Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4159C070BDE411EAB947BE63C4F9AE02.roa
File: 4159C070BDE411EAB947BE63C4F9AE02.roa (raw, json)
Hash identifier: N2tpotKj+Ue5XThBwfmMZzQyRL8HwJXAN+oKcbQS+x8=
Subject key identifier: 49:05:3D:D7:2E:79:15:A7:41:9D:CA:99:19:5F:78:D7:BF:46:11:0C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 91AF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4159C070BDE411EAB947BE63C4F9AE02.roa
Signing time: Fri 07 Jun 2024 06:18:58 +0000
ROA not before: Fri 07 Jun 2024 06:18:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4755
IP address blocks: 1.6.229.0/24 maxlen: 24
1.6.230.0/24 maxlen: 24
1.7.229.0/24 maxlen: 24
1.22.36.0/24 maxlen: 24
1.23.62.0/24 maxlen: 24
103.57.216.0/24 maxlen: 24
103.57.217.0/24 maxlen: 24
103.57.218.0/24 maxlen: 24
103.57.219.0/24 maxlen: 24
103.81.88.0/22 maxlen: 24
103.109.224.0/24 maxlen: 24
103.109.225.0/24 maxlen: 24
103.109.226.0/24 maxlen: 24
103.109.227.0/24 maxlen: 24
103.112.230.0/23 maxlen: 24
103.115.236.0/23 maxlen: 24
103.160.172.0/23 maxlen: 24
103.167.152.0/24 maxlen: 24
103.173.132.0/24 maxlen: 24
103.237.84.0/24 maxlen: 24
113.193.25.0/24 maxlen: 24
113.193.48.0/24 maxlen: 24
113.193.128.0/24 maxlen: 24
202.162.229.0/24 maxlen: 24
202.162.230.0/24 maxlen: 24
202.162.232.0/24 maxlen: 24
202.162.233.0/24 maxlen: 24
202.177.153.0/24 maxlen: 24
202.177.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 09:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37295 (0x91af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 7 06:18:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6662a652-8a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:6f:51:75:e7:e6:a1:28:de:94:4e:31:aa:
e9:83:a8:50:85:d2:3a:d0:b0:e5:28:07:33:97:9d:
fb:91:77:22:4c:e2:d3:1f:f7:08:34:e6:78:2d:82:
cb:59:36:c0:7c:1e:86:4f:46:f6:6e:3a:25:54:f4:
0e:0e:15:a6:ec:b7:fc:91:12:b9:15:0c:01:22:b7:
83:ee:d5:da:9c:e5:48:56:27:b4:89:3a:cd:44:75:
0a:5b:45:3b:5d:36:d4:ed:cb:10:a5:4b:44:a7:a9:
9d:b5:40:01:0a:1f:49:67:1c:5b:88:b4:da:50:57:
3d:99:f2:66:19:fa:d7:7d:25:d1:79:bf:cb:d7:9b:
3c:01:8f:41:a5:11:c8:0b:4c:d4:40:dd:a3:62:e6:
f1:9a:16:ee:f2:4b:84:fb:5f:3b:11:44:86:1f:fa:
9d:86:53:90:af:6c:a7:9d:94:d5:ff:55:32:05:73:
f3:d9:fa:75:1a:e4:6c:63:0b:9a:1d:32:2b:74:f1:
db:cf:b5:94:ce:92:9a:46:9c:63:93:40:6c:9c:8c:
b1:53:0f:2e:3c:69:d7:98:cb:ee:d8:d7:c3:eb:37:
a4:80:55:56:b6:65:88:af:56:b0:4f:bc:93:57:97:
e1:4d:f7:bc:ae:d3:c6:e0:00:84:5c:d0:4d:c4:49:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:3D:D7:2E:79:15:A7:41:9D:CA:99:19:5F:78:D7:BF:46:11:0C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4159C070BDE411EAB947BE63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.6.229.0-1.6.230.255
1.7.229.0/24
1.22.36.0/24
1.23.62.0/24
103.57.216.0/22
103.81.88.0/22
103.109.224.0/22
103.112.230.0/23
103.115.236.0/23
103.160.172.0/23
103.167.152.0/24
103.173.132.0/24
103.237.84.0/24
113.193.25.0/24
113.193.48.0/24
113.193.128.0/24
202.162.229.0-202.162.230.255
202.162.232.0/23
202.177.153.0/24
202.177.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:fa:1d:70:f5:3c:48:45:ba:e2:a8:1f:db:9b:6d:8b:99:b5:
08:f2:96:25:ea:ac:39:dd:7d:ec:48:9b:6c:33:a4:d6:0a:78:
37:95:84:cc:9e:67:39:b3:d6:a5:cf:13:e6:6b:4a:e7:83:90:
ce:cd:6e:a0:f0:13:7d:e6:5c:5b:03:59:2c:11:b7:d2:dd:a4:
6a:4b:ac:a0:10:8d:ff:26:55:b9:07:83:9d:65:de:a3:15:69:
44:a7:b3:e4:08:9b:58:36:1e:83:64:5c:61:e1:6e:86:e9:7a:
6c:2e:32:cb:ac:7f:2b:51:20:5f:30:ea:24:1e:53:00:9a:2e:
7b:02:5d:11:eb:2f:5d:f4:f1:e1:2d:36:b6:f3:a8:1b:a0:9e:
70:a1:39:24:20:49:82:cf:d9:d0:89:d6:86:90:be:91:f3:08:
1f:de:9b:90:48:38:77:2c:3f:1c:80:1f:88:8b:94:fe:f2:35:
c6:2b:ef:ea:84:a1:5d:60:5c:1b:9d:eb:50:5b:91:d5:96:d5:
c6:6f:73:82:ed:89:45:e3:39:3f:73:22:7e:bf:be:57:98:37:
91:a6:17:48:b4:0a:c1:9c:76:b0:8a:0a:9f:78:6d:4b:be:ee:
7c:a6:fe:02:97:e8:55:10:04:17:0d:76:0d:5e:02:8f:6d:7a:
11:2f:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:13 2025 by rpki-client