Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48D51E20D24A11EEB15A1170C4F9AE02.roa
File: 48D51E20D24A11EEB15A1170C4F9AE02.roa (raw, json)
Hash identifier: LYfpRdesinbyJUnscDh2w5wjKnmYVuNgvu6Hv/4d9P4=
Subject key identifier: 4C:DA:05:78:C8:C5:57:DB:06:D1:B8:66:6C:51:40:74:A5:3A:A0:D0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90B3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48D51E20D24A11EEB15A1170C4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:03 +0000
ROA not before: Thu 30 May 2024 16:29:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204765
IP address blocks: 103.79.48.0/23 maxlen: 24
103.165.72.0/23 maxlen: 24
103.174.92.0/24 maxlen: 24
103.174.93.0/24 maxlen: 24
103.187.84.0/24 maxlen: 24
103.187.85.0/24 maxlen: 24
103.187.102.0/24 maxlen: 24
103.187.103.0/24 maxlen: 24
103.187.130.0/24 maxlen: 24
103.187.131.0/24 maxlen: 24
103.187.158.0/24 maxlen: 24
103.187.159.0/24 maxlen: 24
103.187.170.0/24 maxlen: 24
103.187.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 06:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37043 (0x90b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:29:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a94f-0622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:85:0c:69:8b:37:31:79:1a:0b:a3:ab:13:
16:ab:bc:f7:73:98:1a:8f:55:7b:d9:32:12:2c:f5:
d5:8c:3d:3e:8d:7b:a0:f7:c9:e3:44:cf:49:23:f4:
66:8d:00:21:20:d1:ac:19:46:c2:a5:41:48:74:e2:
e9:f4:60:ca:e7:f0:e3:52:fe:a4:9b:1a:3a:96:38:
bc:30:b4:13:11:b6:7b:ad:b2:0f:9a:f7:e2:3c:fe:
a7:70:f8:4f:89:7c:68:85:b5:79:3e:6a:2d:3a:b2:
0e:09:a0:52:65:a0:62:ea:dc:35:df:60:ff:2b:14:
23:3b:ec:54:19:d9:39:d0:b2:95:2d:5b:c9:6e:e0:
bb:8c:fd:b1:b8:51:61:ae:26:dc:3c:6c:31:3b:fc:
ca:fc:c9:83:9d:6c:f6:38:4e:36:16:1f:ca:12:86:
2e:6e:2a:04:e1:a0:57:c5:60:47:c6:9f:38:36:62:
29:f3:94:18:00:14:c9:16:af:c8:dc:37:62:4e:1f:
98:ce:b6:18:8f:b0:f9:58:3c:9e:f4:88:8a:35:e6:
0b:84:00:90:93:ca:48:b4:24:39:7a:e1:81:8e:d0:
7d:16:a8:2e:3c:75:2c:37:47:77:b5:d3:1c:c1:ac:
b5:25:98:83:7f:ce:b4:1f:60:7a:23:dd:4c:c8:95:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DA:05:78:C8:C5:57:DB:06:D1:B8:66:6C:51:40:74:A5:3A:A0:D0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48D51E20D24A11EEB15A1170C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.48.0/23
103.165.72.0/23
103.174.92.0/23
103.187.84.0/23
103.187.102.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:d2:bb:fc:87:ab:ac:da:fa:9c:e2:9a:79:04:3a:0a:f1:3a:
62:17:4b:13:b4:8f:cc:e9:9b:c0:b5:f2:0c:80:c5:48:09:dd:
3e:d9:2f:fd:40:e3:70:43:92:88:02:9f:4c:32:3b:e2:24:fc:
54:47:c8:06:2e:1b:a0:8c:74:c3:b6:fa:88:9d:18:79:d6:45:
c1:ac:50:ef:a0:11:4b:d6:2c:6a:df:55:a6:3c:a4:2a:87:26:
eb:3d:b1:07:c6:c5:ad:e1:8d:26:0d:3c:d9:a0:85:f3:bb:bb:
88:02:35:31:a5:f9:68:10:a2:1a:c0:4f:2a:5e:7b:a5:b4:3b:
2e:7c:69:87:00:b7:cd:ca:24:41:43:ae:61:8e:7f:9c:9d:8c:
1a:a7:e5:ac:83:ba:5d:b1:ae:5a:4e:a4:14:e0:b5:f2:c9:d2:
1b:e6:30:64:cc:6e:55:06:f2:f1:99:11:af:89:f1:f2:f0:a3:
45:f6:7d:04:3c:80:5a:1a:cd:d4:14:68:ce:97:cb:eb:b5:4e:
a0:2a:51:6b:64:f9:d3:0e:36:0e:8c:7c:9d:e6:5a:35:e1:d3:
4f:92:a3:c4:48:f1:f0:d6:bc:3e:f1:f9:9a:e6:84:b9:64:a9:
c6:69:7a:6f:9d:2a:ef:78:d2:32:4a:59:09:26:68:89:ff:e8:
7c:30:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:59 2025 by rpki-client