Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C11C0230EE9211EF9C963584C4F9AE02.roa
File: C11C0230EE9211EF9C963584C4F9AE02.roa (raw, json)
Hash identifier: 41rrv/oYECt9Kjm9h35Ty/SjEg728nsfMdI+GWf5Rp8=
Subject key identifier: D6:DF:C3:F6:4A:F2:FB:DA:9B:25:4A:0A:27:5D:8D:76:6D:33:4E:52
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A6E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C11C0230EE9211EF9C963584C4F9AE02.roa
Signing time: Wed 19 Feb 2025 12:25:38 +0000
ROA not before: Wed 19 Feb 2025 12:25:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55947
IP address blocks: 43.247.156.0/22 maxlen: 24
103.5.132.0/22 maxlen: 24
103.39.126.0/23 maxlen: 24
103.87.92.0/22 maxlen: 24
103.87.128.0/22 maxlen: 24
103.91.180.0/22 maxlen: 24
103.92.100.0/22 maxlen: 24
103.132.16.0/23 maxlen: 24
103.157.238.0/23 maxlen: 24
103.161.74.0/23 maxlen: 24
103.173.170.0/23 maxlen: 24
124.40.244.0/22 maxlen: 24
2400:c2a0::/32 maxlen: 32
2404:1f00::/32 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Mar 2025 07:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42721 (0xa6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 19 12:25:38 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b5cdc1-5cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:2d:75:1a:8e:da:a0:a2:48:9f:39:1a:9e:
af:6c:51:7d:96:bf:83:f8:72:b3:34:6c:f7:ee:7d:
b2:11:62:77:55:2d:8d:68:02:62:4d:6f:c7:e6:ed:
c8:54:e7:d9:3b:ad:70:33:ba:19:4a:13:b5:4b:90:
6d:cf:b9:25:71:02:c5:d9:83:84:cc:d5:27:88:30:
33:e0:34:32:5c:45:ef:3b:12:a5:20:c6:f6:20:e8:
23:93:1d:89:63:8d:ef:3e:f2:93:b9:74:cb:56:d3:
f0:ba:0d:39:04:ba:3c:17:a5:ef:c4:f3:18:35:65:
95:ab:02:dd:a6:bc:11:66:b9:19:51:50:92:e8:6f:
47:1d:97:23:bf:66:37:dd:52:8f:a3:c9:de:e8:e7:
9c:59:70:bb:31:95:61:1a:06:13:d7:bb:cc:27:27:
d5:31:f8:60:23:fb:8d:bc:5c:3e:c1:69:87:14:73:
be:68:16:81:b6:ec:9d:37:0d:9f:65:a8:86:7c:76:
37:62:40:b6:6a:7c:cf:5a:fd:29:7a:44:b8:b1:af:
4b:bd:80:4b:a9:9b:b1:cb:bc:d1:83:48:79:f4:4d:
24:8a:df:ae:69:c9:6f:f6:68:0e:ce:d7:04:32:f6:
8b:94:fd:f8:c0:70:5e:d3:1c:52:b4:a2:dd:1c:1d:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:C3:F6:4A:F2:FB:DA:9B:25:4A:0A:27:5D:8D:76:6D:33:4E:52
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C11C0230EE9211EF9C963584C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.156.0/22
103.5.132.0/22
103.39.126.0/23
103.87.92.0/22
103.87.128.0/22
103.91.180.0/22
103.92.100.0/22
103.132.16.0/23
103.157.238.0/23
103.161.74.0/23
103.173.170.0/23
124.40.244.0/22
IPv6:
2400:c2a0::/32
2404:1f00::/32
Signature Algorithm: sha256WithRSAEncryption
23:e1:7c:69:0b:36:f6:6f:18:c8:77:45:82:0b:f9:a6:85:a0:
1e:a8:64:e9:df:51:59:10:2f:38:1e:40:ec:ed:c8:2f:4d:2b:
d6:3a:6f:b8:5d:58:3d:cd:09:2b:f0:c2:48:83:ce:b8:07:34:
4f:6e:44:2d:30:39:b0:dc:b5:35:1a:40:75:c5:2c:e1:6e:b8:
46:18:ee:87:b0:ab:d7:74:25:5a:0a:51:c8:8f:aa:49:e9:73:
f1:a3:27:96:a9:57:6b:74:a4:1a:86:24:d4:73:29:f5:27:49:
2b:ed:9e:3e:12:de:15:68:f5:b1:83:88:90:be:90:c2:39:08:
b2:7f:68:0b:72:b1:67:d9:36:f7:35:83:d5:d5:24:e1:d6:be:
16:00:e4:a6:0a:42:2b:13:29:b6:39:6a:51:ed:70:22:c5:3b:
aa:5f:f1:94:8d:12:df:df:a8:f0:f1:5d:02:0d:43:ff:1a:c7:
4d:fc:84:6f:85:5d:f5:37:17:5b:8a:93:dc:62:1c:52:65:28:
80:6f:61:b2:6f:84:a5:4b:90:10:27:74:ca:20:01:b1:3b:e1:
67:24:d2:ea:27:5e:6b:17:10:cd:50:59:41:b6:86:73:7a:87:
22:94:df:b6:a2:a0:43:e6:dc:8b:f7:e6:78:0c:36:25:94:0d:
54:67:6c:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:08 2025 by rpki-client