Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96BF9F76399811EDBC466941C4F9AE02.roa
File: 96BF9F76399811EDBC466941C4F9AE02.roa (raw, json)
Hash identifier: LIvZEBsMeVsTK0GsnhV+o+FqOIeKik8YaADUooQpago=
Subject key identifier: 77:F8:98:8B:56:51:72:3D:AD:41:E9:E5:5B:7A:DA:12:08:8E:41:9B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F73
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96BF9F76399811EDBC466941C4F9AE02.roa
Signing time: Thu 30 May 2024 16:23:51 +0000
ROA not before: Thu 30 May 2024 16:23:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150035
IP address blocks: 103.137.48.0/22 maxlen: 24
2001:df0:1480::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Mar 2025 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36723 (0x8f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:23:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a817-f3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:f8:b2:7f:0d:5a:f4:72:07:60:47:8d:b1:
63:69:50:ce:09:07:b9:e8:48:82:36:24:f8:8d:f7:
90:7d:a0:34:1a:3b:df:35:98:c6:88:f5:84:15:27:
06:42:ed:fc:02:01:83:ff:be:29:c3:5a:7d:79:e7:
79:fa:72:72:26:78:2d:a2:70:ce:98:c6:d2:6e:54:
3d:13:81:c5:85:5f:e4:d6:d3:98:00:27:5a:db:36:
96:8e:d7:d9:50:ef:96:0d:4e:87:2d:72:b0:27:ed:
da:bb:3c:3d:e4:69:95:a8:db:15:8b:e4:53:da:be:
7d:de:9d:9f:71:e1:49:87:f0:3c:f2:a5:8e:81:a0:
b0:56:bc:1c:95:95:7c:a5:f9:af:8e:2e:34:89:8b:
d4:46:b7:ab:0e:c3:75:c2:6f:b2:35:4a:de:11:dc:
83:76:f2:7c:5c:1e:c4:a1:f9:59:44:cf:82:4e:8e:
d1:5f:0a:ac:de:30:c4:ab:8a:d3:a0:e1:74:84:58:
24:c8:3d:3c:20:2a:a4:2f:b9:c5:12:26:c0:04:d1:
69:d0:5e:69:11:e3:c4:aa:dc:c1:cb:5e:ab:a0:9c:
e3:66:34:6a:1b:01:b8:c3:56:81:3f:94:68:68:ce:
87:70:14:2b:12:b4:86:21:e7:bb:f3:a5:d9:1c:0b:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:98:8B:56:51:72:3D:AD:41:E9:E5:5B:7A:DA:12:08:8E:41:9B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96BF9F76399811EDBC466941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.48.0/22
IPv6:
2001:df0:1480::/48
Signature Algorithm: sha256WithRSAEncryption
11:af:f8:c4:44:04:3a:2b:52:24:e7:9b:a0:e0:d7:5c:b1:95:
06:c6:f9:63:12:bd:9e:63:6d:c2:d1:9f:46:85:3d:59:01:97:
66:0b:6a:2c:d7:2f:f9:b4:43:23:c3:6b:bb:d3:46:a8:4e:12:
95:dc:4f:86:b8:17:ab:70:2e:39:e2:7a:71:eb:f9:34:89:38:
93:c4:ba:8a:ea:ce:16:bd:6e:fc:ac:b6:1b:94:ae:16:09:8f:
e4:d4:55:bc:0a:74:7e:b3:3a:f6:38:1d:23:3f:18:39:b9:37:
e4:50:4f:97:24:fa:39:bd:b0:0a:e0:90:ab:ad:86:ed:a4:9d:
c7:5a:15:28:c1:b0:bc:c5:fa:04:e4:6d:a2:4f:cc:ac:0d:20:
76:50:77:42:11:7f:c7:66:91:ad:f3:3c:de:5e:2f:88:6b:a3:
2a:b6:07:a1:61:0b:74:aa:2e:a5:8f:ce:b7:1b:ff:a5:35:1b:
84:db:37:03:74:3d:6f:99:7f:9c:09:51:f0:4d:b0:cf:33:90:
b2:a0:06:a2:62:5d:d3:14:55:d5:01:32:b3:20:4d:55:bc:a9:
b7:4d:c8:d5:e6:c1:c5:4e:c4:ab:9a:87:54:f6:31:67:15:e4:
b5:6c:96:10:11:07:01:24:85:54:6c:61:40:03:0f:85:43:49:
04:93:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:47:22 2025 by rpki-client