Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA3F0538A87911EDA872717EC4F9AE02.roa
File: EA3F0538A87911EDA872717EC4F9AE02.roa (raw, json)
Hash identifier: pp/YdYq98QwHfEMt8qs/PPzv/+snWvNlpGI5JT7nIb0=
Subject key identifier: D1:EA:A1:A2:41:5F:CF:BA:C1:DA:64:BE:D2:6D:8D:41:B1:88:17:1D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A9B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA3F0538A87911EDA872717EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:03:42 +0000
ROA not before: Thu 30 May 2024 16:03:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135810
IP address blocks: 103.78.137.0/24 maxlen: 24
103.81.192.0/23 maxlen: 24
103.83.57.0/24 maxlen: 24
103.135.60.0/24 maxlen: 24
123.253.236.0/22 maxlen: 24
2001:df3:bf00::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Mar 2025 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35483 (0x8a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:03:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a35e-271c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:0e:a4:59:f7:4c:b3:b6:e6:34:e7:2b:59:
ab:58:7f:f3:d3:90:80:d6:b8:90:80:76:49:02:21:
e0:00:a8:d5:f5:e5:3e:61:30:d9:a4:da:35:ba:1a:
a7:a0:80:eb:a0:e8:94:7b:53:31:d3:02:8c:a3:f1:
66:5e:0f:ff:58:8e:dd:d3:9d:93:41:91:7d:62:60:
b1:b7:6b:10:09:29:3c:31:91:0c:76:bd:8c:2b:ba:
21:32:b7:5e:0b:df:41:6e:97:19:54:9e:9c:fa:d2:
da:71:36:3b:8d:d1:6f:25:d0:28:95:48:94:05:24:
19:83:34:f7:58:52:56:96:a4:1b:90:9c:34:de:07:
04:b5:5d:0a:dc:f9:65:0f:ae:c1:ae:fc:99:d3:c3:
bb:c8:de:8b:bb:ee:22:20:e0:1a:44:4d:e3:ba:ef:
70:92:bb:85:d8:f7:5d:54:0d:f9:fd:2e:19:b0:80:
3f:b4:67:1e:11:f4:7c:65:ef:37:3c:f0:50:fe:19:
1d:94:72:fa:5b:c3:47:5c:57:53:38:38:fc:ca:ba:
7a:35:24:fc:83:05:33:9c:21:2b:8c:a3:ac:0b:91:
76:0f:2c:f6:53:74:d4:35:2e:71:ec:3c:be:20:df:
d7:40:af:e9:bd:50:ef:42:55:cc:af:63:a5:ee:79:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:A1:A2:41:5F:CF:BA:C1:DA:64:BE:D2:6D:8D:41:B1:88:17:1D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA3F0538A87911EDA872717EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.137.0/24
103.81.192.0/23
103.83.57.0/24
103.135.60.0/24
123.253.236.0/22
IPv6:
2001:df3:bf00::/48
Signature Algorithm: sha256WithRSAEncryption
21:80:d7:a8:66:56:dd:67:2d:f4:59:e7:55:d0:ea:b3:29:3e:
c1:c8:f1:f3:53:f8:88:16:bc:59:c8:2c:a8:10:c9:2f:ad:bb:
8a:fb:66:5d:10:01:3a:19:23:56:fd:6e:4e:58:42:7d:f4:e2:
6c:f8:69:e4:27:28:df:f4:ee:64:45:5e:8c:25:36:d3:fe:0d:
97:32:56:88:e2:26:92:f5:40:b7:8e:fc:72:0b:fd:38:1a:91:
f0:16:c0:ff:31:8b:e2:cd:2d:45:b2:bb:47:86:4f:40:00:c3:
ba:19:b7:3c:13:22:bb:47:81:8f:f0:ef:56:f2:91:6b:df:90:
25:07:02:11:3f:4f:b7:3f:da:6b:47:07:48:2e:72:d4:4a:ec:
30:cc:42:4b:ee:f7:02:2a:04:f4:50:0c:0f:21:68:d2:ba:d5:
d9:9d:df:a9:05:7d:92:02:6c:c3:da:b9:1c:82:35:f6:75:af:
c3:3c:32:93:a8:65:52:7e:21:76:f2:da:ca:6f:af:b9:30:be:
39:2b:6c:a8:29:60:8e:f3:e2:66:90:30:11:a6:94:6c:1f:8b:
35:79:c9:81:60:30:55:60:e5:bb:97:31:e8:1a:f7:d5:a5:7f:
2c:5a:e2:b9:3e:2d:59:7e:0a:c0:a2:2e:f2:d9:37:af:39:a1:
af:8d:84:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:46:01 2025 by rpki-client