Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9D98686FD7F11EF95339355C4F9AE02.roa
File: B9D98686FD7F11EF95339355C4F9AE02.roa (raw, json)
Hash identifier: Xxuy6KyRUFGaIMNsK/h/QpwYiyyy3Q4/aGSehgopHyE=
Subject key identifier: 49:1C:36:09:88:F6:C0:61:94:40:F4:EA:A4:E9:D3:1F:A7:D1:B0:89
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A9E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9D98686FD7F11EF95339355C4F9AE02.roa
Signing time: Mon 10 Mar 2025 10:56:12 +0000
ROA not before: Mon 10 Mar 2025 10:56:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134032
IP address blocks: 45.118.32.0/22 maxlen: 24
103.57.150.0/24 maxlen: 24
103.58.64.0/22 maxlen: 24
103.58.115.0/24 maxlen: 24
103.58.116.0/23 maxlen: 24
103.135.46.0/24 maxlen: 24
103.135.47.0/24 maxlen: 24
103.163.44.0/23 maxlen: 24
103.168.198.0/23 maxlen: 24
103.171.12.0/23 maxlen: 24
103.178.158.0/23 maxlen: 24
103.186.172.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 06:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43492 (0xa9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 10 10:56:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cec54b-c0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:07:0a:6c:d4:a9:4b:18:0b:c5:dd:c6:b1:
e2:b4:e0:e3:23:97:7b:18:5e:a0:c3:30:d2:54:59:
ff:c7:de:8e:09:81:f7:f3:e3:52:5b:f9:d4:a6:20:
bd:cd:3f:37:7e:6f:6a:a4:23:57:f7:44:97:68:3f:
ae:ec:43:c2:82:bb:19:b7:26:40:3a:54:87:de:8d:
34:aa:c4:92:b8:01:05:26:ae:e8:30:49:0f:8c:72:
e6:b1:27:f5:33:cf:60:7d:03:a9:ce:77:89:03:63:
c8:fe:0b:d1:ef:f1:1d:7c:0c:02:a1:2c:f4:0b:bf:
26:7b:be:c3:72:17:5f:09:fc:84:2a:dd:9c:e7:2b:
e6:e6:98:37:fc:8c:50:38:d5:98:ac:e5:f7:17:cf:
1b:67:44:0b:d1:e8:ac:0e:6a:b7:42:22:20:19:13:
d7:c6:48:b5:c1:d8:51:c7:5e:c9:78:94:96:dd:b9:
3b:09:8e:ef:2b:ef:a6:3c:aa:84:45:6f:70:c2:b2:
24:a3:36:dd:65:60:a1:28:fd:9a:b4:d1:b1:c4:3a:
3d:50:5f:e4:ff:d3:b7:73:9f:8a:b1:50:d7:90:fa:
59:60:e6:23:46:a8:41:27:cf:5b:81:7f:e9:b4:56:
cd:47:5b:6f:20:52:5d:04:85:50:65:c3:4e:94:b3:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:36:09:88:F6:C0:61:94:40:F4:EA:A4:E9:D3:1F:A7:D1:B0:89
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9D98686FD7F11EF95339355C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.32.0/22
103.57.150.0/24
103.58.64.0/22
103.58.115.0-103.58.117.255
103.135.46.0/23
103.163.44.0/23
103.168.198.0/23
103.171.12.0/23
103.178.158.0/23
103.186.172.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:db:ac:87:d1:7f:f6:1a:9c:7c:e7:c1:e1:94:3e:38:01:5a:
75:63:68:8f:cb:05:80:42:66:ae:1e:24:3b:e2:4e:59:d6:e0:
3a:4c:4d:ca:2b:87:51:4c:a9:a6:9f:9d:4d:2f:82:a1:3d:45:
4c:bd:aa:02:4c:93:35:44:3f:aa:90:e1:b9:a5:09:04:56:73:
45:24:34:03:2e:0c:98:12:95:63:d3:a8:1b:5c:7a:82:83:c4:
b6:9e:b8:ae:52:c6:32:36:bf:90:39:d1:9e:d5:a0:ef:b8:de:
e2:41:36:6e:e3:95:02:f2:1d:31:36:db:67:5a:56:61:b7:01:
ff:16:0a:97:cd:e7:9f:d6:1d:9b:cc:9c:ea:eb:30:ef:e0:6f:
0a:0b:00:2d:53:f6:36:d3:e5:04:ab:f0:09:1c:8d:aa:46:a1:
d7:be:0e:b4:06:59:92:5e:95:a0:0d:43:b5:16:82:91:73:48:
c5:01:55:60:ff:5a:82:75:a0:4d:37:83:9b:bf:44:f3:a0:38:
08:dc:8d:a2:57:7b:6a:44:40:b6:d4:c2:b5:0e:5a:17:5c:5d:
ca:92:76:9f:f5:bd:3f:5f:48:eb:05:f4:22:98:98:43:34:9a:
19:00:bf:4b:b9:70:0f:ba:bd:d0:58:76:18:fd:31:dc:4c:03:
16:ce:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:34 2025 by rpki-client