Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/79033388579311EF825E193DC4F9AE02.roa
File: 79033388579311EF825E193DC4F9AE02.roa (raw, json)
Hash identifier: +yQ4X58B4bYu30znfQQkWieJkj6Qkriq03GM6bHWH0M=
Subject key identifier: 44:F5:C4:F2:87:D9:4A:4E:F6:70:57:F2:E0:27:67:09:EA:DD:E9:B2
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: A3
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/79033388579311EF825E193DC4F9AE02.roa
Signing time: Fri 30 Aug 2024 05:23:30 +0000
ROA not before: Fri 30 Aug 2024 05:23:30 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 3258
IP address blocks: 36.50.84.0/23 maxlen: 23
103.47.186.0/24 maxlen: 24
103.91.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 02 Sep 2024 06:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C
Validity
Not Before: Aug 30 05:23:30 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66d15752-e3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:a8:1c:38:fc:fd:52:a1:9b:04:20:2c:27:
e4:cf:8c:80:ce:2e:c2:2d:9a:e4:01:c4:5a:3c:fc:
10:f7:9f:f3:4b:bc:e1:eb:16:6d:93:bd:9e:d8:f0:
ca:72:22:05:ec:19:c7:0f:fb:ad:c8:b9:30:65:8d:
e2:e0:70:16:05:d4:e8:60:3c:77:db:6f:42:11:58:
b1:e7:5f:3a:d6:10:11:53:2b:e2:42:61:86:6b:91:
5d:b7:0d:8b:9b:3d:f0:62:9a:89:90:9a:fa:ee:5d:
f2:2a:8c:ed:9b:dc:7c:e3:71:ec:b6:f4:be:f1:7b:
19:2c:eb:af:4e:ef:a8:42:0d:6d:70:ba:75:b0:c3:
70:38:32:ba:aa:84:21:7a:c8:10:e9:cd:00:0a:a3:
60:c9:95:2b:da:27:6d:85:df:c4:bb:6e:a1:45:f2:
35:d4:30:8d:c5:5f:03:58:56:7c:b3:06:18:bf:4a:
cd:d5:7f:5b:24:9a:67:2c:c6:ec:53:a7:11:a5:99:
a0:52:75:0c:5b:84:12:f8:b5:87:9d:58:5d:12:08:
e5:3f:88:73:22:6a:c2:e1:35:74:52:97:86:72:76:
47:f5:e8:23:95:21:05:01:c3:e8:37:9c:a8:2d:98:
b1:cb:20:81:ba:8c:88:d5:21:d2:3d:14:8b:92:ed:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:C4:F2:87:D9:4A:4E:F6:70:57:F2:E0:27:67:09:EA:DD:E9:B2
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/79033388579311EF825E193DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.84.0/23
103.47.186.0/24
103.91.144.0/23
Signature Algorithm: sha256WithRSAEncryption
50:13:f6:d3:10:2b:af:e1:e2:f4:66:16:1a:9e:15:b9:8d:ad:
1e:e9:1c:44:56:a2:48:6b:f7:d2:44:2d:b1:df:d4:32:ce:93:
23:c1:94:f0:28:c7:74:92:fe:e8:46:00:5b:d0:0d:9e:80:17:
07:ca:08:60:c9:b9:61:90:d7:ad:a5:3d:a3:6d:f9:aa:ac:25:
d9:1b:81:e7:a8:ca:33:43:50:16:c7:ff:b9:0d:21:a1:e6:9b:
61:fd:65:02:46:8f:09:c4:01:5f:4e:d6:fb:d4:32:91:6e:09:
31:e5:d8:10:d7:1c:b0:0c:3f:da:f5:8b:ac:03:f9:d1:b8:98:
5c:90:09:30:d2:ea:cf:88:00:01:c9:07:a7:63:5d:15:d6:67:
33:93:d4:29:6f:56:53:32:98:e2:4f:a5:27:b7:75:ee:9f:79:
48:51:13:c3:38:77:fe:8b:de:46:b5:d7:e6:89:67:9e:27:70:
33:76:21:87:7e:e1:35:e2:99:80:1b:d1:23:93:ce:ca:b6:8e:
13:2f:3a:b9:db:08:8f:82:59:79:17:be:66:b6:b7:77:be:99:
e4:a0:26:d4:fb:83:b8:1a:80:35:11:4b:20:b4:fb:4f:e0:61:
e7:36:89:34:1b:dd:02:89:26:f8:77:13:4c:66:ba:c6:3b:db:
e6:60:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:57 2025 by rpki-client