Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa
File: B16C9766F97711EEB642002CC4F9AE02.roa (raw, json)
Hash identifier: QK/3IPLlLHpJzMAh9LEu9wBTyMjDq5axIgBNT1XfyTo=
Subject key identifier: 50:6B:B2:28:79:D6:D9:2D:F5:D5:C0:59:35:C2:D9:B6:56:30:D5:AA
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0926
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa
Signing time: Sat 13 Apr 2024 09:24:57 +0000
ROA not before: Sat 13 Apr 2024 09:24:57 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 7489
IP address blocks: 103.207.68.0/22 maxlen: 22
210.16.120.0/23 maxlen: 24
210.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 18:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45
Validity
Not Before: Apr 13 09:24:57 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=661a4f69-180f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:9a:93:88:c5:eb:f0:9b:f9:dc:6d:00:9b:
fd:2b:e5:69:7a:08:a1:f8:b4:70:f5:1f:57:62:cc:
de:4d:1d:29:0d:1e:40:f9:76:d4:64:ff:fa:7f:2e:
22:e8:d9:19:6c:b8:a4:5c:bc:07:d1:c4:73:e3:5b:
4e:ec:c6:85:4d:3c:89:b2:36:5a:ba:ed:c2:f5:7b:
39:2e:84:cc:6a:ec:ec:d9:e8:62:44:a0:cb:ca:c2:
b5:09:57:46:16:9f:c0:d6:70:fa:93:5f:94:30:47:
51:d3:b7:7d:9a:0a:84:80:6e:4e:14:9c:b4:5e:d5:
aa:dd:c3:60:7b:10:68:97:8f:9f:90:08:3c:03:8a:
db:36:7d:71:a0:56:8d:8c:8a:cc:c7:71:14:82:6c:
34:50:b8:5b:52:3d:c2:5d:ae:38:18:ee:76:5d:9c:
67:fa:f7:61:6f:64:4c:07:aa:43:5f:25:bb:3b:e1:
3f:21:51:51:63:48:c2:ff:ec:27:68:a1:28:15:ce:
27:1a:35:09:b1:19:58:4c:af:d0:ec:7b:36:5b:37:
b9:b2:4d:75:47:3d:c4:ca:64:5c:c9:28:91:d2:08:
57:f1:8b:a5:b5:e0:14:59:32:a4:4e:14:0c:05:49:
6a:07:2a:0d:d5:ed:a8:89:4c:f2:aa:79:82:e0:c9:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:B2:28:79:D6:D9:2D:F5:D5:C0:59:35:C2:D9:B6:56:30:D5:AA
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.68.0/22
210.16.120.0/23
210.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ad:36:67:d9:e9:77:ee:67:51:cc:6c:fe:4b:7d:4d:e7:7e:
c1:bc:b8:fa:79:df:5c:2f:e1:0e:18:b2:53:ef:ed:31:16:be:
dd:e4:bb:e7:fd:59:4f:0e:f3:8a:19:1b:be:f4:e5:fd:1f:67:
5e:ee:15:a5:f6:7d:17:a3:95:e2:a4:61:01:89:18:b5:eb:be:
29:a2:36:e8:7b:0b:5a:a7:53:d1:3b:b1:54:f2:cc:98:15:19:
f0:77:d3:7f:03:00:e4:e8:ef:3e:cd:55:d9:48:e0:36:6e:ad:
80:b4:ce:12:8b:2f:55:a6:6a:95:30:3b:eb:5a:5d:de:cc:90:
02:1b:18:6f:4e:fb:a1:09:b5:35:91:d8:2a:00:2c:89:01:c0:
80:f7:1d:11:92:0f:20:c5:f1:3e:1e:6f:cd:96:e7:0f:a7:5b:
69:22:da:3e:1a:cd:df:e9:2b:a1:d0:e7:42:10:97:f5:a8:4c:
7e:f8:34:55:38:ef:46:79:f7:3b:46:27:73:c7:dd:42:af:57:
3a:5b:fa:fd:0e:ed:8c:80:bb:6c:1c:4f:79:df:0b:69:43:05:
4f:a3:cf:51:88:9d:7a:56:83:c7:b8:60:da:e7:84:6c:f5:5c:
c8:a3:7c:b3:84:5d:f3:e8:67:18:4f:d8:10:af:2e:4b:36:33:
e4:fb:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:38:05 2025 by rpki-client