Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/BEABC886064711EDB2563973C4F9AE02.roa
File: BEABC886064711EDB2563973C4F9AE02.roa (raw, json)
Hash identifier: BE0gpaLb7EzpcRjZQd7cVu3uKgEf0/Bby993Dib0Qls=
Subject key identifier: F4:6D:A3:24:34:3D:B2:C7:E7:BE:0A:32:B5:84:5E:18:18:DF:22:2D
Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial: 01A8
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/BEABC886064711EDB2563973C4F9AE02.roa
Signing time: Fri 01 Mar 2024 04:27:21 +0000
ROA not before: Fri 01 Mar 2024 04:27:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38835
IP address blocks: 203.30.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 09:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11D6
Validity
Not Before: Mar 1 04:27:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65e15928-81c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:e1:cc:cd:da:40:0d:bf:05:35:23:11:3f:
01:44:87:06:bf:62:a0:64:e8:1d:df:db:1f:09:de:
d2:aa:39:7f:1d:17:45:15:7f:b3:7f:fb:bd:63:81:
b7:c1:99:66:1a:b5:9b:75:ad:d2:dc:a2:fe:ec:73:
98:ae:28:cd:09:e3:bd:0e:ff:63:05:32:1d:1f:82:
5d:2e:ad:79:55:3a:97:6a:30:cc:38:93:db:7c:c0:
60:24:84:5f:76:66:65:8e:99:22:20:32:08:f0:5f:
64:9f:d6:3b:96:b7:ce:b3:31:a1:8a:c2:85:fc:18:
e2:6f:1a:37:7d:0e:f1:82:5b:c6:2f:7c:12:f6:ec:
d4:98:93:06:df:bb:84:2e:91:88:f9:67:a4:0d:0e:
d4:88:12:38:46:35:50:a5:52:72:af:6c:d2:19:76:
4b:51:ad:0e:7e:ab:2b:e9:15:2b:69:57:e9:d1:79:
4a:46:49:22:d3:08:08:23:b2:c1:6b:a1:6d:8d:20:
7b:8b:5b:dd:ba:63:2c:57:b4:71:b5:88:d0:6a:5d:
4f:9a:7d:61:8a:4d:ca:eb:86:b7:89:05:e3:29:40:
17:b5:48:a0:d1:af:76:7c:0e:d5:7f:f7:35:11:09:
a0:43:f8:0f:e8:25:19:7b:c1:10:02:0d:19:f9:53:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:A3:24:34:3D:B2:C7:E7:BE:0A:32:B5:84:5E:18:18:DF:22:2D
X509v3 Authority Key Identifier:
keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/BEABC886064711EDB2563973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.30.193.0/24
Signature Algorithm: sha256WithRSAEncryption
67:00:67:81:3c:54:fc:cc:77:ed:5f:f4:2a:07:52:a8:97:5e:
ce:35:f7:83:b4:20:c4:ca:17:51:98:62:78:6e:24:5c:04:ce:
15:a2:bd:02:38:c0:50:69:f8:f8:92:d6:8c:3e:18:5a:a9:b0:
b4:67:9e:41:cb:24:9c:2e:dd:b0:a8:5f:00:51:fe:af:a0:11:
d3:3b:9f:8d:5e:fe:3f:3b:66:01:95:87:a0:c0:b8:44:ab:21:
0a:bc:54:74:1a:54:25:47:35:7e:6f:78:31:b0:f5:ee:a4:19:
e6:c6:5d:0b:f2:34:11:aa:ff:ea:d3:b2:53:63:e4:cc:b1:8f:
9b:ce:df:6f:3a:29:bc:fd:21:d0:0c:4c:cd:e2:fc:9e:be:b6:
8f:70:4d:5a:12:6d:ed:65:c3:04:78:0d:1d:06:9e:ff:00:2d:
b4:94:1e:8b:1b:0b:b6:69:5c:a2:14:bb:7c:f3:07:e0:b4:57:
3b:90:61:ae:9e:69:79:55:1a:c6:b6:63:c2:f0:ac:3c:a9:9d:
62:f5:b3:43:00:e6:cc:89:96:8f:d0:e2:f3:41:8d:63:3f:00:
dc:ac:ef:82:11:ea:89:05:9b:4e:77:bc:cd:04:8b:af:b0:78:
01:38:cc:45:c4:8e:70:8a:1e:ac:c1:f5:13:47:01:5d:15:ce:
c1:85:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:06 2025 by rpki-client