Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E563749EE95211EDA4284D3BC4F9AE02.roa
File: E563749EE95211EDA4284D3BC4F9AE02.roa (raw, json)
Hash identifier: xENSKJ8aOnHAaVFmsWY/FeCt/jrwgQ/BKkre++CsTaA=
Subject key identifier: 06:A8:70:44:FD:F6:58:3B:8F:49:A9:28:12:53:3B:23:84:68:01:12
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0E73
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E563749EE95211EDA4284D3BC4F9AE02.roa
Signing time: Sun 02 Jun 2024 18:51:54 +0000
ROA not before: Sun 02 Jun 2024 18:51:54 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 63796
IP address blocks: 103.232.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 02:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3699 (0xe73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF
Validity
Not Before: Jun 2 18:51:54 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665cbf4a-bfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:05:8f:a4:8b:69:55:a8:ba:6e:ce:c7:de:
6c:1a:6e:57:d0:cb:cf:ed:d7:10:39:93:92:b0:db:
98:0a:65:4c:48:96:c6:d8:75:5c:a9:21:96:45:29:
86:94:5b:e9:9c:ff:46:61:6a:69:08:84:e3:4a:8e:
a9:c4:0d:fc:9a:23:d8:b3:34:3c:4b:95:b9:c5:89:
64:ff:ae:fb:c5:a9:cb:ce:5a:d0:6f:92:e1:e0:c8:
e2:7b:20:bc:13:0b:7d:94:60:af:03:98:99:0c:b0:
ba:05:cf:98:aa:73:38:c2:42:a9:f6:0a:59:74:a3:
02:c1:a6:d2:60:10:69:d9:36:5e:a7:36:54:b1:ab:
22:98:36:05:a5:ea:15:95:3c:1d:8b:a4:6a:9d:61:
34:1c:2c:f5:21:72:2f:e5:b0:92:47:7b:f6:2b:fa:
0a:32:f5:b5:1e:3e:0a:c5:44:81:87:e5:02:c8:64:
15:9c:a8:37:ab:79:d5:bc:6c:2b:f9:0c:88:a3:b4:
1c:16:1f:9a:3a:c6:b6:b6:c8:18:28:b0:09:03:98:
35:24:0f:e2:8e:81:8f:0e:72:15:f1:70:56:96:a9:
b3:66:74:fa:26:2d:25:a7:4a:27:56:df:e5:b6:77:
3d:b2:42:a7:f1:bd:50:6f:67:be:80:81:1a:1f:6b:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A8:70:44:FD:F6:58:3B:8F:49:A9:28:12:53:3B:23:84:68:01:12
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E563749EE95211EDA4284D3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.214.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:a2:a5:40:ff:42:84:ac:9d:86:9e:56:f3:1f:98:75:7c:05:
6f:c2:b1:33:47:16:d9:de:7b:a2:df:94:9c:60:86:ae:af:cb:
97:b8:85:59:30:60:d1:e8:01:3d:80:86:8a:c2:a2:ca:8b:7b:
5b:e2:6f:21:19:2e:79:db:84:fb:54:9c:90:10:7a:ac:5b:db:
3a:f9:6d:66:8c:53:57:0f:13:a1:21:2b:a7:21:39:46:7e:78:
60:04:dc:ba:34:5b:5a:06:2c:17:ac:dc:2b:5f:34:6b:5a:b9:
14:1f:a1:d2:9c:5e:65:63:c5:42:9c:64:ae:84:5a:c1:cb:7f:
4f:e6:a7:f0:e8:94:23:61:3e:ee:88:07:56:be:3d:e9:ef:1d:
17:b8:d0:9c:1b:8c:33:e6:fb:3c:50:56:8c:df:d3:81:d4:c5:
07:fa:5e:cc:81:ff:e7:5c:15:ba:29:b3:3a:39:e2:f2:59:ec:
a2:ca:e2:50:7b:d3:bf:bb:58:8a:e9:6c:21:9f:70:af:d7:c0:
a7:a7:12:84:27:aa:3e:d4:5e:53:b0:d4:69:db:0c:32:20:b2:
9e:88:68:2a:2b:25:ce:5c:91:8b:9d:8e:18:1a:25:11:73:4c:
48:2d:47:33:d7:ab:4a:0b:bf:2b:6d:1f:10:34:db:23:4d:6f:
dd:79:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:48:57 2025 by rpki-client