Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4D33410FCD111EB8D017215C4F9AE02.roa
File: A4D33410FCD111EB8D017215C4F9AE02.roa (raw, json)
Hash identifier: rVKPqoDb3KN9LPQKDvwIy/sl8nUJ6nB+UHro6YJRX20=
Subject key identifier: CF:B3:33:8A:45:BB:27:EE:E9:58:73:2E:26:68:86:C0:5B:D2:43:2A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A68
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4D33410FCD111EB8D017215C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:52 +0000
ROA not before: Thu 30 May 2024 16:02:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135733
IP address blocks: 103.68.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 08:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35432 (0x8a68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:02:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a32b-6572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:a6:08:aa:e8:6a:49:93:b6:2f:08:2b:c8:
a9:9b:d3:7d:9f:69:bf:67:f3:91:e7:4b:ba:f8:17:
9b:39:c6:69:f4:63:5b:5b:8b:03:ae:a4:b3:cd:04:
a6:ce:48:d3:77:78:a8:8a:b7:55:30:0c:41:b2:ee:
42:7d:f0:46:3f:e8:a6:16:9f:29:20:cb:fa:db:3a:
a3:60:ae:57:a7:87:b2:be:d9:e6:ea:72:63:82:03:
a2:b5:84:2a:a5:47:c0:7d:ed:d6:25:a8:48:c4:9e:
07:2d:6f:3e:a4:bb:57:71:19:06:4c:32:55:ef:02:
cd:89:31:f6:ff:8f:34:12:68:76:51:4d:36:60:e9:
d0:39:db:5e:83:9c:65:ed:03:0b:66:d8:d1:47:b8:
29:79:f0:4f:09:f7:6e:7d:a0:01:eb:83:7b:90:99:
98:28:12:08:45:79:b0:07:64:8d:58:30:a5:2d:9b:
a6:f8:94:c2:bd:6a:bf:51:ea:d6:78:c2:18:85:8e:
4b:d8:75:12:e6:38:7b:b9:ab:12:d8:2f:4c:7e:5e:
1c:4c:a3:98:5c:35:67:15:0a:c2:af:68:f3:46:54:
21:70:87:ad:35:82:ba:81:f2:b4:25:0a:af:c7:f0:
7d:97:01:7f:56:73:f5:19:28:8b:df:2a:52:f5:a5:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:33:8A:45:BB:27:EE:E9:58:73:2E:26:68:86:C0:5B:D2:43:2A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4D33410FCD111EB8D017215C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:8e:b2:0f:62:c6:21:87:38:9e:2d:49:8d:44:10:11:99:2e:
0e:80:a6:e0:08:bc:20:39:83:a0:92:4b:cb:4d:e5:06:6c:7f:
eb:b5:1c:b0:d9:dd:e5:82:37:de:b0:2d:cf:36:e9:70:7f:c3:
07:08:be:bc:c3:c2:4a:80:e1:90:48:da:0a:a1:03:f0:e2:a1:
ec:61:9e:17:07:8f:35:a4:8a:b2:3f:94:e5:df:44:a0:7e:ec:
e3:1f:97:2a:3e:84:33:e1:da:70:09:a8:b9:e0:39:21:08:dc:
5a:23:79:d1:55:23:e2:31:58:db:8c:1d:8c:22:04:f3:7a:b5:
a9:ff:69:14:df:06:a4:47:9d:1d:cf:bb:94:ba:da:ff:ed:85:
29:ef:2e:83:08:5d:50:9d:21:90:85:86:90:e6:ea:3c:27:59:
9e:f2:39:48:cf:8a:4e:96:d5:70:ec:90:09:8e:82:ad:1e:1f:
0b:5f:5c:86:db:18:8b:cf:ad:ef:59:d2:f7:ca:26:60:06:93:
e7:cb:2a:b9:30:e6:b1:70:68:f4:ab:d6:9a:ed:5c:a7:bd:3a:
b9:a1:0e:c6:68:ca:91:ab:de:44:ab:9c:90:10:60:a4:81:5d:
f8:f0:ca:2e:48:a0:b2:4d:33:1a:c4:a2:1f:ed:8d:df:fb:e0:
53:ab:61:aa
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIpoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDI1MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEzMmItNjU3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtGpgiq6GpJk7YvCCvIqZvTfZ9pv2fzkedLuvgXmznGafRjW1uLA66ks80E
ps5I03d4qIq3VTAMQbLuQn3wRj/ophafKSDL+ts6o2CuV6eHsr7Z5upyY4IDorWE
KqVHwH3t1iWoSMSeBy1vPqS7V3EZBkwyVe8CzYkx9v+PNBJodlFNNmDp0DnbXoOc
Ze0DC2bY0Ue4KXnwTwn3bn2gAeuDe5CZmCgSCEV5sAdkjVgwpS2bpviUwr1qv1Hq
1njCGIWOS9h1EuY4e7mrEtgvTH5eHEyjmFw1ZxUKwq9o80ZUIXCHrTWCuoHytCUK
r8fwfZcBf1Zz9Rkoi98qUvWl3aMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTPszOK
Rbsn7ulYcy4maIbAW9JDKjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E0RDMzNDEw
RkNEMTExRUI4RDAxNzIxNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ0QQMA0GCSqGSIb3DQEBCwUAA4IBAQCxjrIPYsYhhzie
LUmNRBARmS4OgKbgCLwgOYOgkkvLTeUGbH/rtRyw2d3lgjfesC3PNulwf8MHCL68
w8JKgOGQSNoKoQPw4qHsYZ4XB481pIqyP5Tl30SgfuzjH5cqPoQz4dpwCai54Dkh
CNxaI3nRVSPiMVjbjB2MIgTzerWp/2kU3wakR50dz7uUutr/7YUp7y6DCF1QnSGQ
hYaQ5uo8J1me8jlIz4pOltVw7JAJjoKtHh8LX1yG2xiLz63vWdL3yiZgBpPnyyq5
MOaxcGj0q9aa7VynvTq5oQ7GaMqRq95Eq5yQEGCkgV348MouSKCyTTMaxKIf7Y3f
++BTq2Gq
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:29 2025 by rpki-client