Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa
File: 6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa (raw, json)
Hash identifier: bSSKg6t44i7ogvQAOgsSySEHmbvZbJaS8NwkY1U3r38=
Subject key identifier: F7:6D:B8:79:F3:DF:F2:86:D2:E2:6E:0E:06:BC:8E:1B:D5:18:07:B5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8FB7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:24:58 +0000
ROA not before: Thu 30 May 2024 16:24:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150576
IP address blocks: 14.192.12.0/22 maxlen: 24
103.24.20.0/22 maxlen: 24
103.54.178.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
2001:df2:6ac0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Mar 2025 10:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36791 (0x8fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:24:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a85a-379f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6e:ee:e2:82:66:be:3c:06:04:1e:92:95:a8:
c6:da:78:b0:f6:db:b5:e1:2d:d1:3a:91:75:46:a6:
83:2e:bf:35:e2:c9:50:33:74:2e:2f:68:64:8e:42:
42:44:c6:b8:4d:61:cc:31:d4:66:fd:38:d3:b8:aa:
33:44:32:33:6b:3a:38:f1:02:b1:76:48:30:9e:c3:
22:42:52:6e:56:3f:42:9e:37:1b:4d:7f:c3:47:1f:
36:4c:f9:91:ac:e2:ba:5c:3d:54:d4:76:cf:33:5a:
c7:0e:0a:c1:57:f9:ea:60:af:c8:d5:5a:3b:18:01:
53:bb:6a:ac:b0:5c:1f:b0:23:a5:87:bf:7e:57:10:
cd:9e:f8:09:50:ae:f0:3f:db:36:50:e2:33:4e:b2:
5f:b8:f0:e4:07:e7:23:00:96:ab:43:50:0b:40:9d:
e4:1d:85:f4:55:ae:59:e6:ec:0b:3c:f6:f9:08:d6:
42:bb:e3:b6:2b:84:06:b8:9e:7c:1c:96:27:40:0d:
07:0b:ef:a4:1f:69:85:2d:d5:61:e3:80:2f:d3:6e:
cc:87:97:13:5d:d2:46:4f:ba:9c:ed:f8:95:dc:ba:
8d:66:1a:25:4a:a0:72:01:a7:bf:f7:c4:a6:ff:4f:
b0:e7:d8:bc:e0:2a:bf:c9:f4:49:47:cd:fd:4f:2e:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:B8:79:F3:DF:F2:86:D2:E2:6E:0E:06:BC:8E:1B:D5:18:07:B5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.12.0/22
103.24.20.0/22
103.54.178.0/23
103.171.54.0/23
IPv6:
2001:df2:6ac0::/48
Signature Algorithm: sha256WithRSAEncryption
16:a0:cd:82:02:18:04:cb:3f:f8:b1:db:43:3c:72:7f:5d:32:
24:5b:5b:87:4a:57:be:26:1d:2b:24:41:79:9e:43:5c:85:11:
e0:76:bd:34:07:b7:5b:1e:4d:e1:48:e6:f7:71:e0:9f:49:9b:
b9:71:5a:fd:dc:c7:f1:fb:6c:76:2c:9d:b5:c2:17:0f:e5:d5:
af:71:63:39:c7:f0:bf:74:ca:03:8d:03:51:85:10:f5:b8:a9:
ff:6f:d3:41:2f:c9:f8:87:e1:d0:73:92:74:90:19:23:b7:cc:
23:28:c5:f0:e2:e4:f3:57:b0:3f:e1:36:80:3f:c0:c9:18:fc:
4a:5a:c6:e3:0f:1f:f3:b4:d9:27:a0:63:c1:03:7a:a3:e5:40:
cc:15:fa:cd:cb:9d:32:dc:db:b0:11:66:35:a9:01:52:51:ed:
ce:67:3a:1e:c1:20:0e:a1:03:df:5f:30:1f:f6:47:a5:41:41:
2d:8e:64:e4:0e:b5:e0:51:f3:ac:14:5e:73:69:9d:1d:a6:b7:
9a:2e:fd:fd:6f:57:b0:96:f0:2f:48:38:10:b3:58:87:1b:f4:
87:d7:f1:65:09:d3:cd:b3:74:2b:c3:0c:73:8d:37:89:0b:4c:
08:b5:1a:9f:aa:c8:20:41:39:ac:b7:8b:69:eb:02:54:46:48:
54:56:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:00 2025 by rpki-client