Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35C99D4C845611EFB053C341C4F9AE02.roa
File: 35C99D4C845611EFB053C341C4F9AE02.roa (raw, json)
Hash identifier: V78F/sUvRrSVdDJyDfEyty7/vxO3/r50Hl6d0lC1src=
Subject key identifier: 9C:66:04:72:D3:CA:C3:65:0E:C4:E5:E0:70:D9:79:54:08:69:EF:29
Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial: 03
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35C99D4C845611EFB053C341C4F9AE02.roa
Signing time: Mon 07 Oct 2024 02:45:28 +0000
ROA not before: Mon 07 Oct 2024 02:45:28 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 151656
IP address blocks: 103.13.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Mar 2025 12:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC4FF
Validity
Not Before: Oct 7 02:45:28 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67034b47-a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:f4:f2:b1:9a:90:7b:93:af:25:5b:ac:47:
32:75:32:1b:c9:bf:5f:95:9c:7f:2e:a9:39:d2:21:
e5:96:44:b8:ed:41:61:f9:75:9f:73:23:03:3f:b2:
8c:aa:a3:1f:50:d7:32:40:3e:0e:6d:3d:2b:1d:d5:
51:a3:20:ac:4f:b5:ec:20:61:3b:56:62:f7:bf:6d:
da:5a:d9:a8:53:6d:c7:d2:38:77:2a:78:fd:63:1e:
76:50:0e:13:13:ca:44:f5:fd:36:52:5f:34:e3:d9:
f2:28:ed:d4:d5:36:ff:4a:8e:a7:62:0b:83:a4:1f:
ef:c4:bd:fc:5c:ee:2c:c4:88:79:b9:00:09:7e:0d:
f6:73:f4:08:9f:19:69:d9:30:c2:65:d6:ee:cd:27:
35:8a:d4:ec:0b:6f:4b:19:86:76:23:e7:7b:3a:c0:
f8:13:ab:f5:98:bf:f5:06:62:34:73:6f:d6:72:ad:
51:5b:49:28:5c:21:38:bc:7c:19:60:b0:61:29:53:
95:99:12:e2:d3:51:bc:c8:58:3b:b8:92:f5:b2:d0:
4a:0a:1a:5c:87:b9:91:be:58:3b:75:89:6f:08:26:
59:57:83:fb:65:05:0d:f2:26:d9:dc:c1:a3:c7:f3:
3e:4c:a2:69:a7:63:a9:a6:c4:56:8d:e0:e9:01:26:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:04:72:D3:CA:C3:65:0E:C4:E5:E0:70:D9:79:54:08:69:EF:29
X509v3 Authority Key Identifier:
keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35C99D4C845611EFB053C341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.72.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c2:dc:c1:98:af:06:95:66:aa:81:36:87:05:53:b4:d3:66:
a7:06:ea:01:45:07:15:6e:fe:03:fd:a2:c7:45:98:b2:c5:1c:
46:fc:86:ae:77:e7:ea:86:24:92:f7:0a:66:dc:85:ac:cb:54:
89:46:34:23:1b:f3:0a:dc:97:a3:e2:9c:fc:01:fb:cd:92:28:
64:1b:46:7c:5e:b6:9e:8c:68:80:f1:a1:e1:d7:68:37:46:35:
0c:a8:54:6e:02:86:18:57:0f:c2:af:6b:69:58:75:76:5b:13:
fc:5e:03:a0:3f:d5:3d:c5:1a:fd:0e:a4:94:98:2f:e3:30:e1:
50:58:ac:f2:1f:5f:58:71:e9:86:fa:21:ac:8d:48:1f:39:dc:
1b:3d:ee:93:b6:58:5b:01:64:af:8b:61:54:f1:40:05:d3:64:
64:04:36:3f:c8:5b:c1:ea:be:b1:8a:4a:6c:8c:b5:3c:a4:df:
fc:8c:86:86:38:98:ae:6b:bd:71:a4:4a:4c:b3:d4:98:08:6a:
1e:d3:c3:5d:39:06:b5:a7:6e:85:bd:63:00:f5:01:27:6d:22:
39:a7:1c:fc:92:5c:40:64:9b:10:1e:bd:9f:7d:57:d1:df:9e:
12:7c:a6:56:48:a2:7b:92:a8:7e:fc:12:1a:42:b1:2f:b7:b8:
10:0b:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:33 2025 by rpki-client