Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/9F7197668A6B11EF8AEFC222C4F9AE02.roa
File: 9F7197668A6B11EF8AEFC222C4F9AE02.roa (raw, json)
Hash identifier: QkHX2vHwUB2GLVh1qqoaF/GdG2Eo2rw07Lk/ucNyCio=
Subject key identifier: 63:BA:60:AE:00:88:A7:09:67:B5:29:78:C3:E4:B4:46:F5:7F:2F:C6
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3589
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/9F7197668A6B11EF8AEFC222C4F9AE02.roa
Signing time: Thu 16 Jan 2025 00:12:39 +0000
ROA not before: Thu 16 Jan 2025 00:12:39 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.68.120.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 20:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13705 (0x3589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90
Validity
Not Before: Jan 16 00:12:39 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67884ef6-8c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:30:6f:48:28:e3:8d:eb:05:88:47:f3:10:
ea:a7:b7:3c:a9:9c:b9:ff:03:b0:be:b5:96:a9:16:
f0:36:0c:66:aa:9b:16:31:3d:2e:d0:30:ed:47:fd:
7e:af:10:90:f2:76:6c:7d:90:32:04:52:5d:36:e8:
99:24:66:b5:56:2d:a4:87:59:96:9e:fb:52:4d:fc:
cf:88:ec:23:42:e3:c0:f0:38:08:22:ca:9b:3f:5e:
e7:ca:1a:29:49:11:bf:44:e4:f4:7b:13:d1:28:19:
f3:c2:19:e4:19:7d:46:ef:48:1f:26:ca:31:c2:88:
ed:9e:3d:7c:14:71:8d:14:70:f7:bd:05:08:a7:45:
3d:80:7c:a3:b6:9c:75:36:6a:2f:56:7c:3d:8a:40:
d5:4a:75:68:79:9e:ff:67:11:e2:4e:02:e9:ad:80:
43:58:a1:a3:8a:3e:cf:94:72:24:34:67:20:f8:0e:
85:12:04:1c:4d:6f:27:4d:3b:63:42:d9:2b:5d:5d:
02:c8:49:c1:36:21:d9:08:5f:0f:a7:73:73:fa:7d:
9b:eb:ca:53:3a:d9:d6:1c:0b:b0:d2:b9:70:80:2d:
db:58:23:97:ad:32:3a:17:00:3d:8c:b5:02:bc:b4:
20:49:bb:66:a2:25:3c:be:67:5f:d0:ae:85:6c:4e:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BA:60:AE:00:88:A7:09:67:B5:29:78:C3:E4:B4:46:F5:7F:2F:C6
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/9F7197668A6B11EF8AEFC222C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.120.0/24
182.54.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:48:ed:b8:d2:3d:b0:df:27:48:36:66:2b:b5:39:48:8f:4b:
8f:48:55:e4:5b:25:a2:35:3a:97:0e:98:7e:b6:64:5f:e8:c6:
2e:af:b3:15:a2:22:8c:2a:cd:50:8a:79:76:8a:c8:e2:16:a0:
0c:1d:44:cb:9a:30:d9:64:8a:a1:f1:6c:c4:7f:0d:96:00:67:
b9:40:4a:52:92:7c:d4:05:f1:bf:84:a7:cd:f5:f6:8b:01:ee:
81:88:c4:de:97:50:0d:d3:9e:1b:e5:1b:0f:3a:87:28:d8:5f:
1b:0e:48:e8:31:63:7b:b8:70:91:3a:5b:a2:7e:07:a2:4b:89:
a2:d5:b8:8a:79:16:d8:80:7a:9c:ac:e6:10:aa:85:e9:88:01:
92:8c:e0:b7:82:31:9e:77:5a:b7:40:99:06:00:e9:91:a0:fb:
58:3e:a8:f9:92:6a:0b:e1:1e:0d:17:ad:64:6f:49:9f:c3:c9:
9b:a9:e4:74:d0:64:90:73:01:df:21:78:de:33:57:8d:d2:b4:
5d:f4:49:0f:77:cf:bd:61:5b:0f:22:63:92:b6:64:d3:2d:ba:
e1:0d:25:54:02:a1:c0:c2:10:8f:97:20:7f:a7:bf:12:6c:2f:
f3:38:ee:ae:b8:6a:3e:b3:89:71:8d:d5:6f:04:2a:56:c6:ab:
3f:77:e3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:30:36 2025 by rpki-client