Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/C2D5B85E9BFC11ED99828F6BC4F9AE02.roa
File: C2D5B85E9BFC11ED99828F6BC4F9AE02.roa (raw, json)
Hash identifier: mHmZau6G9yGcJOFiIh10/4qmNuJVGBI87JICqiEhFs8=
Subject key identifier: 61:7A:09:DD:0A:25:14:93:CE:D5:22:9A:97:72:8B:68:29:80:9D:B5
Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial: F8
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/C2D5B85E9BFC11ED99828F6BC4F9AE02.roa
Signing time: Sun 05 May 2024 06:08:56 +0000
ROA not before: Sun 05 May 2024 06:08:56 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 150726
IP address blocks: 103.74.10.0/23 maxlen: 23
103.74.10.0/24 maxlen: 24
103.74.11.0/24 maxlen: 24
2001:df1:dd40::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 May 2024 09:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Validity
Not Before: May 5 06:08:56 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66372278-8029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:99:47:4b:3c:73:09:53:1c:87:03:46:62:
56:a6:e2:e6:f5:ab:d9:83:f5:f4:55:ce:54:76:40:
ff:4b:b2:ed:d6:a4:28:23:9d:52:32:af:c0:08:c8:
e4:83:f2:8a:be:08:f0:96:9e:46:ac:c2:97:d0:b3:
5b:17:7e:13:57:50:2f:d7:3e:47:05:e9:d7:f3:9e:
07:75:6d:cc:4b:5f:ad:1a:f1:00:c8:56:c5:d8:8d:
39:b6:a2:65:0f:58:14:7a:7b:db:1b:31:4f:d1:d7:
03:cc:fb:5a:b6:ed:1d:71:2e:50:cf:1d:3d:a4:d4:
26:e5:94:ed:ae:1c:73:25:e1:55:99:f4:1f:e1:b9:
27:8e:18:0f:38:43:be:6b:36:60:57:b1:05:eb:28:
ad:54:bc:d7:cf:b9:18:ee:15:be:cc:2f:05:cf:3f:
36:87:76:29:4e:7b:9c:05:45:9f:ce:0b:da:88:1b:
dd:43:61:0a:15:34:73:a3:55:63:13:1e:71:9c:ee:
ec:fb:4d:90:85:5f:7c:4a:e9:63:06:79:9b:e9:cd:
e4:30:72:8f:ac:52:d1:ee:e9:2b:85:0a:6d:47:5f:
45:19:14:9d:61:f4:9b:bc:b1:ca:1d:12:7f:df:d2:
44:cd:16:e3:3a:3f:6c:0b:ab:95:89:2d:06:76:35:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7A:09:DD:0A:25:14:93:CE:D5:22:9A:97:72:8B:68:29:80:9D:B5
X509v3 Authority Key Identifier:
keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/C2D5B85E9BFC11ED99828F6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.10.0/23
IPv6:
2001:df1:dd40::/48
Signature Algorithm: sha256WithRSAEncryption
72:11:1b:34:17:90:85:79:db:95:63:73:52:62:72:a8:44:1e:
b4:79:24:ca:7e:e3:99:74:41:54:b1:5e:07:70:0d:d9:2a:cf:
78:e0:90:27:bf:4c:1f:4d:05:8a:46:68:2a:1f:93:20:ff:5a:
87:e2:8a:a4:f2:0a:c9:b8:24:b5:7b:fc:49:36:ef:15:ab:34:
15:76:fa:93:1a:80:5e:5a:6c:15:a9:9a:7f:f0:2c:c6:ba:9f:
a6:50:d8:20:8b:c0:8d:26:26:53:56:65:d5:d6:ec:26:5e:d9:
6a:80:ea:40:97:45:16:5b:e6:1c:2a:42:c5:99:4e:41:a1:a7:
70:1f:ba:04:96:de:5c:e1:e9:bb:58:5d:5e:c9:8d:b6:7d:1f:
db:ff:6a:7a:01:f1:04:8e:4c:c8:de:4a:f0:54:1f:f3:bf:cf:
09:c9:5f:91:dc:39:3e:dd:2e:b0:2c:2f:f9:58:58:9f:ec:46:
54:e1:fa:1e:91:b1:0f:31:cd:8d:32:26:0f:80:b7:66:a3:cc:
d0:cc:9f:7d:ad:4a:87:b4:f8:f8:ca:46:f3:1e:a9:46:29:f0:
fd:1e:c3:4a:e4:ff:8d:eb:50:86:24:3b:f8:6c:24:e3:f8:22:
df:d6:bd:0d:98:69:c9:fd:14:0f:8e:f2:92:4d:b1:46:d4:74:
11:9c:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:23:08 2025 by rpki-client