:42:88:41:fd:15:36:b9:21:f1:5c:39:
87:b7:26:cc:c9:73:13:b1:82:af:1f:43:ae:6b:00:
84:b7:67:29:f9:04:c8:5d:bd:5e:dd:a2:9c:22:4c:
6f:9a:08:15:fa:ee:f6:0b:2e:05:f6:b6:ba:1e:1b:
c0:3f:87:f0:f6:2c:17:ff:c0:a7:05:66:37:00:1c:
ab:05:59:43:9a:fc:49:7f:9b:39:28:e3:7f:57:d9:
c0:4f:d9:a5:6d:cc:94:23:93:ad:d3:34:41:0d:20:
f6:05:98:7a:24:7f:23:31:32:de:be:a0:61:10:47:
35:06:a5:cc:68:26:c5:7d:1e:34:58:0c:01:bd:21:
d8:aa:75:28:58:b7:41:9a:b7:a9:74:7b:08:26:c1:
bd:41:eb:ff:b2:7e:17:1b:3b:79:70:a5:7e:17:bb:
7a:f8:ec:fc:92:e9:95:b4:83:cb:9f:e4:86:eb:0d:
57:30:5a:1f:21:aa:5c:6a:c1:69:ff:5c:14:70:00:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:0E:4B:3D:40:FD:84:48:E0:A4:EF:96:B7:50:C2:A7:65:7E:87
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/343C9A323AC411EFBCF0E560C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.168.0-43.251.179.255
45.116.188.0/22
45.248.56.0/22
103.27.140.0/22
103.56.236.0/22
103.59.88.0/24
103.60.219.0/24
103.76.80.0/22
103.93.100.0/22
103.147.239.0/24
103.168.79.0/24
103.180.216.0/23
103.193.88.0/22
103.205.163.0/24
103.216.204.0/22
103.234.93.0/24
103.244.240.0-103.244.244.255
103.245.2.0/24
103.245.20.0/24
103.251.80.0/22
114.29.224.0/22
139.5.140.0/22
150.129.108.0/22
150.129.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:99:d8:b9:70:5f:8b:ab:2f:01:d6:cf:6e:ea:64:5d:47:a4:
71:b4:87:1f:bb:bd:7f:a4:ee:4d:81:85:a9:e2:af:06:e0:97:
e6:1c:3c:0d:12:19:28:7b:86:bf:ea:c1:26:1c:81:a4:20:bc:
d5:e3:0a:0e:1e:d7:46:b6:51:b5:41:fd:c2:e8:dc:b8:f8:15:
16:b1:84:08:65:e8:1a:39:38:bd:99:c4:81:7f:55:aa:2e:84:
89:73:eb:d9:8f:de:0d:ab:3c:61:f8:b5:0e:0b:64:8d:e8:8f:
47:59:8f:47:e5:f2:8c:bb:91:3c:8e:f0:3a:42:8d:53:5d:6b:
1c:a9:af:b3:25:33:ac:f1:da:97:24:88:b5:b0:0d:26:4e:55:
29:44:93:e9:8b:2a:dd:92:da:1f:c4:8c:6b:3b:9a:47:f2:19:
8c:fb:c3:e6:38:fa:4b:6e:c1:59:a4:f9:25:6d:5c:96:9e:a6:
ba:23:16:69:23:70:1b:59:5c:0e:eb:cd:fd:55:2b:a3:73:16:
51:ca:f1:0e:98:2b:88:21:19:f8:33:a4:07:4b:9d:4d:83:3c:
b2:db:69:63:23:76:73:20:23:94:26:5f:d3:2d:5a:d6:7d:5f:
7e:51:98:ff:04:6c:15:18:a9:25:5d:e3:28:ae:40:8f:62:6b:
09:fd:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:51 2025 by rpki-client