Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51C83D2E9C7B11ED96690F39C4F9AE02.roa
File: 51C83D2E9C7B11ED96690F39C4F9AE02.roa (raw, json)
Hash identifier: Lo7ZJnKV/1ZLNk5yptNDOofm/h9hI1HGrw1CBPvMd4M=
Subject key identifier: E0:51:34:50:CC:36:68:C4:D3:B6:86:6F:06:D8:F3:02:2E:B4:18:F3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8FA9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51C83D2E9C7B11ED96690F39C4F9AE02.roa
Signing time: Thu 30 May 2024 16:24:45 +0000
ROA not before: Thu 30 May 2024 16:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150151
IP address blocks: 103.74.8.0/23 maxlen: 24
103.76.152.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 07:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36777 (0x8fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a84d-a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:7b:5e:95:e2:51:74:b5:56:5e:55:01:83:
2e:33:29:db:2a:18:ac:5d:78:42:a6:25:97:c9:aa:
a3:6b:51:9b:cc:fc:3a:54:b7:77:ac:00:31:7b:ed:
c0:96:33:96:26:00:4b:92:72:31:e7:76:d6:48:e3:
fe:ae:ae:eb:0b:c8:37:42:0f:ee:c5:c8:a4:e9:ea:
e8:29:da:a8:f7:50:9a:61:db:38:a5:bb:f3:f1:70:
da:07:c0:36:b7:eb:f0:2c:79:db:57:62:d7:b5:91:
19:41:f9:ea:9d:86:c1:0d:94:0c:19:94:bb:0c:56:
8a:13:d3:1e:30:69:79:46:5d:20:d3:88:90:fb:cf:
45:71:55:d5:38:c3:92:bf:39:ff:d9:ef:6d:e1:8f:
16:7b:36:7e:93:b9:d2:ca:40:8a:75:31:99:b9:44:
2c:6d:0c:79:96:96:24:cc:5d:37:91:22:f8:67:de:
27:51:46:73:70:74:6f:4a:c7:bf:e6:b3:1c:2e:9d:
a4:f2:25:e0:62:c8:aa:d5:28:11:83:81:49:12:22:
96:4c:3d:9b:05:03:df:ff:08:31:19:24:27:03:f3:
8e:b2:29:f1:00:5c:a8:af:02:67:cc:7c:cb:17:34:
71:2f:3b:e7:90:7c:8f:9e:5d:16:8f:aa:e0:2b:5d:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:51:34:50:CC:36:68:C4:D3:B6:86:6F:06:D8:F3:02:2E:B4:18:F3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51C83D2E9C7B11ED96690F39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.8.0/23
103.76.152.0/23
Signature Algorithm: sha256WithRSAEncryption
95:df:3e:3b:a6:2f:57:82:0f:75:e7:99:37:f1:cb:bc:dc:0a:
e4:1a:5b:5f:7d:e7:b5:4d:16:88:2f:8f:a2:4e:21:66:8c:40:
c5:5b:db:8a:16:d2:63:14:7d:f0:da:13:5a:da:37:6b:e2:21:
ef:48:e9:33:b1:d9:5d:4c:b6:d2:0d:b0:b7:ec:8a:c8:86:6c:
2e:86:b0:7e:e6:cb:a8:6f:b5:fd:a7:c9:a3:96:95:ac:45:e4:
75:e9:e7:4b:69:31:39:ff:dc:6e:91:3c:2d:2b:d4:25:e7:81:
6e:36:27:60:46:8d:d6:51:3e:a2:cd:7b:5a:f9:7b:c5:5d:b0:
9b:99:96:de:cb:aa:12:9e:bc:5c:5e:2d:6d:f7:e3:51:28:ee:
79:9a:32:97:3c:2e:a7:b2:77:3c:0d:e9:eb:52:66:cd:eb:f7:
f1:a9:2d:27:3b:da:bf:ab:4a:45:f2:ab:4b:73:3b:4e:19:73:
42:50:e0:18:57:40:08:3c:3f:57:ea:c3:3a:01:7d:b1:97:98:
fb:0b:53:f6:62:5f:90:23:31:e1:7b:3c:9f:b3:05:57:f3:3a:
1a:2a:ca:3e:09:25:04:77:cf:24:ad:7c:b8:06:7c:ad:91:32:
ef:aa:94:2d:dc:ed:1e:27:31:d4:b5:46:07:ee:a0:09:36:81:
88:c7:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:00 2025 by rpki-client