Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BA28288B0A811EFB14CF282C4F9AE02.roa
File: 7BA28288B0A811EFB14CF282C4F9AE02.roa (raw, json)
Hash identifier: ACJK9ZKzJQnhQyoYq7/JiG43BtSGBQhb6WknN+VCCSQ=
Subject key identifier: 28:5C:76:E7:C1:D4:D8:78:9E:7F:82:44:42:28:DE:61:12:B0:B0:CC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E62
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BA28288B0A811EFB14CF282C4F9AE02.roa
Signing time: Mon 02 Dec 2024 12:25:15 +0000
ROA not before: Mon 02 Dec 2024 12:25:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139538
IP address blocks: 103.59.88.0/24 maxlen: 24
103.105.96.0/23 maxlen: 23
103.105.97.0/24 maxlen: 24
103.170.158.0/23 maxlen: 24
103.190.8.0/24 maxlen: 24
2001:df2:26c0::/48 maxlen: 48
2001:df6:6580::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 10:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40546 (0x9e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 2 12:25:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674da72a-7030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:dc:90:91:6c:a8:94:9f:85:b5:f0:a2:a1:
60:41:75:0f:c5:6e:ab:df:66:cf:77:22:87:d9:76:
80:06:b8:bb:4a:4a:11:ed:df:c3:99:65:6a:89:6d:
10:c8:ed:f3:70:3e:15:09:26:aa:7c:50:9a:74:e4:
f4:95:25:33:6b:79:b3:cb:04:de:5c:51:22:0e:7d:
cf:4c:12:0b:fb:2a:69:27:3c:6c:ff:17:c2:eb:10:
d9:75:08:7e:39:31:17:73:a0:b2:c5:0b:6e:e8:23:
61:33:17:11:98:54:59:f7:ce:3c:55:25:ff:06:67:
eb:9a:74:a0:22:a5:42:e7:23:ab:17:dd:90:da:c5:
85:ec:13:af:0b:91:21:07:3a:8d:16:5b:02:16:6d:
c2:67:1e:3f:93:9f:ae:38:5b:b4:be:90:c6:2b:2d:
d7:61:6c:a3:13:e3:a7:cd:f0:1c:30:36:0b:16:a2:
0d:12:c5:c3:87:32:53:47:0f:e1:31:9d:51:aa:3f:
c9:32:56:6e:e3:b6:b3:6b:dd:ef:4e:e0:e9:0c:0b:
3f:95:21:6f:00:2b:2b:af:7a:a4:40:75:fe:f8:77:
0d:c7:a1:4b:81:8e:5f:e1:7b:e4:84:13:9a:7b:77:
70:7e:89:de:c5:4d:19:8a:91:6e:3c:59:7e:f1:1a:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5C:76:E7:C1:D4:D8:78:9E:7F:82:44:42:28:DE:61:12:B0:B0:CC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BA28288B0A811EFB14CF282C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.59.88.0/24
103.105.96.0/23
103.170.158.0/23
103.190.8.0/24
IPv6:
2001:df2:26c0::/48
2001:df6:6580::/48
Signature Algorithm: sha256WithRSAEncryption
74:d7:6e:fd:a7:d6:30:62:03:18:42:42:cc:91:2f:9e:2b:af:
79:c4:a2:0b:6a:e2:f1:c7:2b:58:d0:b5:8d:45:c0:2d:05:45:
84:30:65:02:31:61:3b:7f:ec:56:f4:e9:e8:a8:b3:75:67:95:
06:6f:3b:bc:84:47:4c:2a:38:30:6f:2e:e8:55:a0:69:75:21:
fa:8c:b4:1d:3d:81:bc:42:dd:98:a6:48:29:8f:62:e0:4f:b0:
26:a4:c7:1d:80:91:36:a5:89:8b:34:7e:f4:5e:d2:e8:04:ac:
68:9f:be:a2:14:0c:48:00:cf:e8:6a:b9:39:25:d1:2c:95:97:
82:ed:47:c0:b7:e2:11:b7:3c:4a:bb:b7:65:e1:6c:bc:75:04:
94:4b:f4:65:90:3a:6f:9b:64:69:18:3e:9b:2f:37:35:5f:db:
4c:02:e8:27:c8:94:44:47:c2:9f:3e:7e:9a:87:be:36:38:4e:
33:f7:c2:70:73:f9:da:db:53:be:c8:1e:58:1a:2c:df:ae:0d:
16:10:31:18:44:9b:12:c8:fe:50:96:b4:21:26:b7:01:3b:0d:
b7:f0:1d:c6:0b:04:f3:34:7e:91:7e:2f:7a:2e:3b:3b:14:2c:
6b:5d:79:dd:ac:9c:95:aa:c6:af:b0:25:db:c1:d8:18:d4:46:
ce:ce:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:50 2025 by rpki-client