Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/F126D5322A4211EF9FAC5285C4F9AE02.roa
File: F126D5322A4211EF9FAC5285C4F9AE02.roa (raw, json)
Hash identifier: mB7h/GHqBgvKSCztlCgc84T0ajVIKusJDa2wURepanU=
Subject key identifier: C7:D1:B9:6D:7B:93:2C:5B:8E:4A:F3:9A:77:17:50:A9:38:FF:75:3A
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 11F4
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/F126D5322A4211EF9FAC5285C4F9AE02.roa
Signing time: Fri 22 Nov 2024 17:35:24 +0000
ROA not before: Fri 22 Nov 2024 17:35:24 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 18702
IP address blocks: 103.103.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 10:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4596 (0x11f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676
Validity
Not Before: Nov 22 17:35:24 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6740c0dc-8f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:69:92:ac:ba:f3:ee:71:ad:8a:cd:ce:b5:
aa:d2:6a:ef:61:b2:3b:6f:f5:99:f7:09:12:5d:57:
c2:be:ae:a2:93:4e:9f:9d:22:b4:29:a0:64:3f:35:
f5:c8:af:d0:fb:5e:33:6e:62:0a:5e:fd:d6:9c:6c:
09:e7:f8:cb:57:5e:24:03:9e:50:7d:49:ad:96:b3:
71:99:42:98:73:45:4a:c3:4e:85:e1:ff:86:8a:8f:
1d:e3:5b:a0:b8:ff:13:6a:8b:3a:2d:b2:e6:33:ec:
61:6e:ec:0a:90:b7:93:a8:63:53:59:8e:4e:f3:29:
90:40:05:a3:80:79:f6:51:93:db:c2:f3:a0:8d:ad:
3e:9c:50:62:d0:c5:9f:ca:25:2d:97:ec:68:fa:ca:
3f:e0:53:a6:b9:80:bc:a0:f0:8a:5d:dd:27:5f:26:
19:f3:60:a8:1e:b5:8d:6f:d2:04:c7:c6:10:f3:79:
3b:07:7b:ae:01:73:68:8e:f2:a7:b5:7b:a9:af:ad:
cb:0a:c1:95:8b:79:e7:f0:dd:09:dd:c5:d4:63:0b:
13:90:9b:25:84:d6:70:b4:46:3e:6b:0f:44:32:0e:
91:cd:00:0f:4d:33:15:1f:36:59:a2:ca:5e:2b:2e:
9c:86:2a:aa:c3:ef:28:50:22:85:25:e1:d4:28:87:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D1:B9:6D:7B:93:2C:5B:8E:4A:F3:9A:77:17:50:A9:38:FF:75:3A
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/F126D5322A4211EF9FAC5285C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.128.0/24
Signature Algorithm: sha256WithRSAEncryption
98:87:bc:c2:00:d3:d1:77:21:a0:6b:87:bd:fb:59:f6:51:af:
cf:5f:08:fa:b5:d3:bb:f4:da:d9:bf:ec:86:3c:3c:12:44:22:
9e:20:55:29:25:7e:52:31:a9:13:0b:f2:4c:69:a9:02:2c:04:
72:d7:12:d2:c8:b9:bd:37:31:32:24:3f:64:80:0d:5f:d1:93:
16:14:3e:5a:29:18:40:86:37:62:fd:2d:50:f4:e0:12:fe:4b:
d4:7b:fe:b2:2a:d1:d1:c4:fb:cc:e9:91:e8:eb:ce:f9:cd:06:
8c:9b:c3:19:f3:78:f1:f9:19:42:f6:9e:60:83:1b:88:99:1f:
c4:5a:0e:81:5c:fb:97:3b:bb:7c:c2:ad:51:32:1f:f3:4b:83:
b7:d1:52:ae:12:88:8f:6a:c5:a2:7f:a5:bf:85:0d:75:ae:8e:
d8:a3:f6:39:48:38:97:bd:1d:05:00:c0:bc:b4:57:ba:31:8f:
df:e2:95:d1:48:fe:81:3d:26:48:2f:2e:3d:62:1e:07:e0:72:
f9:09:da:45:41:48:93:91:01:da:42:08:e4:ce:b4:aa:04:6c:
db:3a:99:54:33:3d:7a:b9:86:09:e6:53:2b:09:21:64:ef:8d:
75:f1:56:ec:00:a8:5f:b0:40:19:1e:88:c6:7f:8b:9f:3e:e6:
bb:e4:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:08 2025 by rpki-client