Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/A0F2A674602D11EFB3EDC17DC4F9AE02.roa
File: A0F2A674602D11EFB3EDC17DC4F9AE02.roa (raw, json)
Hash identifier: Y0SprfGXuk9ZeZpLIRYztGI2XRTzed8i4vqaqaJCMQo=
Subject key identifier: 8F:27:CD:53:0C:B1:77:AF:76:9F:D1:23:02:BE:DA:6A:42:5A:F4:EC
Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Certificate serial: 2B
Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/A0F2A674602D11EFB3EDC17DC4F9AE02.roa
Signing time: Thu 31 Oct 2024 02:53:11 +0000
ROA not before: Thu 31 Oct 2024 02:53:11 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 138645
IP address blocks: 103.135.140.0/24 maxlen: 24
103.135.141.0/24 maxlen: 24
103.135.142.0/24 maxlen: 24
103.135.143.0/24 maxlen: 24
103.140.70.0/24 maxlen: 24
103.140.71.0/24 maxlen: 24
2404:7f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Dec 2024 05:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44
Validity
Not Before: Oct 31 02:53:11 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6722f117-650e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:d3:da:3f:7f:eb:8e:de:fb:c5:1d:d4:93:
c7:16:46:79:14:d2:11:e1:80:55:01:7b:f1:73:7a:
86:98:05:be:07:4c:fe:a7:4b:83:2f:26:df:f4:f9:
a2:55:94:d2:50:a3:b9:a0:20:9b:b0:6c:79:5a:3a:
85:c7:65:bc:b5:02:73:d9:fc:c1:cd:06:4d:1f:db:
dc:eb:22:ae:53:a7:42:55:ba:ae:a9:7d:fe:2f:4c:
c6:45:af:1b:12:d0:69:2f:cd:dc:03:18:55:c3:7c:
18:94:ea:2a:59:c4:31:ca:31:25:92:de:67:42:3b:
7b:a9:24:03:ec:6d:bb:b2:06:9e:c1:96:d0:98:c1:
67:9d:d0:6e:8d:63:cf:4c:65:ed:94:39:45:6d:dc:
b9:d4:ac:3f:02:06:b2:37:61:b0:5b:75:36:11:52:
19:3b:92:cb:b8:2d:cf:72:fa:83:64:5c:e8:c4:d3:
24:47:71:73:9f:38:63:a5:0d:69:3f:7b:65:52:ca:
e8:98:c7:34:7e:55:57:3d:d3:bc:10:6d:c6:1c:be:
f4:a3:1e:30:26:36:66:e3:29:95:0e:1e:ac:be:66:
01:14:a4:be:89:0d:81:61:6c:36:15:5f:7e:5c:35:
e1:1c:99:06:6c:42:50:d8:5a:be:30:ba:90:01:84:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:27:CD:53:0C:B1:77:AF:76:9F:D1:23:02:BE:DA:6A:42:5A:F4:EC
X509v3 Authority Key Identifier:
keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/A0F2A674602D11EFB3EDC17DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.140.0/22
103.140.70.0/23
IPv6:
2404:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
08:bd:e5:c4:73:34:04:15:ed:f1:ef:bc:b9:0b:c1:8c:73:43:
03:89:ef:25:4a:e7:e1:e1:9a:30:9d:f9:e7:17:60:65:2f:6e:
2e:88:cc:07:eb:21:6c:6f:09:6c:cb:9b:05:f3:e8:3a:08:98:
ee:db:41:aa:1a:54:27:0f:2e:b2:e7:4b:c4:b4:16:d0:ef:f7:
df:d3:cc:dc:40:20:d5:3f:5c:d2:cc:73:df:2d:47:fc:15:2e:
b0:49:02:e4:04:98:7b:0c:1c:a2:3e:d0:28:e0:8e:fe:8e:9f:
12:72:76:ce:8b:5c:3d:4e:be:c1:7e:2d:39:1a:2c:2c:88:f1:
12:5d:35:7c:c7:4f:54:e8:a3:cb:ff:5b:3c:cb:2f:54:b9:d1:
62:a4:cf:b5:89:13:07:63:38:09:cf:2b:05:46:53:88:e0:f1:
77:04:9a:f8:61:1f:8f:03:2a:9e:03:e2:1f:4f:d6:9a:78:03:
20:1c:45:2f:22:d2:c0:81:28:d1:9e:b8:ee:ae:ea:14:b3:8f:
6d:ba:60:4e:4a:84:9b:05:a1:6d:3a:3a:4e:ea:a8:29:30:87:
85:82:9a:b2:bc:6c:ec:c0:f4:09:17:59:41:c7:f4:df:4c:23:
d3:49:a5:8f:e9:86:09:ba:14:d7:1e:fe:15:13:0a:e7:87:d3:
8e:ad:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:34 2025 by rpki-client