Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/681BCDEE92C711EBB2CA7A11C4F9AE02.roa
File: 681BCDEE92C711EBB2CA7A11C4F9AE02.roa (raw, json)
Hash identifier: hWvQh81SzlgbcmMjGFHPqJJWtLYJ64+htpCp5Z1iRb4=
Subject key identifier: A6:5F:54:DB:79:6A:32:48:92:EA:E6:B2:CF:39:5B:40:71:E7:FA:86
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 886A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/681BCDEE92C711EBB2CA7A11C4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:27 +0000
ROA not before: Thu 30 May 2024 15:54:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132563
IP address blocks: 36.255.64.0/23 maxlen: 24
103.168.64.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 07:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34922 (0x886a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:54:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a133-dfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:c7:38:1d:d0:95:96:b1:45:32:76:09:4b:
3d:70:cf:cd:ce:86:b1:2a:f8:e5:8a:9c:59:57:5e:
f1:02:e4:f8:6d:bf:2b:c4:a1:95:8c:f1:ac:39:6c:
92:d2:5c:ee:4a:8f:b9:40:c3:05:53:ba:ae:de:84:
e5:06:1a:61:f9:e6:a6:48:69:76:03:07:22:1a:37:
fe:63:9b:44:49:b8:05:92:70:08:0b:02:62:61:64:
3b:18:0e:92:c2:92:39:0d:63:d7:d3:77:3e:fa:b2:
63:61:52:42:90:38:e7:e9:df:29:a3:67:bd:32:6e:
36:72:91:b8:e2:59:97:fc:39:69:50:1d:e9:41:71:
f5:68:b7:3a:b5:21:0c:98:75:6c:3c:4a:1d:04:24:
a2:0e:8d:53:ca:74:91:76:17:63:cb:06:3c:dc:67:
00:ca:2d:69:80:26:b7:36:59:2e:e0:5c:71:c0:76:
ef:e7:85:33:33:a1:97:8d:7c:44:34:fd:7c:ab:d7:
51:96:e9:aa:cf:fa:90:cb:02:c6:90:13:46:66:5c:
84:e6:ea:fb:9b:67:02:48:f9:8b:e7:73:05:22:f7:
be:6b:26:52:d8:3a:34:ec:40:53:75:4f:11:d4:dd:
98:15:b2:df:a1:28:72:a5:3f:ed:ee:88:c5:6b:ec:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:54:DB:79:6A:32:48:92:EA:E6:B2:CF:39:5B:40:71:E7:FA:86
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/681BCDEE92C711EBB2CA7A11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.64.0/23
103.168.64.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:33:c2:02:65:08:f5:13:0c:53:3d:a3:2a:f8:07:95:fa:f3:
28:15:07:cc:09:3f:df:e7:92:b1:8b:d0:25:2f:4a:ee:35:0b:
a0:41:92:35:1d:61:e9:24:58:b6:9e:fc:71:03:aa:55:ab:4d:
12:c3:2b:3b:22:11:d6:02:48:83:40:c7:ff:7c:49:56:67:0e:
0e:1e:73:73:9b:55:b5:77:66:77:05:08:73:81:31:82:24:19:
da:3d:45:c8:bb:1a:db:f0:29:cf:70:a7:14:a0:9f:04:b2:5c:
79:77:60:e5:dd:d8:b0:a6:ef:61:b7:8f:b7:1b:8d:c2:67:49:
6c:c7:84:d7:68:04:bb:a4:8a:69:a2:ac:ac:b7:a8:af:10:85:
41:98:14:17:1f:bf:11:01:8c:66:47:ed:a1:a5:57:bc:c0:e9:
11:bf:de:3e:ad:c8:88:a1:e3:fb:f0:f5:3b:c1:e0:fa:cb:22:
ce:e2:70:77:36:b7:b0:ee:fd:d2:fb:0f:2f:e7:94:13:dd:7b:
35:4f:f1:69:e4:51:2c:1c:e4:85:c3:44:ff:ef:47:8c:a5:a5:
fa:43:35:ed:f5:90:76:e5:e4:42:1c:49:88:6e:db:30:e4:96:
c5:4c:c2:6c:9d:e4:ac:64:0e:a7:62:86:60:02:f4:08:6c:ab:
00:9a:27:da
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIDAIhqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTQyN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGExMzMtZGZkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwHxzgd0JWWsUUydglLPXDPzc6GsSr45YqcWVde8QLk+G2/K8ShlYzxrDls
ktJc7kqPuUDDBVO6rt6E5QYaYfnmpkhpdgMHIho3/mObREm4BZJwCAsCYmFkOxgO
ksKSOQ1j19N3PvqyY2FSQpA45+nfKaNnvTJuNnKRuOJZl/w5aVAd6UFx9Wi3OrUh
DJh1bDxKHQQkog6NU8p0kXYXY8sGPNxnAMotaYAmtzZZLuBcccB27+eFMzOhl418
RDT9fKvXUZbpqs/6kMsCxpATRmZchObq+5tnAkj5i+dzBSL3vmsmUtg6NOxAU3VP
EdTdmBWy36EocqU/7e6IxWvsu6cCAwEAAaOCApswggKXMB0GA1UdDgQWBBSmX1Tb
eWoySJLq5rLPOVtAcef6hjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY4MUJDREVF
OTJDNzExRUJCMkNBN0ExMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/
BBYwFDASBAIAATAMAwQBJP9AAwQBZ6hAMA0GCSqGSIb3DQEBCwUAA4IBAQBqM8IC
ZQj1EwxTPaMq+AeV+vMoFQfMCT/f55Kxi9AlL0ruNQugQZI1HWHpJFi2nvxxA6pV
q00Swys7IhHWAkiDQMf/fElWZw4OHnNzm1W1d2Z3BQhzgTGCJBnaPUXIuxrb8CnP
cKcUoJ8Eslx5d2Dl3diwpu9ht4+3G43CZ0lsx4TXaAS7pIppoqyst6ivEIVBmBQX
H78RAYxmR+2hpVe8wOkRv94+rciIoeP78PU7weD6yyLO4nB3Nrew7v3S+w8v55QT
3Xs1T/Fp5FEsHOSFw0T/70eMpaX6QzXt9ZB25eRCHEmIbtsw5JbFTMJsneSsZA6n
YoZgAvQIbKsAmifa
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:17:14 2025 by rpki-client