Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/8B510B0E9AAB11EF80067478C4F9AE02.roa
File: 8B510B0E9AAB11EF80067478C4F9AE02.roa (raw, json)
Hash identifier: YZngeoED5erZiA8jhFEGKyLUX1pGDyOBVXlXB5jJC/M=
Subject key identifier: CE:05:26:0F:12:DC:8D:5B:41:B5:CC:8A:2F:18:2C:35:FB:85:9B:9C
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: D2
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/8B510B0E9AAB11EF80067478C4F9AE02.roa
Signing time: Mon 04 Nov 2024 12:51:44 +0000
ROA not before: Mon 04 Nov 2024 12:51:44 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151832
IP address blocks: 103.213.220.0/23 maxlen: 23
103.213.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Nov 4 12:51:44 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6728c360-11ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:80:e8:f4:ce:f7:5a:d8:94:6c:a9:de:ce:
7b:cd:f4:a3:ee:4c:ac:ec:6f:0a:9b:15:c8:62:26:
87:56:f4:59:b5:1b:48:90:29:58:88:30:30:7f:a3:
98:83:d8:70:b6:58:ae:ed:21:cf:8a:46:91:b2:9e:
5a:1c:21:d4:a5:dc:43:27:21:d1:77:e5:81:33:4c:
ee:ec:cc:5e:05:70:47:29:e8:8b:74:a7:53:9d:15:
c7:87:93:76:5b:6d:54:f4:4a:b8:85:9d:bf:73:a3:
f7:72:d4:fd:d6:cb:e3:c4:46:53:5a:a8:94:08:ad:
83:b7:96:c8:45:60:2a:ef:a9:38:2d:8e:a1:67:da:
1b:ff:b1:e1:bf:b8:91:37:b0:e8:33:85:7d:6e:67:
76:70:24:91:bd:94:79:cc:2a:6d:69:6e:9b:eb:26:
7f:dc:4f:71:13:87:5e:e7:f4:5e:b6:09:56:8e:41:
50:ad:d5:87:41:fb:23:9a:ce:3b:97:8a:80:0e:97:
de:49:40:36:f8:01:f4:58:87:de:8d:75:d3:49:88:
d5:d4:1a:d6:db:ae:19:01:45:a4:9c:aa:68:d0:a4:
1d:fb:c7:ad:5e:64:9f:18:c0:90:71:73:38:d3:73:
04:56:5b:ec:ca:04:15:3b:cf:b3:fa:f5:fe:04:10:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:05:26:0F:12:DC:8D:5B:41:B5:CC:8A:2F:18:2C:35:FB:85:9B:9C
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/8B510B0E9AAB11EF80067478C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.220.0/23
Signature Algorithm: sha256WithRSAEncryption
22:7c:04:3a:4d:c4:f1:b3:bb:ef:77:16:9e:ea:32:a5:40:9d:
e2:20:a4:05:3d:fb:26:85:77:8b:5b:d8:45:be:c9:df:32:b6:
f3:7f:d0:31:c4:20:30:61:0b:14:ae:e5:2c:75:0a:15:ee:2d:
b4:e2:ac:9a:af:a9:87:27:62:8f:a5:94:c3:14:c9:b7:02:48:
6f:e3:d1:81:4d:67:d8:89:16:e9:42:e9:bc:6a:2a:eb:2a:df:
5f:ad:f2:f1:cf:17:03:5c:12:92:69:e0:c0:6b:5b:39:35:ef:
c4:8b:85:77:36:84:6d:3a:ec:c8:cd:bb:e9:04:e1:cf:48:fb:
ca:93:ea:dc:06:53:9f:d6:d2:95:5e:ab:c2:1f:f1:b7:38:69:
bd:35:d1:96:9d:e9:e2:2d:3f:4a:69:31:33:d7:37:7d:e9:76:
04:2c:85:bb:b8:e7:7e:35:f1:15:3b:5d:a9:85:86:54:d7:3a:
f8:b9:80:59:39:08:d9:41:62:3a:ff:f4:4a:36:61:e9:b6:9e:
19:96:a6:1b:c5:dc:2f:f8:76:74:ad:99:37:2b:b6:9d:2c:3a:
4c:2d:38:40:c1:1c:bb:8b:24:63:ba:b5:66:1b:ad:de:9f:80:
2b:99:13:0c:1c:57:7c:ae:8f:c0:9b:67:07:4a:9b:99:98:a5:
69:db:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:41:58 2025 by rpki-client