Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/99764138CB3311EEB10FF96EC4F9AE02.roa
File: 99764138CB3311EEB10FF96EC4F9AE02.roa (raw, json)
Hash identifier: 41TpwbGVjStUDQoCV4FTqLgntQIZh8JdIWFkWpJd+OM=
Subject key identifier: 7A:CC:7F:2F:9D:54:61:58:1D:AA:4A:7D:B3:A9:E8:4D:F2:A2:34:A5
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 0104
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/99764138CB3311EEB10FF96EC4F9AE02.roa
Signing time: Wed 14 Feb 2024 12:21:37 +0000
ROA not before: Wed 14 Feb 2024 12:21:37 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 151080
IP address blocks: 103.41.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 07:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Validity
Not Before: Feb 14 12:21:37 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65ccb051-26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:ca:49:d8:45:cb:78:e8:19:d4:4e:6c:6a:
f3:97:2b:b9:75:7b:52:e9:20:91:7f:99:7a:17:54:
22:67:93:7e:44:2c:da:f2:ad:9e:21:b3:bc:5c:8f:
fd:37:64:da:45:73:7c:ed:12:a9:d7:c5:4f:0b:3e:
ab:e9:1d:58:82:c9:d5:71:c4:de:4f:0d:cb:69:f0:
2b:31:2b:63:01:b7:ff:cb:c7:81:b7:25:05:ff:cd:
cd:cc:41:6a:88:0a:4a:4f:c5:8e:d5:a8:41:d9:f1:
d0:57:8b:a3:42:38:1f:0a:c7:af:fc:13:6c:6f:52:
50:75:6a:9a:68:42:b5:4d:5d:e6:87:11:7c:62:72:
7f:bc:e0:8f:0c:02:1e:c3:c9:fb:1e:0c:a0:e6:08:
82:ff:85:70:42:45:25:a5:61:e6:a9:1d:19:5b:6c:
fa:46:37:95:1c:52:5d:47:ac:07:e8:fc:2f:29:b4:
05:0e:df:ef:26:d2:f1:d4:6c:76:34:0e:7e:3c:a8:
0a:dd:1b:18:95:8e:4e:a5:6d:f0:96:25:f2:cd:d6:
d1:61:a3:97:4d:2f:5c:ec:ca:ad:fc:6f:0a:0d:bd:
f2:53:56:72:c1:33:5c:e0:de:46:c5:f5:b8:a5:0e:
0e:f2:eb:88:43:14:95:93:1f:7f:b4:73:6b:36:87:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:7F:2F:9D:54:61:58:1D:AA:4A:7D:B3:A9:E8:4D:F2:A2:34:A5
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/99764138CB3311EEB10FF96EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.95.0/24
Signature Algorithm: sha256WithRSAEncryption
84:89:a9:b3:2a:17:41:eb:92:26:fb:d5:d3:be:bb:0f:7c:5d:
77:62:4e:30:5d:7a:ad:e2:1f:e9:d0:61:7a:34:91:40:0f:d1:
3a:5b:a6:bc:65:de:b5:5d:d8:22:a5:72:f1:e6:5e:b2:83:93:
29:72:8a:30:4f:d8:a5:b3:87:35:3e:14:b5:9e:95:22:07:6d:
dd:ac:e9:7e:a6:a4:36:44:6b:f4:31:8d:25:53:ea:ee:0f:c7:
04:16:09:0e:65:15:06:a8:aa:3b:0c:11:5b:b4:ec:71:69:b4:
85:8b:a9:31:0a:57:94:d9:12:96:20:bb:b5:fb:79:3e:a5:74:
10:e9:e6:13:7a:8d:3c:1e:6f:82:bc:49:d0:dd:1a:58:11:aa:
72:58:46:9c:f2:bf:91:04:2b:c1:e9:f3:7f:0c:47:79:6c:e2:
e3:d8:3c:c9:f6:9f:07:6f:3d:1f:20:ff:a3:a7:d8:c8:6f:ee:
7b:0e:df:a4:5d:67:58:0a:77:4b:21:d6:96:7a:e0:28:25:e1:
8e:4c:a7:91:39:be:e1:35:a7:b4:7e:0a:51:43:47:c9:a6:3e:
aa:e6:4b:90:22:0b:03:24:d0:47:24:48:ff:ef:a3:34:9b:e3:
f6:0e:f4:7c:d7:90:24:7b:2e:e5:31:f5:be:48:ec:43:73:93:
47:e0:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 08:31:00 2024 by rpki-client on console-ams.rpki-client.org