Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F7BA1FCE70C611EFBF64266FC4F9AE02.roa
File: F7BA1FCE70C611EFBF64266FC4F9AE02.roa (raw, json)
Hash identifier: dfP5faa/Yw/V2aLs80Ju1Tmgf9Tm0S0758+0J53NO7M=
Subject key identifier: E5:B1:E2:04:DB:CB:FC:1E:34:54:51:DC:88:79:FB:1F:55:B3:B8:E4
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0A92
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F7BA1FCE70C611EFBF64266FC4F9AE02.roa
Signing time: Thu 12 Sep 2024 05:22:13 +0000
ROA not before: Thu 12 Sep 2024 05:22:13 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 17408
IP address blocks: 103.18.228.0/24 maxlen: 24
103.18.230.0/24 maxlen: 24
103.231.36.0/24 maxlen: 24
103.231.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2706 (0xa92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B
Validity
Not Before: Sep 12 05:22:13 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66e27a85-552f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:16:39:6d:c4:c3:21:a2:ad:e9:61:b3:d0:
3a:12:c8:6e:c1:ce:5c:db:b8:c5:1f:13:f5:0e:8c:
b3:7a:44:b8:dc:62:c9:76:d7:47:43:c9:8e:f6:90:
74:4c:5f:74:36:10:46:fc:7a:1c:1f:99:ca:71:96:
c2:b7:9e:d3:77:2a:09:19:c3:72:a2:82:6f:b1:d3:
50:bc:8f:1f:85:b1:c2:03:06:1c:65:df:3f:9b:b7:
34:91:15:29:0b:4c:44:7c:4b:46:b4:92:4a:0f:eb:
b2:21:ec:58:d3:ef:ab:a4:89:27:dd:b1:65:cc:11:
1e:29:f8:35:8d:7e:c0:7a:b6:7c:55:c1:0e:96:5b:
86:b7:70:8c:7d:bd:f7:81:83:0a:13:8d:db:88:03:
65:5f:0a:f9:76:38:aa:66:63:74:17:2c:03:2b:16:
be:aa:96:82:26:13:8e:21:11:ce:6d:36:58:49:40:
04:c4:b4:6e:89:5b:50:2e:1a:0b:f5:36:05:fe:82:
f0:5d:9e:80:7a:70:84:f9:22:89:63:aa:4c:c3:6f:
b0:17:90:9e:c6:dc:3c:cb:72:b3:f8:8f:29:9a:52:
35:7a:6e:72:ef:54:76:4f:bf:52:09:67:50:59:28:
a3:ad:5f:e8:58:07:53:9b:29:97:f2:e4:56:f7:48:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:E2:04:DB:CB:FC:1E:34:54:51:DC:88:79:FB:1F:55:B3:B8:E4
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F7BA1FCE70C611EFBF64266FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.228.0/24
103.18.230.0/24
103.231.36.0/24
103.231.38.0/24
Signature Algorithm: sha256WithRSAEncryption
95:09:fb:1e:a0:27:50:29:5c:51:86:72:47:54:a8:47:dc:a2:
4a:81:b5:05:9a:f3:3f:e3:65:94:59:5c:5e:18:87:00:d2:37:
ca:54:b3:d6:c2:22:0f:6f:37:af:af:05:da:4e:dc:41:f7:6b:
9f:c2:79:6f:a4:f9:e5:20:05:4f:d2:42:fb:08:42:76:11:5d:
d3:1c:2a:76:d9:57:4e:83:62:6e:dc:11:e9:fe:e2:9c:d3:89:
3b:00:78:61:ce:9a:a8:34:c7:20:3f:c2:21:20:a5:c1:7f:67:
e8:9b:96:3a:e9:50:3b:81:68:21:13:27:1f:7c:8d:3f:19:cf:
8f:c7:05:0e:cc:4c:65:65:94:69:ca:d1:32:07:f2:08:df:4e:
52:09:5f:32:a7:63:3c:a2:3d:76:ac:f7:08:59:fa:e4:79:99:
8b:9d:ab:12:db:4a:f4:ac:27:ff:b8:25:d5:e6:1c:2a:9a:5f:
14:85:ca:7d:50:71:d6:4f:08:ac:86:2d:b7:e4:5d:ed:8a:ae:
51:3f:65:55:e8:0f:8d:75:91:d6:98:46:d8:9a:6d:78:e9:8f:
ba:69:e2:3f:2b:45:63:25:f4:b8:b8:1f:42:22:e5:1c:3c:70:
f0:63:ca:14:c8:46:7b:e0:ae:78:34:e5:96:76:92:c5:ea:6c:
f4:fa:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:07 2025 by rpki-client