Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A3E5560407211ECB518491FC4F9AE02.roa
File: 7A3E5560407211ECB518491FC4F9AE02.roa (raw, json)
Hash identifier: IuOf85z25oI5EcPA14dRr6Eb/OqLAmJn1Zsl9OqA7fg=
Subject key identifier: A3:F8:CE:E4:67:9F:97:A3:97:E0:75:C4:5C:A5:B7:87:35:01:25:D3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8CCD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A3E5560407211ECB518491FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:12:53 +0000
ROA not before: Thu 30 May 2024 16:12:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140151
IP address blocks: 103.155.194.0/23 maxlen: 24
2407:f0c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 25 Sep 2024 10:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36045 (0x8ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:12:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a585-f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:c9:c2:9a:c9:bf:05:11:48:44:42:f7:a1:
1a:33:c5:30:6c:39:fe:94:c3:39:42:e0:95:99:9a:
bf:99:92:f6:53:81:1a:b6:76:f3:99:cc:7c:a5:fd:
d2:90:3c:cc:a1:70:0b:b9:2f:9a:be:f0:e7:72:05:
c5:46:07:86:5a:3a:91:84:57:9b:1a:d0:f2:5d:5e:
24:d4:76:de:26:01:46:f2:97:c2:39:78:4a:54:0a:
2f:0b:8b:c0:a5:88:4b:a8:71:8b:b6:af:2b:91:ad:
85:69:cc:3f:6a:b3:bc:19:95:6b:68:0b:bd:4c:46:
13:99:e9:66:41:46:05:b5:44:dc:0e:43:bf:3e:ef:
e5:4b:b5:9d:a2:05:fa:32:64:14:af:58:07:ac:08:
17:fc:bd:8f:de:0f:e4:23:38:e5:ea:18:47:ff:45:
94:b4:51:0f:dd:76:f5:4c:b8:9e:24:84:12:ae:1f:
f0:c2:8a:fc:e7:1b:93:37:d9:d4:74:cd:b2:e4:f3:
ce:37:6d:a8:b2:7e:b4:67:fc:ad:93:59:f9:71:77:
a9:3a:a6:9a:bf:ad:58:45:c1:99:28:d3:9b:07:4d:
94:96:d2:ee:92:a3:d7:c0:0b:41:c2:f0:79:fd:f5:
7b:05:47:e8:47:a0:81:5a:a2:89:da:fd:c8:a8:1a:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:CE:E4:67:9F:97:A3:97:E0:75:C4:5C:A5:B7:87:35:01:25:D3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A3E5560407211ECB518491FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.194.0/23
IPv6:
2407:f0c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:7d:16:32:a7:e1:ed:3c:fc:79:d4:8a:45:e1:53:87:1f:16:
90:79:ab:11:0a:d5:7a:02:0c:db:1e:5d:47:56:aa:df:c4:a3:
62:43:b5:cf:54:e8:cd:4e:f5:14:a1:c0:b8:2a:b4:e7:41:7e:
5d:da:2b:d6:b2:80:bf:6e:73:8f:ea:9a:47:54:8a:7b:03:5d:
38:ab:f5:e6:11:1b:b7:92:be:24:5e:9e:7d:77:6c:fb:09:24:
c9:03:78:b7:b0:71:7c:49:a5:98:26:02:1c:86:62:08:c4:d7:
47:9b:7d:70:03:03:38:08:7b:e2:45:22:ad:28:02:9c:98:91:
25:53:95:e3:5d:af:f2:7a:c3:2f:e8:d3:4c:f1:d9:40:f9:fd:
40:e8:79:4b:07:1e:69:9f:c6:98:6d:fb:ed:68:e9:bb:53:d6:
5a:87:9c:9f:6b:d3:8c:6e:ff:c7:91:d8:9c:97:28:67:ee:22:
ef:05:6c:f5:16:eb:af:2b:ee:8d:45:45:31:1d:4d:1f:d2:2b:
78:d1:9a:92:f1:67:fb:2e:55:48:ac:1d:1d:31:73:c8:b4:1c:
d3:5b:76:7f:14:b7:d4:43:b7:3a:20:5e:8a:1b:2d:2d:05:ea:
0c:fd:79:66:38:f8:e0:01:5f:9d:f0:14:81:f4:39:e7:39:10:
f3:80:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:14:46 2025 by rpki-client