Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/7E6C83A4061811F09D85F55CC4F9AE02.roa
File: 7E6C83A4061811F09D85F55CC4F9AE02.roa (raw, json)
Hash identifier: v8FQ/M/iVsMS7Iit6k3mVnWh7OEyi63PQ6C+IHHadi8=
Subject key identifier: F0:FF:E0:34:B5:FC:C1:68:59:12:0A:CB:D1:BD:20:51:14:2E:B8:46
Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial: 0581
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/7E6C83A4061811F09D85F55CC4F9AE02.roa
Signing time: Fri 21 Mar 2025 05:51:12 +0000
ROA not before: Fri 21 Mar 2025 05:51:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17455
IP address blocks: 203.3.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 21 Mar 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A9EE, serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Validity
Not Before: Mar 21 05:51:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67dcfe50-8368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:d2:0a:08:81:20:e7:7e:28:b8:c9:c1:72:
b1:26:00:3c:59:3f:87:38:05:6e:9b:66:f0:ab:12:
d7:3f:3d:4f:71:bf:14:7b:6c:76:f6:c9:9a:ce:b9:
72:56:15:1a:1a:08:fc:88:18:ec:b7:cd:1f:c9:25:
4f:f4:f4:01:8f:9f:51:60:12:72:55:54:e1:5c:93:
df:1e:65:3d:15:d2:75:c0:dc:32:b8:3b:0f:48:ee:
5a:d4:8c:b9:3b:06:95:54:81:0b:2b:3b:36:1a:3e:
4c:52:a7:1a:46:98:79:3a:7b:7b:aa:bf:77:de:6f:
b5:53:bc:3e:49:e1:c1:3d:7b:1c:a8:d4:b2:5b:b3:
45:67:9d:c4:03:29:52:17:57:fb:5d:52:ae:a8:ea:
52:5a:78:a8:a8:0a:de:11:35:b0:3a:a8:63:c7:2d:
f0:10:0f:35:40:3b:10:87:2e:47:29:ae:ab:f0:c2:
46:6f:c1:1d:81:c2:8c:65:8f:4d:93:fb:1b:94:9d:
d7:b9:55:e5:3b:72:6b:0a:94:9e:f7:d6:01:f0:97:
ba:74:6c:7b:cd:32:24:17:f1:af:fc:0a:48:ea:87:
b1:ca:12:7c:22:15:d8:d5:af:7b:e5:a9:75:55:bd:
8d:01:55:0d:ed:70:af:95:29:d7:46:05:b3:7e:db:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:E0:34:B5:FC:C1:68:59:12:0A:CB:D1:BD:20:51:14:2E:B8:46
X509v3 Authority Key Identifier:
keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/7E6C83A4061811F09D85F55CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:c4:b8:e1:c7:fd:d3:1b:63:d3:63:82:b4:12:e9:14:cb:45:
e9:c1:ec:2a:00:49:85:bd:71:c2:70:38:7a:29:ac:41:9a:39:
b0:6b:71:d4:b6:b6:12:7b:ad:6d:84:d8:af:ae:f6:f3:1c:8f:
ca:db:20:48:9d:a0:ca:2a:29:58:09:93:b6:89:ff:31:40:8c:
e2:2a:a5:47:63:ac:d5:45:27:b9:37:bd:20:5e:40:e6:95:76:
86:83:05:6b:c9:ec:d7:1e:f4:d0:19:2d:ae:55:f7:d0:43:63:
13:bd:dd:15:13:c0:77:0b:b0:f6:b8:57:1a:05:a5:80:9a:2d:
a5:72:8f:68:c0:fb:31:36:37:b1:1c:bd:cb:72:01:8d:cc:32:
5a:b9:d0:4b:9d:51:d6:b9:9a:c4:98:c5:45:7c:9c:ec:0c:b2:
9f:87:15:71:ac:49:a6:0b:a7:f7:8f:fb:2a:ec:84:53:32:c6:
a7:82:0a:07:6f:36:34:6c:54:7e:7c:bd:e1:1c:88:ee:e8:bb:
e7:d6:d9:34:af:97:be:7e:9c:7a:10:08:5f:e3:04:b7:3d:4f:
50:ea:e9:37:80:1d:bb:64:6d:85:87:81:44:31:c1:e2:50:74:
5e:62:89:4e:5e:2c:2b:7f:d3:47:f4:f2:84:58:55:a9:c6:b9:
f8:b2:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:51:30 2025 by rpki-client