Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4990600B14111EF9B45681EC4F9AE02.roa
File: F4990600B14111EF9B45681EC4F9AE02.roa (raw, json)
Hash identifier: /Thx2ElCETOf1/Qa54MQMZ6TRFS9+Otjr2AA+vQw+zo=
Subject key identifier: 82:A4:34:08:B5:25:52:F1:C3:E8:65:BA:59:5A:69:2C:E0:27:C4:4E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E77
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4990600B14111EF9B45681EC4F9AE02.roa
Signing time: Tue 03 Dec 2024 06:43:51 +0000
ROA not before: Tue 03 Dec 2024 06:43:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134006
IP address blocks: 103.47.153.0/24 maxlen: 24
103.57.70.0/24 maxlen: 24
103.57.71.0/24 maxlen: 24
103.137.194.0/23 maxlen: 24
103.155.40.0/24 maxlen: 24
103.155.41.0/24 maxlen: 24
103.172.154.0/23 maxlen: 24
103.189.86.0/24 maxlen: 24
103.189.87.0/24 maxlen: 24
103.197.51.0/24 maxlen: 24
2407:d640::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Dec 2024 12:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40567 (0x9e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 3 06:43:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674ea8a6-1664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:cc:70:8b:3d:da:68:f5:51:02:f8:b6:3c:
9f:6c:87:1a:82:be:58:1f:58:55:76:7b:cf:5a:cc:
d5:eb:8d:f1:98:cd:5e:af:79:a7:33:53:8c:00:95:
29:43:a4:ee:95:b7:d3:5c:54:72:23:2b:7d:13:28:
60:a8:fd:30:90:7e:2f:ce:7b:fe:0f:fd:da:3f:b9:
28:a4:79:a4:f6:03:d4:e2:99:2c:bb:06:a1:17:23:
4c:56:b4:01:bb:b5:cf:3a:74:3a:a2:cf:50:5d:2b:
51:2c:ee:f9:e2:66:81:64:c5:2a:c6:1b:b1:6c:89:
3a:8b:85:47:60:74:70:24:02:ef:4c:4a:4a:cc:1e:
95:d2:57:be:fd:c5:4e:f0:57:8a:68:9f:11:6d:5f:
86:1f:3d:f4:d6:44:73:7c:1f:bf:7c:93:4f:28:9c:
86:02:68:be:98:d3:ac:b8:8a:e4:29:c1:92:2d:ee:
24:b9:dc:e5:43:42:63:b0:18:82:76:1b:f3:87:6e:
06:4f:2e:d2:ac:ce:f0:4c:1c:fb:70:08:0c:c2:1b:
b7:97:5b:fe:67:30:10:9e:af:4c:96:01:a6:c5:75:
a7:96:a2:43:89:eb:f4:5f:f1:ed:43:dd:c7:bb:84:
da:03:ad:3a:14:ca:4b:3d:3f:b8:90:20:33:ff:4f:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A4:34:08:B5:25:52:F1:C3:E8:65:BA:59:5A:69:2C:E0:27:C4:4E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4990600B14111EF9B45681EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.47.153.0/24
103.57.70.0/23
103.137.194.0/23
103.155.40.0/23
103.172.154.0/23
103.189.86.0/23
103.197.51.0/24
IPv6:
2407:d640::/48
Signature Algorithm: sha256WithRSAEncryption
6a:0c:54:0b:9f:bb:ca:0a:ec:dd:92:bd:af:4a:6d:c3:7d:c0:
9b:f0:41:13:2d:9d:b1:9d:5c:04:2f:8e:60:3e:e8:84:b7:c1:
8b:76:c1:1f:82:3b:22:f3:89:62:67:79:11:78:59:e9:04:a6:
f8:13:4e:ee:73:54:d6:4a:43:4f:90:1d:97:ce:d7:ea:9d:37:
aa:6b:da:3a:33:0d:08:7d:29:5e:6e:01:aa:56:9a:b4:44:c7:
37:c6:79:31:1d:7d:96:85:0e:bb:c6:74:aa:f4:68:fb:2b:d7:
50:88:5c:6a:18:4f:99:bb:71:00:bf:5e:1f:2d:39:83:d9:f2:
f7:de:76:6d:5b:e2:20:8d:36:a6:d6:9b:4d:46:7d:9e:80:fc:
2b:4e:d6:3f:8e:18:82:9c:e0:47:b5:78:65:b4:22:e1:00:27:
09:c1:a8:d3:56:25:92:e1:77:75:af:0f:a2:4c:7a:59:6a:9e:
a1:9d:3e:f1:80:7a:df:4a:9f:fa:7e:75:94:92:45:09:92:d6:
19:f6:29:d5:2a:aa:03:7c:60:ec:6f:09:cf:ed:42:12:e7:2f:
1f:49:c1:f5:16:11:d9:e4:d6:44:b4:73:de:4c:88:07:a9:d5:
59:a6:87:b6:7c:c7:5b:5a:ca:85:1b:b9:25:f5:ad:24:39:df:
50:ac:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:12 2025 by rpki-client