Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4A22CBAED24111EF95D4EE0BC4F9AE02.roa
File: 4A22CBAED24111EF95D4EE0BC4F9AE02.roa (raw, json)
Hash identifier: L0khW2grZEu4DXAtQgruBAARYKPDpnIyBxIedFYCHiQ=
Subject key identifier: 3B:91:FF:46:AF:C4:D1:1F:BF:F8:C7:56:FB:13:52:33:3E:72:26:4C
Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A
Certificate serial: 1139
Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4A22CBAED24111EF95D4EE0BC4F9AE02.roa
Signing time: Tue 14 Jan 2025 06:35:38 +0000
ROA not before: Tue 14 Jan 2025 06:35:38 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 4773
IP address blocks: 27.104.0.0/16 maxlen: 16
27.104.0.0/17 maxlen: 17
27.104.128.0/18 maxlen: 18
43.245.104.0/22 maxlen: 22
43.245.106.0/24 maxlen: 24
49.245.0.0/16 maxlen: 17
49.245.0.0/19 maxlen: 19
49.245.32.0/19 maxlen: 19
49.245.64.0/18 maxlen: 18
103.1.136.0/22 maxlen: 22
103.1.136.0/24 maxlen: 24
103.1.137.0/24 maxlen: 24
112.199.128.0/17 maxlen: 18
175.156.128.0/19 maxlen: 19
2401:7400:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Feb 2025 01:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4409 (0x1139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE
Validity
Not Before: Jan 14 06:35:38 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=678605ba-dab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:9a:9e:fa:43:4d:c1:de:82:34:e0:e4:2f:
4f:9a:a9:ab:d4:a4:62:b5:65:2d:ef:9c:0f:31:ee:
df:b6:53:19:87:11:26:90:54:d5:c6:00:e3:eb:b6:
3c:a8:ae:75:69:7f:4a:e2:5e:59:1b:68:b7:6b:da:
85:d2:e7:a5:4f:f9:3c:db:90:ab:77:26:41:56:2f:
98:59:d5:f5:9b:40:2f:81:49:8e:33:f2:d9:ed:2a:
cb:21:81:c8:c9:cc:6e:5e:85:ca:7d:8f:fc:cf:d3:
51:83:13:58:63:9a:84:f4:96:1e:2b:98:d2:a6:f7:
a0:d3:fe:74:51:93:b1:66:f7:20:0a:60:b6:aa:67:
aa:24:0a:a2:d3:86:b9:d5:2f:23:ee:87:1d:22:5d:
e9:8e:97:2b:5d:d8:ea:32:00:03:bf:c4:ed:93:b7:
78:fc:10:06:74:f6:d7:7b:52:f0:19:ae:ce:f5:9c:
0a:30:fc:40:f2:e4:38:3a:94:a0:63:b3:10:41:62:
90:6b:49:2f:e3:d7:c0:75:57:6c:75:9e:d9:91:17:
54:63:5d:86:6d:fb:ee:95:d2:1e:d3:60:3a:bd:21:
4f:66:7d:38:20:a3:98:db:f3:e9:3a:c5:36:55:b4:
c1:93:69:09:cc:2b:5e:35:92:fd:c2:22:c7:84:6a:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:FF:46:AF:C4:D1:1F:BF:F8:C7:56:FB:13:52:33:3E:72:26:4C
X509v3 Authority Key Identifier:
keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4A22CBAED24111EF95D4EE0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.104.0.0/16
43.245.104.0/22
49.245.0.0/16
103.1.136.0/22
112.199.128.0/17
175.156.128.0/19
IPv6:
2401:7400:1000::/48
Signature Algorithm: sha256WithRSAEncryption
11:3a:ee:68:af:12:11:a9:86:a2:9d:d7:c1:dd:e4:79:ee:f4:
99:4a:f4:2d:16:a4:0a:e6:15:d8:86:75:c4:eb:1f:04:a6:14:
c5:ec:9a:f1:69:08:01:2c:b2:d5:ec:7c:cc:44:8e:55:81:19:
2f:bc:40:79:24:cd:7b:f9:14:72:d8:44:17:44:3e:50:3b:a1:
6c:50:67:8a:42:d3:52:f9:e4:ac:a7:24:e9:a3:fb:f2:a4:d9:
f8:88:2e:46:69:17:a5:c7:ee:9e:2a:f1:bd:ef:3f:8e:24:41:
cc:14:0a:ba:e5:77:eb:57:22:7c:f9:38:80:cc:a8:cf:9f:cd:
6b:1f:1a:4e:10:92:df:cb:b1:f6:33:b0:79:e0:40:05:07:6d:
77:f0:2e:47:f9:fc:17:38:0f:1a:36:cb:01:8d:36:c1:cb:d9:
5b:58:6e:1b:22:95:4d:f5:f9:49:ce:86:4f:48:bc:86:ed:0b:
a0:c9:a6:0f:c5:ad:e3:bb:46:5a:6b:51:bc:dc:a9:8d:5a:46:
3c:72:a7:e6:35:8a:e2:81:11:c7:7c:ac:91:d5:09:f6:46:b5:
97:7b:df:da:e1:95:0e:e1:1e:38:82:7a:69:01:7a:53:6c:af:
13:e4:3a:15:25:6e:f2:90:6e:e9:0d:74:4b:ad:61:e6:a6:df:
fc:c1:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:25:47 2025 by rpki-client