Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C5ED80E29A11EE87022C67C4F9AE02.roa
File: B8C5ED80E29A11EE87022C67C4F9AE02.roa (raw, json)
Hash identifier: 8LGNN3fJFrAA2l+cw+KiurhWO6Jid5zR157ezj4bgfE=
Subject key identifier: BD:7B:4F:AF:16:B2:78:4C:C5:95:1B:18:8C:17:FB:2A:AD:16:65:81
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A76D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C5ED80E29A11EE87022C67C4F9AE02.roa
Signing time: Mon 24 Feb 2025 06:28:58 +0000
ROA not before: Mon 24 Feb 2025 06:28:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134293
IP address blocks: 36.255.240.0/22 maxlen: 24
103.30.224.0/22 maxlen: 24
103.48.146.0/24 maxlen: 24
2400:8ee0:1::/48 maxlen: 48
2400:8ee0:2::/48 maxlen: 48
2400:8ee0:3::/48 maxlen: 48
2400:8ee0:4::/48 maxlen: 48
2400:8ee0:5::/48 maxlen: 48
2400:8ee0:6::/48 maxlen: 48
2400:8ee0:7::/48 maxlen: 48
2400:8ee0:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Mar 2025 12:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42861 (0xa76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 24 06:28:58 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67bc11aa-9a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:43:a0:f4:b2:83:f6:75:a1:a0:47:48:61:
47:25:7f:23:98:f2:3c:f0:ea:c2:cc:e0:3b:10:b6:
76:1d:04:ad:1f:13:c2:69:a4:c4:61:86:b1:bd:23:
2f:39:9c:1c:dd:9e:f0:b8:54:10:db:37:63:b7:96:
75:64:10:2d:3d:dc:df:cf:5f:51:21:55:d6:04:06:
20:d9:42:03:d9:ac:7f:ff:08:a8:c2:74:a5:b7:14:
47:46:89:fc:fe:0b:a0:9c:38:de:1e:6a:05:49:a7:
c6:81:e9:46:9d:b5:78:21:27:4b:46:96:3b:5f:71:
77:21:ef:64:95:a8:0e:6a:03:f2:22:a4:6d:1e:f6:
3d:26:71:fe:c3:fc:dc:67:32:85:79:76:b7:03:79:
32:90:a2:03:9f:5e:2d:00:f9:1b:45:b6:60:6d:45:
d2:49:32:5c:48:91:78:92:bc:9b:39:a7:7b:50:65:
3b:8d:7a:4e:30:51:79:b0:31:e4:3f:f2:ab:50:00:
17:04:6e:94:cf:63:aa:00:63:20:d7:fc:31:c4:d7:
e9:76:cb:ca:53:0d:6b:36:86:e5:3a:69:28:43:2c:
40:ba:61:13:b2:1a:65:af:39:72:56:7a:15:84:d7:
ff:25:24:69:ae:c1:1e:48:17:a4:c6:57:83:74:ee:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:4F:AF:16:B2:78:4C:C5:95:1B:18:8C:17:FB:2A:AD:16:65:81
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C5ED80E29A11EE87022C67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.240.0/22
103.30.224.0/22
103.48.146.0/24
IPv6:
2400:8ee0:1::-2400:8ee0:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:41:60:cc:c7:a3:04:0c:0d:86:ef:ac:52:d2:54:55:1d:bb:
a5:1a:79:ca:eb:e3:8a:93:c0:d0:59:da:0d:8c:65:98:c3:71:
17:61:c5:80:6d:93:03:80:7d:bd:4f:20:81:2c:51:3a:12:ee:
44:97:8e:0c:26:e7:c1:15:b6:9b:1a:65:2b:6c:58:a0:f6:4d:
c8:7b:f4:37:d4:75:b0:93:be:08:1c:e7:9f:60:4a:21:00:88:
c9:0b:81:73:9a:be:c9:75:ef:7c:16:2c:63:b8:1a:63:48:b9:
ed:49:b2:e0:de:88:76:40:79:64:58:07:84:30:c7:11:3b:29:
c9:4c:89:b6:00:ee:0c:7e:ea:fd:9a:92:4c:63:d4:14:a0:66:
73:a4:c8:f0:e7:d2:1d:55:77:3a:c4:d4:bb:a2:7f:b1:4b:27:
f3:95:cf:13:96:22:38:aa:c2:29:b8:2e:f9:a8:a3:26:bf:a5:
b2:3c:fc:c6:37:f6:33:95:3b:47:17:c5:58:61:cb:21:83:5b:
79:3c:c3:e5:b4:ea:a8:ce:5d:d8:7a:b5:21:31:bd:88:36:b5:
7b:d2:4c:e8:b2:2f:04:f6:58:27:9f:01:bd:54:45:aa:ef:0f:
2a:fa:c8:5a:0a:40:4b:72:69:da:80:de:d5:04:77:97:2c:8b:
58:a9:b1:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:33 2025 by rpki-client