Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/01672E9E8A3111EFA9045610C4F9AE02.roa
File: 01672E9E8A3111EFA9045610C4F9AE02.roa (raw, json)
Hash identifier: Lq4ESoHtt3p7pr0Mefd7/ttUD4IeQoKd6MbRTAXfSBk=
Subject key identifier: 21:5C:E4:07:C5:F4:52:D7:48:EE:C5:39:E4:69:9F:C5:71:44:DD:A4
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 26C3
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/01672E9E8A3111EFA9045610C4F9AE02.roa
Signing time: Mon 14 Oct 2024 13:59:40 +0000
ROA not before: Mon 14 Oct 2024 13:59:40 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38539
IP address blocks: 116.93.52.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
121.127.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 05:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9923 (0x26c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446
Validity
Not Before: Oct 14 13:59:40 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670d23cc-cc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:02:81:7e:08:d7:d4:5c:b5:4c:bd:96:49:
30:1b:92:9b:80:2b:dd:4e:22:04:f4:62:8f:ca:13:
55:4e:bd:1c:8e:17:31:7d:1d:e9:1a:a4:9f:c6:4d:
f2:9d:59:7c:09:b6:a5:21:44:40:2e:14:e4:f7:11:
c0:68:d3:3f:b2:b1:c6:25:72:5c:9e:a6:a6:92:db:
76:62:1a:62:0d:08:72:a2:ae:09:b8:dd:ad:39:d4:
45:02:8a:82:0e:fe:12:80:ec:a0:f5:69:a8:cd:bb:
49:60:ab:4f:69:59:36:61:3a:3f:cd:0a:7f:b1:ff:
66:e0:82:cd:0d:4a:e6:31:5f:da:a2:4a:63:4f:5c:
1a:52:05:28:c2:44:a2:03:75:da:18:e4:48:f1:05:
2e:27:1c:69:6b:e3:d0:40:28:93:a0:73:b0:f6:c2:
61:75:bc:44:2c:70:37:d0:31:58:bd:d6:43:54:8f:
f9:56:1b:08:fd:90:47:76:e6:7f:aa:c7:98:ee:5e:
2e:ca:56:bc:b5:a9:46:82:0b:39:88:40:12:4c:06:
3b:a3:02:7d:94:12:56:25:da:41:16:49:7c:db:8b:
bb:9c:49:c0:07:70:c5:f0:de:a9:39:f7:31:6d:f6:
29:bd:f5:1a:58:55:0e:5a:dc:7b:3e:2a:7d:a1:f3:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:E4:07:C5:F4:52:D7:48:EE:C5:39:E4:69:9F:C5:71:44:DD:A4
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/01672E9E8A3111EFA9045610C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.93.52.0/24
116.93.61.0-116.93.62.255
121.127.20.0/24
Signature Algorithm: sha256WithRSAEncryption
30:89:ef:2d:84:be:e1:4c:e1:04:3d:52:03:40:2c:69:21:0c:
4d:7a:6e:f1:0e:e5:a3:d7:42:ae:14:37:5f:7b:46:16:6f:3c:
f0:f1:08:f4:07:ba:6e:94:ac:9a:11:23:7d:1d:77:ac:81:61:
23:b3:51:47:65:65:08:6e:ce:85:1b:9b:8e:ff:c9:76:b1:37:
09:cd:11:42:06:26:ca:65:9f:6a:d3:ee:32:de:63:94:d4:3e:
d0:37:4a:58:07:05:09:b4:85:9b:ea:d0:62:e1:76:9c:f3:14:
4f:04:a9:f1:2b:d5:15:67:93:d5:3b:56:5b:65:f0:d0:5b:c3:
f1:e2:b7:f6:a8:d9:84:6f:04:b7:22:5e:98:67:00:17:63:88:
ff:b9:97:ea:42:33:f0:1c:67:e0:4d:75:73:7b:57:c4:0d:d4:
61:d8:2e:f3:65:33:e6:c1:7d:bd:89:6f:8e:63:b0:42:93:61:
74:3f:8f:73:8f:d7:94:eb:27:f2:02:72:7a:e9:7f:0b:8a:f3:
3a:ab:b2:63:16:5f:62:b3:05:68:78:c5:f1:73:cb:99:06:dd:
7d:60:d0:e1:4c:03:99:21:85:0a:99:bd:6f:88:24:84:7a:9d:
d3:f6:fc:e3:29:7c:2f:c2:7a:b6:1a:e9:59:28:44:f0:ce:ac:
e8:94:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:50 2025 by rpki-client