Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/DC22D104B3AE11EF8418C954C4F9AE02.roa
File: DC22D104B3AE11EF8418C954C4F9AE02.roa (raw, json)
Hash identifier: yshktGtl++fjTUP1yaudOGqVGCa/yQzt3pj0T2k5snk=
Subject key identifier: A5:78:60:40:25:DA:3B:EA:DF:02:AB:FA:E0:86:14:DE:57:E1:F2:5D
Certificate issuer: /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial: 29
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/DC22D104B3AE11EF8418C954C4F9AE02.roa
Signing time: Fri 06 Dec 2024 08:48:27 +0000
ROA not before: Fri 06 Dec 2024 08:48:27 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 132825
IP address blocks: 103.62.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C55CE
Validity
Not Before: Dec 6 08:48:27 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6752ba5b-505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:99:53:71:11:9c:2d:f9:6b:cc:10:95:bc:
30:d7:c3:54:0e:2c:eb:96:e3:20:32:62:ea:97:3e:
77:8b:63:4c:54:bb:ae:8a:57:90:a8:43:e9:d1:69:
c4:92:68:05:17:21:23:55:f1:1a:59:6c:64:23:73:
11:66:f0:8a:42:d4:50:84:8f:24:2f:cb:23:73:13:
00:89:33:45:d9:e9:2e:a1:00:5d:4a:18:82:9b:38:
4e:e2:73:e0:b2:c2:b0:42:e8:f5:09:5a:b4:b2:d5:
ce:70:65:57:97:62:c7:71:ae:12:bd:c7:86:b5:0d:
8a:cd:2b:d9:33:1a:18:2b:a9:96:a2:08:c1:84:cb:
25:3c:c6:c4:5a:8f:fc:07:b9:ed:85:16:58:9a:80:
98:ce:18:4b:b7:86:5e:2a:ad:47:6b:a6:49:de:fe:
ef:dc:6e:da:18:89:c5:bb:b6:13:36:71:42:31:f9:
ed:e7:72:36:2e:36:49:8e:8a:b0:f4:54:cf:37:7b:
74:b6:7e:1c:78:b5:d2:7a:a0:d9:e4:3a:c5:0b:c6:
fd:0d:9e:1f:f6:10:f5:ce:c1:5a:b1:12:e1:e0:c9:
00:2a:23:07:1a:6d:b5:54:4c:d4:d6:b1:22:df:0e:
f9:88:27:4e:fc:c3:cf:19:e0:9d:9d:b8:06:5e:66:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:78:60:40:25:DA:3B:EA:DF:02:AB:FA:E0:86:14:DE:57:E1:F2:5D
X509v3 Authority Key Identifier:
keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/DC22D104B3AE11EF8418C954C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.55.0/24
Signature Algorithm: sha256WithRSAEncryption
40:69:8c:8a:2e:08:f7:08:32:6f:9d:18:4e:97:6e:98:bb:99:
7c:1d:b4:7e:7e:46:e2:a2:bb:65:62:01:33:25:d5:52:6b:09:
7e:47:8a:8e:a6:83:45:69:71:c6:93:a7:d9:be:3b:c4:e2:7d:
35:eb:4d:a3:3e:a6:28:e1:28:ed:38:b8:7a:93:c3:f7:23:43:
be:b5:14:ec:ee:09:0e:55:c2:ec:e2:4d:da:01:c1:e6:e5:c1:
53:6b:4b:c4:b5:76:61:a6:9a:3c:f2:18:32:69:e0:f7:5b:74:
47:f2:b0:d6:b5:d7:6b:9a:c1:5d:2b:66:e5:34:9d:a3:be:cf:
9d:90:16:19:b1:d9:32:ec:3c:03:03:de:e7:ac:2f:bb:fd:1d:
e5:3e:44:4b:73:2c:04:f2:e1:3a:ad:08:bf:ee:73:b3:d7:32:
d8:d8:6f:20:51:d6:cf:bd:f3:56:84:6c:aa:3c:96:b3:3a:18:
01:f3:6b:05:e7:38:63:70:19:ed:6f:3c:77:d4:1d:65:e6:25:
16:65:ab:80:e6:ca:b6:4f:de:23:f0:c6:ee:81:c1:21:2e:23:
ea:ec:91:e2:b9:5d:41:68:97:bd:0f:6c:1b:24:f3:0b:b5:de:
5a:4b:43:6f:de:0f:a3:22:0e:2f:83:2c:3b:41:28:26:9f:fb:
56:d5:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:44:49 2025 by rpki-client