Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F566E856BE6511EE83B0C14CC4F9AE02.roa
File: F566E856BE6511EE83B0C14CC4F9AE02.roa (raw, json)
Hash identifier: mbhDm3XrYESP+bfnZgnFQfmkAH79GhTw95EkdWpfHOg=
Subject key identifier: C9:62:AB:F1:CE:56:B8:CE:02:E0:E2:9D:69:10:B1:31:BD:08:5A:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89C0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F566E856BE6511EE83B0C14CC4F9AE02.roa
Signing time: Thu 30 May 2024 16:00:09 +0000
ROA not before: Thu 30 May 2024 16:00:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134858
IP address blocks: 103.39.116.0/22 maxlen: 24
103.80.22.0/23 maxlen: 24
103.105.96.0/23 maxlen: 24
103.127.224.0/22 maxlen: 24
103.148.8.0/23 maxlen: 24
103.158.239.0/24 maxlen: 24
2407:8c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Sep 2024 04:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35264 (0x89c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:00:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a289-c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:45:44:87:a4:00:ae:f4:0b:a5:cf:2b:c2:
76:86:76:a4:6e:ca:84:8b:bd:89:30:83:3b:9e:91:
22:d1:48:59:65:b6:00:75:88:98:22:82:bd:94:28:
03:68:b8:4d:e0:d1:34:f3:5a:08:f9:86:ca:11:50:
d2:3a:6c:53:e0:81:a8:a0:7f:6c:28:b6:63:fe:cf:
86:a6:50:6f:ee:c3:66:6a:64:a3:9e:9c:b7:02:36:
7d:23:64:01:96:62:92:2e:ff:45:82:d4:d6:87:b0:
55:41:2d:b2:13:b5:68:1c:f9:2d:50:37:40:c1:19:
ec:13:fd:a6:73:e7:6c:a3:af:c5:72:2a:03:4e:4b:
58:ab:89:6e:23:7b:09:a2:bb:3a:f0:f4:75:0e:73:
cb:5f:a7:bc:5f:ae:bb:bf:7c:6f:89:48:64:9e:02:
fb:5f:18:fa:30:52:92:8d:69:fd:bd:cf:55:1d:b2:
d6:b9:95:62:6b:05:1c:9b:07:fd:78:46:ae:52:c7:
43:5c:74:d3:a2:db:65:99:9c:f4:fa:49:03:9e:f6:
24:ed:95:aa:5e:b0:62:ab:76:41:cf:71:1a:71:cf:
8a:10:ff:ab:74:79:97:6e:d7:03:af:dc:dc:de:7f:
35:3a:59:2a:48:0c:57:6f:01:9a:0d:67:fb:4b:8e:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:AB:F1:CE:56:B8:CE:02:E0:E2:9D:69:10:B1:31:BD:08:5A:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F566E856BE6511EE83B0C14CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.116.0/22
103.80.22.0/23
103.105.96.0/23
103.127.224.0/22
103.148.8.0/23
103.158.239.0/24
IPv6:
2407:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
01:3c:d0:b6:f6:65:97:26:cf:f5:8a:22:75:b7:54:5b:31:76:
18:99:48:78:91:ca:f4:cc:6a:f1:7e:3a:1e:c0:34:ae:45:c9:
17:35:d0:58:86:3c:e5:89:6d:98:ba:57:1c:a6:d8:e5:4b:2b:
b0:ac:c3:29:62:28:76:16:7c:1b:ce:e9:f8:b8:cc:3e:08:76:
43:14:b1:d2:2e:06:58:6b:3d:82:47:39:80:62:f4:9f:d1:77:
d0:28:0b:48:41:44:ab:2b:3e:55:ea:ea:39:b0:40:85:10:1e:
68:26:d8:31:0a:9a:c6:d0:26:3a:6d:7b:36:5c:58:57:b5:c5:
06:6f:88:77:6d:d0:0c:02:49:4f:5a:55:2a:b8:18:4b:14:6f:
ac:ea:5f:ee:b8:b6:c9:2b:6a:87:2b:c5:bf:40:e4:54:d1:3a:
ce:d7:a4:f0:56:9d:a0:df:03:58:4e:62:49:85:3d:b5:f1:6f:
2d:e4:3a:56:af:a2:35:5c:45:5b:60:82:86:f8:5b:96:e8:ce:
2b:a1:69:50:80:74:a1:d3:0d:32:90:58:ce:7b:a9:36:e1:c0:
f4:90:7e:43:b8:14:67:20:76:54:c1:20:89:22:e4:60:eb:59:
b6:ea:76:4f:00:dd:e2:09:ec:24:e7:40:b3:3a:41:c5:a1:11:
57:e2:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:57 2025 by rpki-client