Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA4A235ADD6B11EF824F146BC4F9AE02.roa
File: DA4A235ADD6B11EF824F146BC4F9AE02.roa (raw, json)
Hash identifier: aD+qXT5cpJktGFh47AJ5Yq0NWVFMyNCJX360bQEcJ44=
Subject key identifier: 00:46:8B:E3:6B:30:83:E0:79:83:8B:72:56:82:95:2A:26:C6:A9:3E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A464
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA4A235ADD6B11EF824F146BC4F9AE02.roa
Signing time: Fri 31 Jan 2025 08:27:24 +0000
ROA not before: Fri 31 Jan 2025 08:27:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150027
IP address blocks: 43.243.80.0/24 maxlen: 24
43.243.81.0/24 maxlen: 24
43.243.83.0/24 maxlen: 24
103.167.75.0/24 maxlen: 24
103.230.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 09:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42084 (0xa464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 31 08:27:24 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679c896b-ae60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:34:8f:65:44:f7:fa:e2:27:e1:e4:be:b0:
70:bb:9f:d1:0e:c0:4c:bc:77:c6:de:87:26:d8:0a:
57:fe:40:c2:77:d1:2e:1e:31:a8:f7:24:88:d2:33:
cd:f9:4d:3b:46:b5:50:e1:e7:43:57:34:0c:40:90:
3f:6e:6e:1b:a0:2d:cb:3d:47:30:ff:43:c4:04:4b:
81:28:88:36:07:b3:6a:2e:39:65:34:9f:a7:26:84:
58:8f:0a:20:c1:72:ad:c8:91:6b:38:e2:df:1d:1a:
eb:61:9f:60:c8:46:ab:67:89:bb:54:0d:0c:44:7c:
90:fe:26:7d:eb:2d:0d:0c:0e:61:74:74:8d:8b:56:
f5:3b:af:d3:4b:8a:04:87:ed:ac:3d:16:64:63:df:
0d:b6:4b:86:31:ed:47:75:f0:0d:33:57:54:11:e4:
42:ba:e9:ba:ed:67:7c:e1:b3:90:08:72:c6:e7:81:
4e:15:21:a9:42:fb:ac:b7:e9:8f:b7:13:8d:1c:6f:
03:25:7e:cd:c2:a1:97:81:3d:b6:ac:9d:3b:59:80:
fa:13:9a:37:de:ac:c0:70:1d:7e:d8:79:5c:a9:5b:
65:0c:a9:01:14:ed:b8:68:24:5c:97:1f:1c:3e:27:
8d:82:9c:da:e7:cc:26:f1:d1:76:9d:12:84:1e:54:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:8B:E3:6B:30:83:E0:79:83:8B:72:56:82:95:2A:26:C6:A9:3E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA4A235ADD6B11EF824F146BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.80.0/23
43.243.83.0/24
103.167.75.0/24
103.230.222.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c2:65:14:b3:fe:2a:20:d4:5b:07:96:b6:4f:41:81:98:91:
fc:9e:fb:b4:a8:bf:96:de:8b:ba:61:19:ac:bc:46:0e:a6:f2:
ad:38:9f:27:a3:67:e5:ad:d8:5f:28:4f:98:d1:bf:9b:9d:05:
c7:e0:ac:a3:e7:64:a9:b9:26:97:14:cf:8c:39:2b:7b:e7:31:
01:5b:57:7d:e7:1a:dc:99:e4:d5:c0:5d:89:df:ec:64:b4:52:
de:9d:c2:6d:98:70:de:d5:7a:cb:75:17:58:d1:d6:44:d8:66:
61:2b:db:bd:48:ea:52:5e:d6:05:b0:83:19:eb:11:cc:13:bc:
96:e7:09:fc:84:df:fe:3a:23:54:54:62:bf:0f:3a:58:39:74:
71:1b:b2:d3:6e:13:1c:24:fb:ba:40:29:e4:48:6e:6a:42:d5:
5d:07:78:4d:eb:41:c2:60:b8:1b:44:ca:e6:4b:76:40:71:ce:
55:32:c4:8e:45:0f:2e:74:a1:f8:13:d4:e3:f1:78:24:08:18:
7c:41:86:0f:67:09:44:18:a5:d4:7c:9b:fa:2c:0c:f9:bc:51:
a6:0b:6d:c1:cf:4f:62:ed:82:ad:ed:54:e1:5b:7c:6e:c1:2c:
3a:d3:79:98:4a:48:19:1c:51:58:4c:36:5f:d3:0b:11:7e:41:
8d:8a:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:31 2025 by rpki-client