Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A412792E29B11EEB8F4D568C4F9AE02.roa
File: 5A412792E29B11EEB8F4D568C4F9AE02.roa (raw, json)
Hash identifier: OYCqne6B82xiZ8S34CpLBfikUsHCLqYMBxJcjkRkrIY=
Subject key identifier: 48:E7:8A:D5:C1:E3:EC:29:DC:9C:B9:59:55:11:15:01:19:D3:EF:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A5D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A412792E29B11EEB8F4D568C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:42 +0000
ROA not before: Thu 30 May 2024 16:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135718
IP address blocks: 36.255.156.0/24 maxlen: 24
36.255.157.0/24 maxlen: 24
36.255.158.0/24 maxlen: 24
36.255.159.0/24 maxlen: 24
103.66.112.0/24 maxlen: 24
103.66.113.0/24 maxlen: 24
103.66.114.0/24 maxlen: 24
103.66.115.0/24 maxlen: 24
103.92.120.0/23 maxlen: 24
103.92.122.0/24 maxlen: 24
103.92.123.0/24 maxlen: 24
103.101.56.0/23 maxlen: 24
103.112.224.0/22 maxlen: 24
103.113.35.0/24 maxlen: 24
103.119.245.0/24 maxlen: 24
103.119.246.0/24 maxlen: 24
103.138.105.0/24 maxlen: 24
103.145.8.0/23 maxlen: 24
103.148.164.0/24 maxlen: 24
103.159.201.0/24 maxlen: 24
103.165.87.0/24 maxlen: 24
103.172.10.0/24 maxlen: 24
103.174.144.0/24 maxlen: 24
103.174.145.0/24 maxlen: 24
103.182.110.0/23 maxlen: 23
103.190.238.0/24 maxlen: 24
103.204.188.0/24 maxlen: 24
103.204.189.0/24 maxlen: 24
103.204.190.0/24 maxlen: 24
103.204.191.0/24 maxlen: 24
2001:df5:f680::/48 maxlen: 48
2402:6a40::/48 maxlen: 48
2402:6a40:1::/48 maxlen: 48
2402:6a40:2::/48 maxlen: 48
2402:6a40:3::/48 maxlen: 48
2402:6a40:4::/48 maxlen: 48
2402:6a40:5::/48 maxlen: 48
2402:6a40:6::/48 maxlen: 48
2402:6a40:7::/48 maxlen: 48
2402:6a40:8::/48 maxlen: 48
2402:6a40:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jul 2024 09:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35421 (0x8a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a322-25b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:6a:85:bd:b3:8d:c8:33:4d:f4:9d:24:33:
11:b5:bf:32:13:66:6e:16:fc:98:af:e4:0d:27:fb:
ec:e6:8d:3c:9c:33:4d:9a:b5:c2:1b:5a:a4:77:0b:
72:82:f4:f6:10:0d:33:8c:15:8e:b7:51:d2:f5:f5:
ac:fb:92:d2:2e:14:cf:3e:28:90:88:ed:18:7f:d8:
46:2a:42:bb:91:48:46:4b:11:b4:c3:f4:f4:7c:bc:
b9:36:05:61:b7:b2:7c:03:9b:85:2f:fa:8a:4c:f9:
93:9c:40:b9:03:7b:71:8e:b9:8f:07:e7:5a:2e:21:
30:0e:b4:e1:9c:37:a6:86:1c:b2:48:11:1c:89:95:
d9:05:86:14:28:42:12:41:64:21:75:39:13:c7:aa:
74:b7:78:eb:a4:c5:69:0b:b2:cb:04:31:6b:a3:5b:
3a:57:c1:f2:f5:c2:af:d7:f2:a2:ff:02:5d:61:21:
93:18:30:72:b0:c5:08:7e:6e:4f:45:70:20:11:56:
91:88:0e:6b:f5:01:3c:3d:1e:b4:d4:45:32:85:70:
c1:ef:a5:20:1a:3c:5c:a7:99:58:33:2b:f6:da:f2:
f9:b4:9a:26:ba:2a:fd:b2:3b:b8:cd:20:04:93:4f:
a2:27:59:01:65:33:53:58:2f:4d:7f:0b:7f:8c:a9:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:8A:D5:C1:E3:EC:29:DC:9C:B9:59:55:11:15:01:19:D3:EF:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A412792E29B11EEB8F4D568C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.156.0/22
103.66.112.0/22
103.92.120.0/22
103.101.56.0/23
103.112.224.0/22
103.113.35.0/24
103.119.245.0-103.119.246.255
103.138.105.0/24
103.145.8.0/23
103.148.164.0/24
103.159.201.0/24
103.165.87.0/24
103.172.10.0/24
103.174.144.0/23
103.182.110.0/23
103.190.238.0/24
103.204.188.0/22
IPv6:
2001:df5:f680::/48
2402:6a40::-2402:6a40:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:60:80:a6:4d:af:c9:11:8d:cc:97:cc:25:82:86:6b:43:e6:
06:7d:d6:df:f5:39:c7:a0:0f:25:45:2c:80:26:ea:88:b4:e6:
b2:a3:bd:76:07:07:83:c0:e1:81:21:c5:78:c2:b8:93:50:88:
93:a7:db:f0:79:46:e8:18:47:f0:85:c5:2e:f8:bd:9c:01:40:
a6:67:c1:58:df:2f:5b:1b:4e:51:6c:a4:5e:a6:cb:85:e3:6d:
74:ce:54:ba:b5:79:31:c5:67:b8:51:1f:ff:e7:bc:5f:71:0d:
8d:73:bc:d3:64:85:37:d5:cb:0f:c0:4a:22:e2:84:7a:be:b6:
99:08:9e:04:2b:79:da:d4:d8:80:16:bc:b6:ac:6a:7f:a7:e9:
26:85:a5:60:03:97:e0:72:7f:a5:e2:56:96:f7:4d:88:cd:ac:
b9:26:4c:a6:cf:40:fb:dc:8f:81:12:f3:21:60:9f:ed:fd:1f:
95:79:70:c5:a5:02:97:ae:88:0e:08:26:e8:79:f1:74:50:5f:
80:60:f1:1c:20:e2:22:e2:59:c5:14:71:b5:99:47:29:3e:56:
32:f4:3e:8e:b5:3f:4a:a3:6d:b4:98:53:6a:34:9c:2d:1d:f8:
b6:a6:8b:47:b0:df:21:0a:36:48:00:52:a1:c9:71:9e:a3:9d:
e5:a2:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:22 2025 by rpki-client