Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/C2B39ECCCF7B11EFB722F324C4F9AE02.roa
File: C2B39ECCCF7B11EFB722F324C4F9AE02.roa (raw, json)
Hash identifier: UbZ1c+k75Ngr39MJpkXEoV25RrLWTS81728p9lnZuv8=
Subject key identifier: F0:EF:A9:9D:73:E6:4E:ED:37:D8:92:AA:B9:82:8B:B5:8C:4B:E7:44
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 016C
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/C2B39ECCCF7B11EFB722F324C4F9AE02.roa
Signing time: Fri 10 Jan 2025 17:53:13 +0000
ROA not before: Fri 10 Jan 2025 17:53:13 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141342
IP address blocks: 103.176.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 13:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E
Validity
Not Before: Jan 10 17:53:13 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67815e88-462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f9:c8:12:dd:8d:b9:f2:f4:0f:6a:a0:fe:c3:
ad:81:35:ce:4a:cb:18:13:41:24:8d:73:be:38:97:
99:05:fd:8c:8d:36:e3:4d:f0:d9:a3:0a:c0:3e:a5:
0a:b6:42:62:6f:c6:be:1b:c4:24:e3:3b:dc:ca:82:
59:51:42:df:20:1b:64:a9:05:5e:f5:8b:72:cd:6e:
d3:60:67:d4:b1:1b:d4:3e:34:16:69:1c:ed:9f:e7:
39:3f:62:fb:16:c5:2d:ea:43:f7:56:fb:13:53:0b:
4d:d8:01:0a:4c:28:7a:d6:ad:47:8e:b2:c8:c1:81:
a5:12:5f:59:58:bb:6f:bb:96:e3:84:62:4d:10:18:
c2:b0:be:ca:9d:10:b2:5f:9a:18:73:24:ea:22:38:
91:25:85:11:14:8b:6e:68:da:0d:11:25:6d:3a:b4:
96:1b:c3:f7:3c:b4:da:f8:e7:9e:b2:57:e7:4d:63:
ac:1c:fd:4e:cd:33:ec:4d:d9:c5:5c:32:4e:9e:e8:
c2:e3:65:e7:06:c9:f9:5a:19:3c:44:1f:f8:8c:f3:
b2:5e:9e:48:6c:c9:98:03:d0:30:2b:53:f9:57:b1:
e7:6d:42:f9:4b:9c:63:9e:0b:3b:82:1f:95:80:78:
90:ba:8e:ae:15:b4:25:75:56:73:f3:f8:20:86:a8:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:A9:9D:73:E6:4E:ED:37:D8:92:AA:B9:82:8B:B5:8C:4B:E7:44
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/C2B39ECCCF7B11EFB722F324C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d6:a8:1f:78:ea:b8:59:6a:88:17:2c:bb:d9:e8:ee:1f:aa:
1a:e6:0a:ec:aa:ec:5c:50:9a:24:c6:03:6f:47:26:7e:81:5e:
3a:13:55:48:50:94:08:a1:66:91:a6:eb:aa:7a:39:fa:76:16:
18:c7:ad:c3:57:70:b3:5d:f7:d8:11:d3:64:ba:eb:b8:2b:d3:
c0:ab:2b:0b:ce:f2:c7:3a:fb:c4:77:e0:fa:20:5f:54:6c:92:
06:73:a7:49:7f:94:29:11:e6:03:f3:47:61:88:26:5b:bf:84:
b1:73:77:f7:f5:02:04:3e:4f:33:1a:fa:4d:9c:1b:42:12:4c:
5d:aa:e7:3e:7b:b6:45:a3:b1:53:78:d6:af:6f:ee:a5:83:b4:
9f:b9:4e:8e:d6:17:61:09:b8:b4:09:64:77:b5:20:63:be:37:
ce:1d:e0:d5:09:71:5b:27:a0:f2:78:c5:94:49:5e:00:6c:e6:
85:a8:79:da:f7:6b:7c:d0:81:2a:3f:d8:da:51:c5:27:f9:1b:
9f:28:84:c5:44:0c:8d:d3:32:60:fc:70:37:b4:a3:50:70:dd:
1f:b1:50:c7:b7:77:0b:67:cf:c7:97:52:e4:b6:c1:67:b9:a0:
a3:2c:02:bd:29:26:ef:2f:4f:a9:a9:f1:ef:40:f3:3c:e6:ee:
8e:8b:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:05:09 2025 by rpki-client