Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D039A32A837311EE80CD2D5BC4F9AE02.roa
File: D039A32A837311EE80CD2D5BC4F9AE02.roa (raw, json)
Hash identifier: +UF0fM3E9L+A57p7awkN/SKFkED29xJU2+DjmpT8W8Q=
Subject key identifier: 87:EF:43:1F:E5:54:A5:A7:10:41:DE:0D:78:80:22:76:DC:EF:30:5D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8FA4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D039A32A837311EE80CD2D5BC4F9AE02.roa
Signing time: Thu 30 May 2024 16:24:41 +0000
ROA not before: Thu 30 May 2024 16:24:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150100
IP address blocks: 103.114.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 09:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36772 (0x8fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:24:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a849-2cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:9f:64:17:a9:91:58:b3:62:e4:32:f2:9e:
66:a8:3b:48:b9:bd:d5:79:d7:60:39:8f:eb:6e:cb:
03:34:52:1b:05:a2:35:92:7a:e8:06:96:2f:5a:1f:
1f:fd:2d:2d:22:ba:c3:82:24:23:c7:4a:94:d2:90:
9d:ef:ff:de:8e:72:59:29:1f:25:1a:3a:6d:a8:0c:
37:50:63:48:8f:ff:4b:a1:a6:12:ff:1d:25:38:d1:
82:43:7b:08:54:15:66:72:e8:bf:46:e4:ed:0c:62:
6b:7d:a5:04:34:f8:ae:1c:c1:cb:01:c6:a5:1a:5e:
09:fe:b6:ed:23:27:15:7e:37:b5:a3:07:34:23:d2:
a6:2f:28:ae:3b:85:fd:59:79:d5:8b:09:39:05:a2:
c9:51:7d:25:ef:32:d5:13:9d:1f:37:62:68:be:9f:
08:ea:75:f9:6e:03:84:70:c6:c6:d7:dd:79:54:bf:
e6:02:0e:28:dc:0f:80:6c:39:cf:b9:6e:65:11:01:
20:e0:04:63:12:66:91:6a:30:67:13:95:7b:96:d9:
be:50:be:b9:1f:16:94:ae:e8:45:b9:9d:32:5a:26:
65:70:2e:6e:02:52:42:ad:14:58:e9:2b:5f:c8:d9:
01:eb:2a:d5:e0:58:cf:ea:59:aa:ae:7f:ec:50:55:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EF:43:1F:E5:54:A5:A7:10:41:DE:0D:78:80:22:76:DC:EF:30:5D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D039A32A837311EE80CD2D5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.64.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f4:d3:d4:14:c2:6e:46:e6:8b:4d:1b:7a:c9:9f:1a:66:21:
09:08:58:98:c0:96:e7:87:0d:c5:89:fd:8d:ff:5e:23:e7:66:
d2:ff:41:52:ed:51:c3:34:a8:f0:29:33:9b:58:c7:b3:55:e9:
b7:ae:6f:60:36:0a:55:e7:ad:36:d1:20:f8:d9:8c:4e:76:23:
3a:89:db:b0:11:e0:5a:15:6f:1e:e4:eb:5d:5f:65:19:89:53:
2e:85:a1:45:4d:c1:c3:ef:24:2f:6c:70:8b:b7:19:fa:0b:5e:
4b:f6:b1:9f:a7:00:f3:42:a4:e6:b7:02:a0:78:16:a3:28:31:
72:d2:03:2f:39:06:3b:b6:99:e7:ce:9d:15:4e:a8:50:d4:f8:
9a:8d:0c:79:95:63:18:83:e9:72:ba:13:3c:ca:8c:68:a4:c1:
e8:95:f6:80:a0:ea:3f:9b:4d:b2:77:26:97:94:d3:3c:ee:bc:
69:5d:dc:6d:d3:6f:86:0b:24:87:77:a2:cd:ab:0c:40:cb:6a:
58:4d:02:9b:7e:56:b7:29:46:65:81:5f:79:e6:fc:8f:91:fe:
38:c1:06:9a:b7:c5:fc:34:0c:a0:1c:d0:3f:8e:44:5f:65:4e:
99:86:ef:7f:08:f1:d1:fc:41:17:1c:c2:bc:c1:94:9f:0a:80:
81:4b:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:31 2025 by rpki-client