Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B98BF8C63DDF11EB96C8BC30C4F9AE02.roa
File: B98BF8C63DDF11EB96C8BC30C4F9AE02.roa (raw, json)
Hash identifier: tO2iRnkKJ+v0hbbfjMcRC0xY1vDAut1UnLJyavHtkUM=
Subject key identifier: F2:58:37:8B:B6:27:67:0F:31:85:6E:AC:D8:96:7D:99:11:C9:F1:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8CF2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B98BF8C63DDF11EB96C8BC30C4F9AE02.roa
Signing time: Thu 30 May 2024 16:13:33 +0000
ROA not before: Thu 30 May 2024 16:13:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140202
IP address blocks: 103.155.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 07:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36082 (0x8cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:13:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a5ac-7096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:48:7a:c8:20:74:87:7d:b6:c6:98:2d:0f:
e4:4f:b4:c2:fb:e4:49:7b:95:be:24:ce:34:ee:48:
31:ce:74:5b:a5:c8:97:fc:6a:00:20:21:fe:a3:d3:
e7:95:8b:cf:7c:a6:5a:b3:5e:32:03:3b:17:85:90:
d6:e9:31:12:71:20:14:c8:fc:1c:1e:17:e4:a6:66:
d6:83:b3:c7:95:5c:f9:c5:f3:4c:f1:1b:65:4e:ec:
7a:88:de:5b:ad:cc:d1:23:e2:bf:82:38:f8:fc:98:
71:d4:d9:bd:fc:6e:7a:be:d2:a2:f5:02:f7:1d:3b:
79:53:2a:9b:c4:50:a5:14:52:1f:f2:0f:c7:56:73:
42:25:80:fc:f2:8b:87:90:c5:be:82:50:9f:91:92:
39:f0:7f:69:79:51:5d:8d:6c:5a:24:03:7d:60:4a:
92:de:02:56:69:42:42:39:23:ca:1e:0b:90:f3:cb:
67:b4:19:6e:61:33:7b:75:99:ad:14:6c:0b:f2:00:
6f:f8:f8:9c:17:35:c7:06:c5:83:8c:1d:ff:72:2b:
f2:ad:8c:73:02:4b:25:f4:24:0d:db:e0:da:14:19:
ce:41:0b:77:6f:49:ed:20:fe:2d:a5:ae:83:b0:89:
d2:11:13:d7:19:27:b2:1c:0b:36:c8:6f:69:aa:8e:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:58:37:8B:B6:27:67:0F:31:85:6E:AC:D8:96:7D:99:11:C9:F1:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B98BF8C63DDF11EB96C8BC30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.188.0/23
Signature Algorithm: sha256WithRSAEncryption
71:57:9e:4a:37:4b:1b:69:17:52:ca:50:b8:b9:e4:47:99:ed:
d1:bf:7b:be:68:d8:43:be:24:57:05:b3:be:b9:98:7c:ef:8b:
ec:49:06:e7:67:a7:60:a2:2f:dc:a2:6d:37:ef:55:cb:b0:9f:
3e:86:57:a2:8f:5c:4d:b3:ab:b8:18:0c:a3:cc:88:c1:a7:79:
5e:c6:98:2f:e8:19:51:a1:55:da:b4:37:af:9a:59:f8:c9:92:
21:d0:b5:16:a5:94:13:3f:d3:ad:f5:30:46:b4:1e:9d:ad:40:
ec:c9:08:08:85:e6:6c:9c:e9:62:42:11:40:82:74:77:43:d9:
c7:a9:0d:a2:3f:54:61:0a:6f:ec:78:cf:06:66:c6:ba:4d:7a:
75:4d:4d:0e:93:da:97:1d:5b:4b:da:5b:1b:d3:e5:16:60:a6:
6f:4a:fb:34:84:a8:bd:0d:ed:c2:81:0f:b0:4a:82:ad:78:0b:
44:49:b1:17:de:20:e6:cd:93:c1:d5:75:58:44:0e:20:e0:f5:
2c:33:4d:fe:fc:c5:32:58:10:32:2b:eb:5a:fd:26:bb:dd:6d:
a4:18:42:c0:a7:84:a9:e1:10:92:ba:24:f1:30:d6:a4:dc:df:
83:5a:f6:37:7f:32:7b:20:72:63:f3:ff:78:cb:b8:cd:9b:25:
e9:b6:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:45 2025 by rpki-client