Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB418DAB2E411EFAD3AFF16C4F9AE02.roa
File: 7FB418DAB2E411EFAD3AFF16C4F9AE02.roa (raw, json)
Hash identifier: YTvWKOuf7AjJ1YuYUtJSppEFDZE9ERF8pQKSUVhVwKk=
Subject key identifier: 07:07:40:32:50:6F:BD:CB:49:E0:AB:81:C7:19:3B:DA:C3:BA:52:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9EA2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB418DAB2E411EFAD3AFF16C4F9AE02.roa
Signing time: Thu 05 Dec 2024 08:39:54 +0000
ROA not before: Thu 05 Dec 2024 08:39:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133713
IP address blocks: 43.229.200.0/22 maxlen: 24
45.125.68.0/24 maxlen: 24
45.125.69.0/24 maxlen: 24
45.125.70.0/24 maxlen: 24
45.125.71.0/24 maxlen: 24
103.41.40.0/24 maxlen: 24
103.41.41.0/24 maxlen: 24
103.41.42.0/24 maxlen: 24
103.41.43.0/24 maxlen: 24
103.43.37.0/24 maxlen: 24
103.44.141.0/24 maxlen: 24
103.44.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 06:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40610 (0x9ea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 5 08:39:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675166d9-6b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:b5:ef:53:c5:88:d3:cb:09:7d:53:7c:d3:
e4:7c:8a:d4:28:95:78:49:9f:fe:d6:ca:2a:b1:9a:
cc:8a:7f:56:5d:18:eb:60:bf:1b:85:f5:9f:f0:8c:
9e:24:e3:c7:4a:37:59:24:b2:29:d1:6f:93:3e:fc:
61:82:89:dd:3e:86:cb:8d:08:0d:c1:a8:d1:35:c5:
02:92:02:0b:e7:a7:81:92:be:45:73:c2:5c:30:a9:
15:a1:14:81:71:1a:05:53:53:41:a1:e9:f9:9c:c4:
b5:03:50:7e:41:85:41:d1:ab:33:85:eb:01:d8:8a:
10:60:d8:75:ca:b2:61:2a:8e:49:91:4c:83:cd:60:
ca:d2:a0:6b:fc:65:dc:08:97:4c:05:e9:f3:e6:54:
33:ea:09:96:92:b9:e0:22:a3:05:eb:92:3d:e3:7d:
c6:28:d6:d7:1c:de:8d:ce:b0:94:61:ce:b3:95:a0:
05:6c:92:9c:0d:0c:a6:c0:8e:01:11:f7:a9:ad:43:
a0:46:70:ad:d9:f7:74:a2:c7:53:2f:ab:a7:53:38:
9e:56:63:9a:19:3f:9e:40:c5:7a:70:05:65:0c:af:
c3:21:99:21:7f:bc:45:f9:78:a2:ce:67:32:bc:c7:
75:e5:f3:00:d7:28:bb:39:a7:95:58:48:cd:98:fa:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:07:40:32:50:6F:BD:CB:49:E0:AB:81:C7:19:3B:DA:C3:BA:52:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB418DAB2E411EFAD3AFF16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
45.125.68.0/22
103.41.40.0/22
103.43.37.0/24
103.44.141.0-103.44.143.255
Signature Algorithm: sha256WithRSAEncryption
97:04:4d:3a:e0:72:cb:c0:fc:56:f7:2e:34:41:25:ab:a8:8a:
de:b1:22:3c:7f:17:b3:81:b2:20:07:c3:c0:55:b5:5e:20:c1:
2b:eb:76:9a:5d:ca:ac:c7:06:55:d1:89:31:68:59:5b:fa:35:
3f:25:15:09:3c:e5:d2:0c:62:5a:07:62:9f:d7:ec:d6:af:b7:
ec:64:ff:86:87:3b:57:81:3d:ca:ba:1f:0d:ee:c0:a1:b6:f5:
ee:20:10:99:9e:24:1e:d3:cb:7f:e2:5a:8a:70:2d:0e:6a:4d:
ed:d8:30:09:a3:af:a6:12:22:74:d9:31:95:3c:f5:fb:4a:d8:
21:1b:22:8e:16:6b:f8:d4:6e:0b:33:e7:bc:17:b0:87:d7:af:
02:df:20:2d:1a:2e:be:14:64:e9:06:5e:14:24:74:11:95:e7:
aa:be:93:29:4c:5f:95:47:4b:8c:0d:1c:93:b9:97:78:b7:65:
0a:46:95:11:80:0a:c7:b7:7d:e8:7e:96:d0:1e:0e:75:64:60:
24:e6:8c:ab:e1:2c:ab:49:25:a2:cc:5b:91:93:fd:2b:a2:30:
9c:29:b8:a8:85:a0:57:10:45:b8:f5:d9:6d:c2:9a:37:81:1c:
34:60:ef:0a:a5:eb:35:a1:19:bf:2c:a0:f6:e7:56:fd:3a:98:
f1:09:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:53 2025 by rpki-client