Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3E57888177B11EB93538337C4F9AE02.roa
File: F3E57888177B11EB93538337C4F9AE02.roa (raw, json)
Hash identifier: jj9HYXmkpuYSEKhoWLnnhp6n2esCtVR7VPJsh6M65rE=
Subject key identifier: D3:1F:07:35:EA:24:EA:98:62:78:12:72:F8:A3:E6:B6:58:33:40:11
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8D40
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3E57888177B11EB93538337C4F9AE02.roa
Signing time: Thu 30 May 2024 16:14:50 +0000
ROA not before: Thu 30 May 2024 16:14:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141325
IP address blocks: 103.157.176.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 08:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36160 (0x8d40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:14:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a5fa-7ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:28:f8:91:fd:64:1e:ed:ad:5f:73:7b:83:
0b:0a:b1:37:f8:dc:ef:b1:a1:9e:05:41:24:ba:10:
31:e8:32:00:a1:bc:bb:6d:88:0d:78:0c:3c:d0:04:
7d:a4:bc:91:2d:f0:a8:76:0e:42:af:d6:7e:19:85:
ac:33:f5:0f:c2:3b:90:5f:ce:ea:0e:31:8a:ba:61:
b6:4c:06:41:b9:cd:14:9f:44:be:1e:eb:e2:db:b0:
c3:ce:b9:0b:d9:96:50:34:cb:a1:b9:15:55:90:b6:
b3:92:b0:1c:be:08:b7:f7:3c:b3:8a:cc:15:b4:2b:
ea:1e:29:4a:cb:9a:ee:3b:d8:a6:f4:e3:e4:18:bd:
60:90:f7:d1:c1:2d:e5:63:1d:c9:0e:7d:2b:db:d0:
89:bf:b4:2a:b8:70:aa:54:fa:11:c5:34:a9:af:20:
36:c1:64:e0:79:34:03:f6:70:43:8c:2f:92:b7:33:
45:67:e1:39:f1:35:dc:43:75:43:7f:56:07:22:99:
b6:8f:5d:18:c1:78:ee:cc:4c:b2:d9:6d:40:ac:37:
07:d2:14:94:02:ac:3c:41:35:9a:cc:3f:58:44:3a:
5c:02:aa:3f:21:47:5f:52:6d:4a:4c:0b:8a:dc:23:
6b:49:af:fd:33:08:e5:27:ec:91:3b:c3:1c:1d:ce:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:07:35:EA:24:EA:98:62:78:12:72:F8:A3:E6:B6:58:33:40:11
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3E57888177B11EB93538337C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.176.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:70:b9:1a:f0:b5:9d:e6:c8:25:c5:67:6c:78:7f:8f:8d:4c:
46:ab:d2:61:ac:d7:b5:f2:eb:0c:04:6e:49:e7:a8:6e:9e:c9:
6f:0d:e5:2f:33:85:0e:a9:5f:6a:a9:eb:63:5c:99:26:a0:a5:
6c:8a:1b:87:dc:91:72:48:93:e9:31:3d:65:47:f1:64:90:79:
86:ed:be:9e:c0:cd:9d:52:bb:b1:37:11:40:ce:af:60:2d:19:
77:a2:a6:60:14:4e:0d:8a:2d:6e:df:74:d3:09:53:ef:4a:de:
bc:30:af:0d:e6:78:08:55:08:80:9d:00:7c:98:d2:4c:95:0e:
08:fd:49:6c:07:80:a3:e3:74:e5:1b:b4:0c:0b:44:bc:8e:0c:
bf:5d:70:1c:ee:22:ec:f9:d2:68:96:fc:88:60:91:5d:0b:99:
ab:15:f7:dc:c0:3b:cc:91:84:15:6f:d0:51:94:ad:ce:03:68:
e2:6c:41:fa:91:f5:3a:07:62:58:f3:17:f9:2e:dd:14:ad:f0:
86:4b:65:49:97:97:ff:0c:dd:e8:51:44:dc:77:46:9b:96:0a:
9d:bd:32:40:4b:72:51:ed:6a:4c:6f:46:11:c6:28:24:6d:f3:
bb:ff:f7:02:e9:87:ab:ff:43:77:ba:25:5d:32:cd:69:5d:a8:
85:dd:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:44 2025 by rpki-client