Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E6EBFCB8E3A711EF8EC7F178C4F9AE02.roa
File: E6EBFCB8E3A711EF8EC7F178C4F9AE02.roa (raw, json)
Hash identifier: me1jY9l6eMlCt3XIP9PsekPJlZkuc7u8bGcyXwGCU1U=
Subject key identifier: A4:00:7C:2E:C9:D2:CA:7F:EA:4C:3B:0A:9E:57:A5:87:BE:FE:D7:54
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4982
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E6EBFCB8E3A711EF8EC7F178C4F9AE02.roa
Signing time: Wed 05 Feb 2025 09:59:34 +0000
ROA not before: Wed 05 Feb 2025 09:59:34 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135967
IP address blocks: 42.96.4.0/23 maxlen: 23
42.96.12.0/22 maxlen: 22
45.124.84.0/24 maxlen: 24
103.3.244.0/22 maxlen: 22
103.3.244.0/24 maxlen: 24
103.3.245.0/24 maxlen: 24
103.3.246.0/24 maxlen: 24
103.3.247.0/24 maxlen: 24
103.74.120.0/23 maxlen: 23
103.74.122.0/23 maxlen: 23
103.79.140.0/23 maxlen: 23
103.79.142.0/23 maxlen: 23
103.121.88.0/23 maxlen: 23
103.121.90.0/23 maxlen: 23
103.147.126.0/23 maxlen: 23
103.161.16.0/23 maxlen: 23
103.161.170.0/23 maxlen: 24
103.162.30.0/23 maxlen: 23
103.163.216.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.250.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.187.168.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
2001:df4:2540::/48 maxlen: 48
2403:6a40::/48 maxlen: 48
2403:6a40:2::/48 maxlen: 48
2403:6a40:1000::/36 maxlen: 36
2403:6a40:2000::/36 maxlen: 36
2403:6a40:3000::/36 maxlen: 36
2403:6a40:4000::/36 maxlen: 36
2403:6a40:5000::/36 maxlen: 36
2403:6a40:e000::/36 maxlen: 36
2403:6a40:f000::/36 maxlen: 36
2407:2ec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Mar 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18818 (0x4982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Feb 5 09:59:34 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67a33686-82dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:06:a8:f4:d3:f4:c5:43:a2:c6:36:48:e9:
74:3f:98:f8:ce:a7:76:59:ea:9d:c0:7b:63:4e:3c:
ba:63:7d:86:99:bb:97:96:81:c6:23:e3:08:29:fd:
e1:d7:7f:7a:df:cf:89:30:ed:97:f2:d4:32:c1:85:
1b:31:a8:43:5f:70:a8:59:5b:23:8b:6f:1f:61:83:
aa:0b:e5:c6:0a:e9:7d:da:cc:cd:e5:32:ec:55:69:
f6:3f:29:e9:0f:6c:a5:f2:0a:61:f0:d6:26:a8:36:
17:aa:a7:f7:a9:4c:cd:81:05:50:46:4f:db:55:b5:
51:7f:86:09:8c:ac:54:08:fd:b9:eb:c3:ea:62:85:
af:fc:d2:98:e9:22:26:fe:81:6d:d1:0b:59:01:5f:
69:8d:72:9b:5c:eb:9f:9b:95:35:ac:82:2c:07:f2:
38:56:0e:2e:14:f6:1e:a2:ab:bf:25:77:1d:a7:a2:
15:c5:3f:76:18:5d:30:c3:85:ef:22:fa:0b:c1:6d:
4d:e4:cd:22:70:77:18:a4:ad:e7:a7:c8:59:6a:84:
5d:43:4a:b8:22:14:e5:7c:12:93:fd:d2:a2:76:53:
6d:8b:15:76:ab:10:d0:f6:b7:17:8f:70:6d:5f:16:
0d:8d:65:f5:c6:4e:a8:43:ab:55:2c:ea:fa:70:cd:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:7C:2E:C9:D2:CA:7F:EA:4C:3B:0A:9E:57:A5:87:BE:FE:D7:54
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E6EBFCB8E3A711EF8EC7F178C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.4.0/23
42.96.12.0/22
45.124.84.0/24
103.3.244.0/22
103.74.120.0/22
103.79.140.0/22
103.121.88.0/22
103.147.126.0/23
103.161.16.0/23
103.161.170.0/23
103.162.30.0/23
103.163.216.0/23
103.176.22.0/23
103.176.250.0/23
103.180.138.0/23
103.187.168.0/23
103.188.242.0/23
IPv6:
2001:df4:2540::/48
2403:6a40::/48
2403:6a40:2::/48
2403:6a40:1000::-2403:6a40:5fff:ffff:ffff:ffff:ffff:ffff
2403:6a40:e000::/35
2407:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
b2:1c:ce:ea:bd:a9:4d:40:6d:9e:80:28:b9:19:ef:7d:81:a0:
80:b1:82:9a:41:e5:dc:73:19:27:a4:44:f2:e2:26:31:d9:ec:
fe:d8:7e:ec:1b:cc:e3:90:68:aa:de:4c:e7:97:22:44:9a:f6:
c0:5f:f6:35:40:21:7d:57:2c:b8:56:cd:60:e9:b6:de:8e:94:
5a:18:65:48:28:73:a6:99:96:48:d2:4e:dd:00:84:de:cf:28:
74:93:e6:25:4b:d8:04:94:36:4a:5a:d5:45:90:22:95:c3:99:
0f:a7:51:ac:8e:74:6c:95:7d:6b:d4:71:51:7a:1f:26:5c:2e:
b5:51:cb:e9:15:d8:c5:84:c0:ad:d1:15:e5:7c:ca:d1:de:f7:
ef:ae:ea:5c:dc:44:db:74:c5:33:5c:fa:f9:a1:41:05:47:c4:
f5:21:bb:7d:d6:79:77:98:42:92:78:24:06:3d:01:99:b2:e7:
55:42:3d:22:7a:7a:9e:44:a4:35:0c:ca:79:75:37:57:1c:0d:
c8:e7:d8:e6:b4:74:b2:3e:85:5b:55:2d:0c:c7:5f:41:df:e5:
05:71:4a:41:1d:c0:ce:08:a4:27:02:9a:f3:7c:d2:80:3e:34:
9c:37:63:ab:71:4e:bb:2f:ee:4d:17:d8:43:8f:46:5f:62:8b:
d8:77:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:30:35 2025 by rpki-client