Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/0B0A8F800E9911F08B5DE582C4F9AE02.roa
File: 0B0A8F800E9911F08B5DE582C4F9AE02.roa (raw, json)
Hash identifier: Vr4pA86nFEGt3ar6TFwEgqqSU9dYzhiLRlzXmsTCngM=
Subject key identifier: 35:47:4A:E2:70:78:9B:A7:23:E3:EA:40:14:D5:37:17:8E:EF:D1:94
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0B94
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/0B0A8F800E9911F08B5DE582C4F9AE02.roa
Signing time: Tue 01 Apr 2025 01:31:32 +0000
ROA not before: Tue 01 Apr 2025 01:31:32 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17408
IP address blocks: 43.230.52.0/24 maxlen: 24
43.230.53.0/24 maxlen: 24
43.230.54.0/24 maxlen: 24
43.230.55.0/24 maxlen: 24
43.231.189.0/24 maxlen: 24
43.231.191.0/24 maxlen: 24
43.246.197.0/24 maxlen: 24
43.246.199.0/24 maxlen: 24
43.251.185.0/24 maxlen: 24
43.251.187.0/24 maxlen: 24
45.115.33.0/24 maxlen: 24
45.115.35.0/24 maxlen: 24
103.15.76.0/24 maxlen: 24
103.15.77.0/24 maxlen: 24
103.15.78.0/24 maxlen: 24
103.21.105.0/24 maxlen: 24
103.21.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402
Validity
Not Before: Apr 1 01:31:32 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67eb41f4-90c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:6f:ec:fc:44:bf:2b:fa:ef:82:96:e9:64:
ed:be:0d:99:cb:97:02:24:29:2f:da:34:c6:aa:0c:
78:a0:3d:37:79:7e:22:41:54:98:27:19:37:7b:ec:
5b:2f:c5:ef:b9:c8:84:ec:ff:ca:66:dd:11:24:de:
36:e7:b0:c7:4e:72:5d:70:31:76:3e:db:1e:3a:68:
8b:2d:a6:bd:62:a0:39:a8:52:06:de:ce:ab:81:72:
85:93:2f:f2:a1:b3:c2:6e:d6:60:1f:b4:35:b3:1f:
54:56:47:73:06:6b:97:98:99:43:d0:d2:cc:8d:c6:
a6:91:e5:aa:ce:1f:21:dc:d4:b7:06:63:95:e1:a9:
6c:d3:be:b1:b9:02:30:43:e8:59:82:8f:f3:09:df:
e3:66:cd:62:63:55:de:b6:1e:5e:bb:b1:fa:af:0d:
31:09:0b:c3:02:2d:cc:1c:05:d5:34:77:cc:73:f4:
2b:c8:7e:94:da:d8:92:0a:5c:62:69:aa:7b:f2:b7:
49:fa:45:5d:22:fb:c1:88:d5:9a:d2:d6:5c:b5:6c:
fb:e2:63:1b:61:f0:e6:97:6c:82:d8:53:73:ed:5a:
4f:85:84:95:3b:3a:73:71:a2:0e:97:76:8e:23:b4:
64:69:33:ae:a1:d1:7e:f7:93:91:db:cd:82:89:50:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:47:4A:E2:70:78:9B:A7:23:E3:EA:40:14:D5:37:17:8E:EF:D1:94
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/0B0A8F800E9911F08B5DE582C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.52.0/22
43.231.189.0/24
43.231.191.0/24
43.246.197.0/24
43.246.199.0/24
43.251.185.0/24
43.251.187.0/24
45.115.33.0/24
45.115.35.0/24
103.15.76.0-103.15.78.255
103.21.105.0/24
103.21.107.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7b:57:1a:3f:2e:8b:8a:0b:fe:ca:33:a0:82:68:4e:22:d8:
c6:19:e9:24:26:f8:19:b5:3e:20:1a:a3:a2:ab:17:6c:7c:b1:
01:cb:be:7d:e2:8d:62:96:d2:a4:2c:7b:c5:59:57:2d:f2:c6:
c3:13:bc:d3:7b:c9:36:3b:29:4f:18:27:32:ba:c0:55:fd:dd:
fe:95:14:87:0b:a8:bb:a2:df:c4:15:f1:06:32:91:77:39:35:
2c:84:28:29:70:b1:83:0e:ca:eb:03:83:3f:9d:33:ae:f0:21:
c8:8f:e4:72:4b:bc:63:19:9b:f9:2d:84:83:16:ec:7f:52:9b:
be:ad:d1:56:7e:37:e3:9a:58:b1:09:2b:03:05:f8:33:0d:3e:
bb:21:cb:35:67:27:e8:4f:79:62:6f:b7:87:fa:04:26:73:e7:
a3:ba:bd:79:1b:68:00:15:fd:ad:99:0b:19:b8:4d:a2:92:a7:
90:cb:35:68:c2:0c:68:14:80:d4:b8:6a:58:88:e2:1b:08:e9:
45:df:79:d3:5e:53:00:94:5f:1b:88:d7:eb:e4:84:28:7e:4c:
b0:b7:5c:70:a5:10:16:d0:53:24:9d:4c:18:74:3b:d2:64:fa:
d0:2f:b8:9f:c5:ba:47:90:df:76:05:dd:b5:76:f8:70:3c:13:
7c:02:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:42:46 2025 by rpki-client