Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/F7807F84982911ED90F8C877C4F9AE02.roa
File: F7807F84982911ED90F8C877C4F9AE02.roa (raw, json)
Hash identifier: QEPgVgTqThfFbIRxW9/DnVJVfbESvP2iLqbTKo9iGJk=
Subject key identifier: F8:52:9C:35:DA:44:27:F2:07:6A:34:7E:EF:78:25:62:A2:68:8B:E0
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 0780
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/F7807F84982911ED90F8C877C4F9AE02.roa
Signing time: Sat 19 Oct 2024 17:01:22 +0000
ROA not before: Sat 19 Oct 2024 17:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137000
IP address blocks: 103.149.58.0/24 maxlen: 24
103.149.59.0/24 maxlen: 24
2405:e3c0::/32 maxlen: 32
2405:e3c0::/48 maxlen: 48
2405:e3c0:1::/48 maxlen: 48
2405:e3c0:2::/48 maxlen: 48
2405:e3c0:3::/48 maxlen: 48
2405:e3c0:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Jan 2025 17:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B
Validity
Not Before: Oct 19 17:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6713e5e2-fd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:0a:95:e5:ce:15:f7:dd:82:89:e4:8b:32:
41:b4:2f:52:ec:75:e6:82:25:e9:89:2a:57:3d:32:
10:03:96:7e:b7:07:5d:b0:3f:ab:02:ed:eb:80:08:
55:7c:87:eb:14:26:d3:3f:17:e4:99:ec:9d:d7:89:
05:92:cf:c3:c7:e5:3a:96:93:f6:39:d9:e0:48:31:
b1:cf:3d:55:66:98:52:c8:ab:3d:a3:14:4f:25:d7:
5f:4b:af:21:17:7d:34:b6:6a:59:b5:bb:fa:43:a1:
45:d0:89:7a:8e:31:cb:87:14:c9:0b:ea:a9:c7:36:
68:c8:69:2f:db:81:97:dc:e9:87:ec:db:6a:60:de:
a9:f0:81:db:0f:e9:d8:7d:6f:8f:7e:b4:f4:8c:9a:
a6:22:1a:9f:19:04:32:2d:cd:88:92:2f:c7:2a:09:
82:cc:98:8a:96:8c:e7:52:ba:da:01:4c:c2:ad:cf:
c7:dd:29:d6:c3:49:45:b6:aa:f5:dd:ca:37:0a:60:
3d:27:fa:30:c1:32:a8:c0:50:4d:94:08:88:4e:1e:
5b:ae:b0:f5:8d:e7:4c:7c:63:cd:5a:bd:75:43:04:
a9:9f:cf:34:7a:f7:b5:f7:37:08:81:a3:ba:1c:74:
16:f6:75:43:2f:2f:82:4a:bc:6b:97:ff:db:0e:29:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:9C:35:DA:44:27:F2:07:6A:34:7E:EF:78:25:62:A2:68:8B:E0
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/F7807F84982911ED90F8C877C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.58.0/23
IPv6:
2405:e3c0::/32
Signature Algorithm: sha256WithRSAEncryption
70:49:de:07:ac:ac:57:f0:72:dd:4b:ee:05:b9:ee:d2:d4:93:
44:0b:1b:77:6f:a6:6d:18:7a:10:f4:34:63:50:50:78:d4:15:
f1:aa:e8:51:e8:64:fe:da:5d:7d:d0:22:5d:e1:92:ff:3d:6d:
17:e0:24:86:be:1a:a0:f9:9e:0c:8c:88:e9:c6:56:85:ba:d6:
a4:ed:5a:5b:02:94:f6:bf:16:88:ec:00:8a:78:6f:3d:5b:5f:
7f:04:68:64:f6:4a:59:6a:51:8c:79:be:e5:cf:97:99:a2:c5:
34:99:8a:15:7f:11:73:db:bf:4e:48:44:32:82:16:1f:7c:86:
43:f8:01:fe:f1:c1:90:3a:ce:c6:b0:76:0d:7c:f9:04:31:24:
83:d6:0d:21:93:3d:8a:4b:00:b3:3a:3c:a5:e3:b2:28:f0:f2:
40:73:04:05:04:04:04:83:f2:17:c2:cc:22:a4:ac:54:2a:7b:
35:ed:f4:79:02:0a:1e:c7:f4:4c:b4:e3:7d:59:d3:f4:9c:8b:
ce:cd:a5:47:e9:e9:df:63:eb:0a:84:89:71:f8:a5:ba:3c:40:
34:64:d8:d4:54:99:04:ac:8d:b5:25:34:9b:b8:65:2b:df:d0:
29:da:dc:73:6a:d9:ac:d1:7f:12:8d:8e:97:b0:04:d7:1b:3b:
ad:69:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:04 2025 by rpki-client