Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD2CF86C759E11EFB8230E38C4F9AE02.roa
File: CD2CF86C759E11EFB8230E38C4F9AE02.roa (raw, json)
Hash identifier: YBmeTVaSZHxdyluaKY2LXGaV+psmMf8UYwHUVBju0ME=
Subject key identifier: 99:E2:BC:F1:7F:65:9B:C1:1B:25:11:5C:F8:09:5B:57:85:C8:ED:3F
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0263
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD2CF86C759E11EFB8230E38C4F9AE02.roa
Signing time: Wed 18 Sep 2024 09:17:18 +0000
ROA not before: Wed 18 Sep 2024 09:17:18 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 150716
IP address blocks: 103.243.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Sep 18 09:17:18 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66ea9a9e-0385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:aa:45:d8:c9:29:3d:75:d7:55:15:62:4d:
40:cc:a0:b9:ae:37:4b:75:58:8d:27:f5:2f:cc:ad:
5c:c9:0a:aa:c0:7d:5f:f3:23:51:9e:3d:38:39:7e:
d7:80:96:7e:ce:dc:43:90:33:85:8a:7c:49:77:3d:
bc:6a:c7:3c:ab:fa:74:3e:4b:c7:ec:78:c2:b5:8d:
d8:a4:c4:48:f9:d9:fd:27:64:1b:90:c1:c3:72:be:
7e:07:01:66:8f:e3:cb:a6:c1:c2:9e:a7:8c:03:1a:
0f:8f:72:09:24:04:f6:09:92:b0:a5:6b:1d:94:91:
5c:db:8e:2f:9c:2a:98:80:f5:82:97:db:14:df:d1:
32:f6:31:14:51:71:51:e6:95:20:49:63:66:00:4e:
c8:de:0d:21:bf:20:4b:8d:23:af:84:fd:4e:0f:23:
73:5b:d1:56:7a:35:37:26:8e:16:63:cd:8a:3e:d4:
19:67:91:da:dd:13:b4:ec:bc:fe:4b:ae:08:c4:a6:
d2:92:c2:bc:e2:28:47:83:ea:24:a6:fa:71:78:d3:
2f:9b:1f:e1:87:93:59:b9:bf:07:f3:cc:6e:51:e0:
e5:63:bb:a2:dc:25:9a:76:1b:7e:3c:68:36:72:b4:
2a:15:8b:ec:96:b4:df:31:3b:93:d9:8f:bc:37:b4:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E2:BC:F1:7F:65:9B:C1:1B:25:11:5C:F8:09:5B:57:85:C8:ED:3F
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD2CF86C759E11EFB8230E38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
19:27:87:bb:ee:5a:45:b1:3a:f7:54:e6:06:5d:a6:2d:6e:d5:
a1:54:60:2d:4f:37:2d:db:5b:9e:77:3c:55:b5:47:9e:c2:58:
de:91:97:68:2b:54:9e:e7:c2:59:65:85:8c:1c:be:b3:bd:f0:
97:17:fb:07:ad:bf:78:92:86:04:76:4c:ad:45:e0:41:14:6c:
b9:30:5b:f4:c0:a8:c5:1f:ea:4f:98:73:c4:d6:cc:e0:28:0c:
44:03:11:eb:eb:72:6d:c2:b3:9d:ef:86:30:5d:b0:6f:19:84:
bb:c2:55:8d:c1:80:d8:b1:51:e2:99:3f:07:0b:45:7f:2d:75:
c6:f0:8c:17:fc:72:9b:55:78:5c:c3:32:95:41:b3:02:d2:92:
d4:60:c1:1e:80:a5:15:04:35:f7:0f:fd:74:bf:3e:93:b9:91:
08:1d:6f:41:ce:b0:54:d6:5f:2a:91:04:7f:83:49:06:76:03:
68:c9:ed:26:d1:e4:e9:bb:3b:63:17:b0:7c:a7:0a:18:7a:7c:
c4:60:8c:3f:bc:9c:3b:92:3d:f5:86:24:ad:4e:42:39:4c:fa:
6d:2a:cf:1f:d4:9f:90:f5:fb:89:28:2b:f0:52:68:d0:2a:76:
3e:40:68:4b:cb:e9:8c:d4:cf:86:42:44:37:09:3f:43:73:ad:
97:b1:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:34:30 2025 by rpki-client