Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBBE8D88D56011EEA747C959C4F9AE02.roa
File: EBBE8D88D56011EEA747C959C4F9AE02.roa (raw, json)
Hash identifier: N4XT4bvlB7JmoTH2BuQZXQAcmgPP/kz42RHKsZUtrA8=
Subject key identifier: BA:BF:6F:97:D4:EC:2D:B1:02:80:E3:88:63:7E:69:E7:C6:5E:33:32
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 88F4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBBE8D88D56011EEA747C959C4F9AE02.roa
Signing time: Thu 30 May 2024 15:56:47 +0000
ROA not before: Thu 30 May 2024 15:56:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133589
IP address blocks: 103.43.80.0/22 maxlen: 24
2001:df0:9fc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Mar 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35060 (0x88f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:56:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a1bf-753f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9b:db:3c:d1:1d:78:a2:18:11:72:5d:ba:99:
1d:ea:75:23:d8:7b:74:ab:f7:9a:92:64:85:65:fb:
55:ba:fa:60:10:d6:09:af:19:11:96:1a:68:e9:f4:
cd:c3:55:dd:62:52:5f:f5:b7:eb:95:74:74:45:a1:
b0:40:10:c2:fe:76:95:4d:72:25:26:de:f3:3d:f8:
50:9f:c5:9e:ec:02:84:79:29:c5:36:95:f8:02:7c:
1f:3a:ff:b7:ac:41:4c:de:5c:28:9f:0f:91:99:b4:
1d:82:ca:58:68:67:3c:34:9f:26:e3:88:e1:52:f1:
4b:be:a1:a4:64:4b:1e:e5:16:73:53:7a:7a:00:38:
74:a1:d4:5f:b3:21:ed:eb:8e:67:95:8d:8c:17:de:
da:b4:d4:0c:ab:48:1f:63:02:16:35:cc:90:f3:a9:
cf:da:b3:10:56:b9:77:41:ef:59:c1:d9:6f:5d:b6:
f0:22:3c:d9:7a:9b:9a:0b:2c:a4:8d:59:dd:f6:31:
e8:82:44:df:cc:c4:f8:3f:ba:e5:54:14:44:d5:58:
3a:58:c7:f6:65:4b:1d:98:f2:48:38:a3:5d:34:48:
c3:1b:cc:8a:05:e7:61:b4:1a:e5:d1:31:a4:60:77:
99:e7:b1:a9:94:88:b5:83:b2:50:b1:b6:d8:69:4b:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BF:6F:97:D4:EC:2D:B1:02:80:E3:88:63:7E:69:E7:C6:5E:33:32
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBBE8D88D56011EEA747C959C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.80.0/22
IPv6:
2001:df0:9fc0::/48
Signature Algorithm: sha256WithRSAEncryption
92:e5:26:ff:12:17:ba:84:24:35:25:77:92:b8:2e:8f:1b:d6:
61:ed:46:e7:b8:58:cf:94:f3:78:65:62:c3:e9:c4:2a:b3:6b:
25:92:03:78:c7:df:41:84:cc:d6:d0:ba:71:fc:85:9b:72:1f:
8f:71:d8:2a:fc:0d:d8:b6:74:8e:7b:06:00:b1:82:94:72:a8:
e7:85:ec:38:7f:b2:23:7b:6a:ce:f0:d8:a2:56:7a:d5:0a:4b:
5d:24:85:98:9b:ac:55:bd:1a:6f:43:15:8e:8c:00:35:53:a2:
13:c1:29:27:1a:7b:72:4e:eb:eb:cd:83:a9:33:e3:de:03:4a:
6c:76:2c:f9:9c:e5:7b:8a:9f:8f:c1:8b:c0:95:85:aa:b6:65:
be:88:f2:54:ad:be:b9:b1:d0:2f:50:25:e7:a4:ea:7d:5b:81:
ea:80:2a:4c:4d:da:05:b4:7c:68:d4:8b:b2:f6:7f:1f:93:59:
88:f0:09:8d:35:cd:e4:38:41:52:3a:27:45:e6:7b:f3:db:f6:
34:5e:9b:e6:e4:44:e2:11:b8:77:8d:dd:9e:cd:31:22:bc:56:
82:3f:6b:26:be:14:4d:12:94:75:39:04:e4:65:e8:79:f9:91:
9d:a5:40:30:55:38:39:21:db:8e:a8:f6:3d:66:ba:85:0a:53:
57:f2:e4:c0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAIj0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTY0N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGExYmYtNzUzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPKb2zzRHXiiGBFyXbqZHep1I9h7dKv3mpJkhWX7Vbr6YBDWCa8ZEZYaaOn0
zcNV3WJSX/W365V0dEWhsEAQwv52lU1yJSbe8z34UJ/FnuwChHkpxTaV+AJ8Hzr/
t6xBTN5cKJ8PkZm0HYLKWGhnPDSfJuOI4VLxS76hpGRLHuUWc1N6egA4dKHUX7Mh
7euOZ5WNjBfe2rTUDKtIH2MCFjXMkPOpz9qzEFa5d0HvWcHZb1228CI82Xqbmgss
pI1Z3fYx6IJE38zE+D+65VQURNVYOljH9mVLHZjySDijXTRIwxvMigXnYbQa5dEx
pGB3meexqZSItYOyULG22GlLSgsCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBS6v2+X
1OwtsQKA44hjfmnnxl4zMjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCQkU4RDg4
RDU2MDExRUVBNzQ3Qzk1OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQCZytQMA8EAgACMAkDBwAgAQ3wn8AwDQYJKoZIhvcNAQEL
BQADggEBAJLlJv8SF7qEJDUld5K4Lo8b1mHtRue4WM+U83hlYsPpxCqzayWSA3jH
30GEzNbQunH8hZtyH49x2Cr8Ddi2dI57BgCxgpRyqOeF7Dh/siN7as7w2KJWetUK
S10khZibrFW9Gm9DFY6MADVTohPBKScae3JO6+vNg6kz494DSmx2LPmc5XuKn4/B
i8CVhaq2Zb6I8lStvrmx0C9QJeek6n1bgeqAKkxN2gW0fGjUi7L2fx+TWYjwCY01
zeQ4QVI6J0Xme/Pb9jRem+bkROIRuHeN3Z7NMSK8VoI/aya+FE0SlHU5BORl6Hn5
kZ2lQDBVODkh246o9j1muoUKU1fy5MA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:42:17 2025 by rpki-client