Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa
File: F24192CCFFED11EB93712E74C4F9AE02.roa (raw, json)
Hash identifier: op8eIwk8STt7QxHFfKbBY8WDZvT/97PWqVXOI6SaFpU=
Subject key identifier: C3:BB:3B:29:01:51:D6:B6:E3:F8:C1:D6:FD:A5:1B:02:86:1A:09:C0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ABDE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa
Signing time: Fri 21 Mar 2025 09:53:28 +0000
ROA not before: Fri 21 Mar 2025 09:53:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133296
IP address blocks: 43.239.110.0/24 maxlen: 24
43.243.76.0/24 maxlen: 24
43.243.77.0/24 maxlen: 24
43.243.78.0/24 maxlen: 24
103.131.24.0/23 maxlen: 24
103.233.24.0/23 maxlen: 24
103.251.22.0/24 maxlen: 24
202.162.231.0/24 maxlen: 24
210.89.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 12:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43998 (0xabde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 21 09:53:28 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67dd3718-f74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:93:ed:d9:18:5c:34:f8:2e:2a:eb:fb:ff:
11:ab:91:76:ca:58:23:98:54:a0:46:7b:0d:52:98:
01:c8:f3:b4:2f:02:12:f3:de:79:bb:38:c4:2d:a7:
1d:fb:1e:f3:3f:61:fb:33:68:70:db:fd:3c:ac:76:
26:2a:29:96:72:6e:7b:e8:95:91:73:9e:24:b5:36:
76:bd:d4:f7:a3:ef:5a:54:28:a3:56:5e:e1:bd:08:
a0:75:af:55:95:5c:bb:f1:ec:75:d3:c9:4e:80:8d:
c2:d4:90:ff:d8:d4:90:62:e6:f8:47:f4:fb:e4:aa:
f8:ab:58:2c:a1:cb:8f:1a:8b:72:0a:12:43:56:be:
6a:b6:c6:c0:c5:01:a8:55:b4:9a:1a:c0:6d:32:82:
42:75:76:5b:5d:53:46:9c:64:03:a0:ad:d4:0b:f6:
e0:aa:1b:c6:46:2b:6f:30:5b:6f:e6:94:f3:e9:e1:
07:e3:dd:21:8e:93:6d:93:a8:88:5e:14:18:12:c1:
4c:33:8a:9c:53:32:19:44:fb:5f:14:ca:42:32:ff:
cf:64:23:6f:47:4e:81:f5:fc:25:69:2e:74:7e:c3:
f9:b1:c1:e2:0f:bc:c2:92:ff:5d:3b:a3:e0:92:b8:
cd:c7:3f:7c:65:9f:7b:f3:3b:53:9d:22:34:b7:ff:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:3B:29:01:51:D6:B6:E3:F8:C1:D6:FD:A5:1B:02:86:1A:09:C0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.110.0/24
43.243.76.0-43.243.78.255
103.131.24.0/23
103.233.24.0/23
103.251.22.0/24
202.162.231.0/24
210.89.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:bc:46:2a:2c:a1:4d:fd:8c:a6:6a:99:79:96:d2:cc:f4:71:
70:8f:31:b5:5a:0c:d9:0a:0f:7a:a0:e0:b6:8d:64:39:77:0c:
28:eb:0a:6c:38:5d:5e:bc:7b:5c:38:75:33:94:43:8e:46:b0:
57:00:d8:18:13:d1:7a:13:2b:be:c2:76:4a:bb:a8:dc:8e:80:
d3:4d:0c:6d:fb:38:b4:c9:69:3e:bf:cb:e3:e6:b5:66:7d:06:
0b:66:7f:29:de:30:20:ec:08:2e:5e:81:ca:49:ae:a7:e9:30:
a9:26:7c:e1:f0:39:9f:3f:2d:2d:47:89:74:e9:10:98:6a:04:
21:d3:c9:a1:7e:b0:d8:1c:8a:6e:16:db:44:39:0f:aa:7a:78:
22:c2:8d:3d:1a:9b:16:b4:ee:91:8c:99:3f:1c:4f:dd:1b:75:
b9:6b:7c:25:7c:a0:88:a1:bf:9f:63:c4:50:ba:db:b1:7c:e6:
f4:5d:95:a3:12:41:e8:aa:05:45:9b:ae:46:cf:f4:9a:d8:57:
d3:ac:31:dd:19:81:09:42:8a:14:16:01:ff:2a:b2:ad:17:52:
7f:0a:51:77:77:b0:ea:b5:c8:b7:a4:ca:a2:19:cf:a7:8d:09:
ab:41:0b:e5:bb:b9:06:44:d1:d0:55:0a:57:7e:09:11:f8:7d:
5f:bd:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:40 2025 by rpki-client