Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67F4BC3A1F1511EFBB2F8B36C4F9AE02.roa
File: 67F4BC3A1F1511EFBB2F8B36C4F9AE02.roa (raw, json)
Hash identifier: 6mACZ9JhY2k9XEIGqIPTHgmWjc7jOy/P9+EUc+ljDZc=
Subject key identifier: BB:AD:C1:E2:74:8A:59:32:16:65:4D:CE:71:0E:F1:5A:FF:2A:D1:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9157
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67F4BC3A1F1511EFBB2F8B36C4F9AE02.roa
Signing time: Fri 31 May 2024 06:17:07 +0000
ROA not before: Fri 31 May 2024 06:17:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 103.181.152.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 08:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37207 (0x9157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 31 06:17:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66596b63-491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:db:38:54:31:33:58:36:27:20:c8:0a:af:
d8:cc:80:e6:c4:70:4f:03:ef:19:d6:fc:9b:a2:22:
a2:22:1c:ae:98:d9:78:96:d6:e4:f3:1d:84:9c:93:
b8:ef:2c:da:04:dd:f2:44:63:a0:a1:29:79:24:1a:
30:99:f3:52:97:15:3b:81:d7:9d:0e:d7:86:0f:6b:
d5:bf:54:12:35:86:a1:85:2a:97:5f:d4:eb:9d:b6:
b6:07:a2:52:4f:6c:78:91:c7:a4:56:b3:54:de:ee:
85:07:21:6f:78:2f:bb:29:1d:97:5d:bd:7f:90:0e:
9f:04:7a:06:55:0c:b5:65:56:ad:59:43:c5:00:dd:
a3:73:29:21:e2:08:02:83:24:9c:6c:3c:21:bb:c0:
41:6e:06:59:95:d9:f9:51:77:15:ed:6e:7d:b2:28:
70:db:be:c4:2a:1b:c1:2e:3c:88:a0:bc:06:ea:92:
e8:10:f5:6a:c9:05:5f:5e:38:be:d2:c0:29:84:32:
e3:83:b6:3c:6c:36:0c:75:71:7f:fd:24:ff:eb:78:
2c:02:82:af:62:3b:b7:8e:5e:70:61:5d:2b:92:9d:
76:f9:11:d8:cf:98:c3:0d:3a:55:1f:47:00:1a:cc:
a5:02:27:7a:df:c3:eb:d9:e2:01:b6:a1:1a:e5:eb:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:C1:E2:74:8A:59:32:16:65:4D:CE:71:0E:F1:5A:FF:2A:D1:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67F4BC3A1F1511EFBB2F8B36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.152.0/23
Signature Algorithm: sha256WithRSAEncryption
48:bd:3a:2c:40:3c:a6:34:b0:12:29:de:3e:ec:08:31:38:f1:
80:8d:9c:fd:02:b1:9e:b4:4b:ab:ad:42:d8:98:d9:fa:3c:ed:
a6:c6:96:9e:73:69:6a:e9:3c:da:59:fa:0d:21:fe:cb:d4:44:
95:91:ba:d1:3c:1c:9d:5d:28:b0:60:c7:bd:3d:0e:f7:4e:97:
74:4b:77:a3:8e:88:29:eb:f5:20:40:cd:3c:16:82:7a:b8:33:
ff:20:d7:1b:cf:2a:a5:bf:3f:89:1f:c7:34:ed:7a:a8:4a:d1:
93:fd:05:e9:6a:8c:aa:23:9e:c1:2b:f6:da:d0:74:a5:52:d9:
e4:34:61:b7:e6:eb:26:01:30:87:cb:e8:23:a8:96:af:b3:e8:
f5:bf:c6:1f:56:fb:10:27:10:ab:fe:fb:4d:96:07:31:04:43:
46:73:ee:38:de:d0:e4:60:3c:bf:24:e1:32:3a:69:b7:81:e1:
cd:ac:4b:af:5e:a2:6d:0c:c7:80:a6:8f:fe:9e:1f:4b:46:f9:
03:2d:27:ff:5e:64:32:84:1c:c0:99:85:b7:8d:7e:24:69:db:
ee:b9:75:d6:35:ec:cd:f6:70:ac:e8:19:2c:c4:08:d6:10:78:
ba:bc:62:e5:5e:d0:22:56:e7:36:3e:2c:4f:79:31:92:6b:d1:
63:bc:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:03 2025 by rpki-client