Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa
File: 3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa (raw, json)
Hash identifier: +twSGEEPaALaMbYF9lTwibdqJXW279A4QEW3XuPAVIc=
Subject key identifier: 50:F9:14:F2:3B:4F:FE:98:6D:A5:2F:07:0A:E3:E3:E1:80:3C:11:05
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 70FBCD645C3B5A6DEFAE56369C8DF2352B69B62B
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa
Signing time: Tue 31 Dec 2024 07:04:46 +0000
ROA not before: Tue 31 Dec 2024 06:59:46 +0000
ROA not after: Tue 30 Dec 2025 07:04:46 +0000
asID: 393506
IP address blocks: 103.25.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fb:cd:64:5c:3b:5a:6d:ef:ae:56:36:9c:8d:f2:35:2b:69:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Dec 31 06:59:46 2024 GMT
Not After : Dec 30 07:04:46 2025 GMT
Subject: CN=50F914F23B4FFE986DA52F070AE3E3E1803C1105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:cb:b4:fd:c3:b3:a9:53:fc:d9:a3:bf:fe:
c9:f9:14:16:15:56:ae:ce:4f:ec:8c:c8:93:64:e7:
3f:df:64:2d:c6:c5:b3:88:40:7d:58:15:fa:ca:55:
1a:b8:d5:c4:d0:6b:b5:25:3f:71:dc:41:9e:3a:0f:
f4:40:41:53:fe:19:a7:86:9f:10:3f:c4:53:cd:38:
99:1d:6d:bc:01:20:04:6e:42:74:f8:27:6c:c8:fd:
94:21:72:42:dd:c7:73:08:f0:82:08:75:4c:f2:74:
e5:18:70:2a:ac:25:9d:21:c2:a3:ae:99:85:4b:5b:
fd:7b:c2:a6:c4:56:03:1f:34:ca:cf:43:e4:d1:93:
ff:94:1d:ed:f4:4f:f8:89:e7:be:29:72:1a:ab:1b:
c4:8e:27:a7:9b:dc:89:9f:0a:46:75:41:b4:c4:30:
46:ac:83:af:ae:34:16:5f:97:24:db:04:20:79:69:
2d:90:da:71:29:ee:66:eb:fa:df:b3:97:0b:f4:f8:
f6:fb:4c:e5:ca:82:e8:53:47:3d:16:01:0e:7e:28:
89:5c:07:7d:19:02:ae:d2:d9:fe:a8:53:b5:0a:ca:
dd:b5:ad:b6:88:3f:6f:f4:50:72:45:da:b0:85:6f:
83:4e:7e:4d:a9:de:be:a2:bc:87:67:0b:45:a9:8d:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:14:F2:3B:4F:FE:98:6D:A5:2F:07:0A:E3:E3:E1:80:3C:11:05
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:10:d9:ea:c5:6c:98:82:20:7a:dd:bb:97:6f:9b:50:06:b8:
36:aa:65:c9:ed:ac:ce:01:93:e0:0b:40:0d:4a:3a:7e:df:17:
11:46:cf:2b:5b:39:31:04:8f:0d:17:d9:79:4c:21:ae:fd:8f:
4c:9f:aa:45:ea:12:9f:d7:3e:25:b9:b8:f2:2d:ee:f9:92:af:
e9:91:1d:9d:c2:9d:b1:a8:a5:14:e6:15:a3:57:0b:0b:b8:b3:
5c:94:ad:e3:59:5b:75:9a:fb:1a:01:26:14:61:02:fb:6d:71:
b0:cd:96:a1:4d:c1:03:6f:05:bb:1b:20:b5:6b:bd:f5:49:76:
b1:7c:12:b8:d1:e7:b0:e2:b7:d4:f6:81:b8:c6:32:c8:61:96:
c8:06:f4:ed:7a:7e:32:03:a1:29:a3:c8:50:6a:7b:e3:2b:f5:
3b:80:08:7e:67:be:00:c9:98:5f:cf:29:33:89:0e:a6:08:f1:
a8:19:3d:4e:d5:5b:60:d6:e5:b4:79:a6:33:9a:06:c8:1d:48:
df:7c:3c:a8:ad:04:35:87:3f:73:de:48:61:e2:8d:4c:60:6d:
fe:39:43:54:87:29:25:6f:10:b8:5a:38:59:ba:57:67:04:98:
a6:24:25:8e:ab:78:16:aa:80:02:5c:f7:23:a2:44:35:58:ad:
ed:47:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:41:46 2025 by rpki-client