Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/776C6F864E4B11EF95385386C4F9AE02.roa
File: 776C6F864E4B11EF95385386C4F9AE02.roa (raw, json)
Hash identifier: oMa3i0kgsgH3ygmBRCUGkZztwun+N1iyrNCU0TeYJIA=
Subject key identifier: 14:B5:37:17:3B:C2:C2:F8:7A:21:67:4D:8F:73:FE:13:50:BF:0A:4C
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A4A
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/776C6F864E4B11EF95385386C4F9AE02.roa
Signing time: Tue 30 Jul 2024 08:12:31 +0000
ROA not before: Tue 30 Jul 2024 08:12:31 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 09 Aug 2024 11:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 30 08:12:31 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a8a06e-0e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:8f:91:d3:a3:d1:4b:ea:2b:4d:c2:bc:0e:
94:db:9b:f9:8a:2e:49:62:98:ec:b9:d6:6f:32:e8:
c0:2a:67:3f:3a:6e:1e:2e:cf:7b:97:1c:12:94:0f:
34:dd:3c:72:61:4b:4f:94:c4:2c:30:06:aa:dd:85:
4f:9d:1a:27:c7:2c:f9:d8:5b:f8:04:37:8d:3e:e2:
2f:49:74:07:72:61:2d:9d:8a:bd:86:e8:31:0c:cd:
d9:5d:b0:ec:83:fe:1e:2c:41:d1:78:a6:2e:78:0c:
eb:fe:d5:b9:a6:d4:19:8b:b9:58:f0:2f:dc:77:74:
80:3c:06:d4:48:3e:07:27:ee:96:77:4b:f4:52:32:
e4:11:20:e2:04:80:af:7f:16:5e:af:9c:5e:a6:5a:
96:ba:24:b3:67:c2:01:20:79:e6:54:58:dd:e6:db:
61:0f:47:73:98:0a:e0:81:f4:bf:21:d0:88:ea:fe:
a0:44:d6:1e:57:35:c6:97:c4:de:1e:d5:e1:54:52:
35:88:bf:91:cb:e6:2b:40:f1:6a:39:e6:a5:31:76:
0a:a3:2f:8a:d6:5f:8a:8c:98:a8:b1:3e:98:6d:76:
34:e6:f8:86:5f:e4:af:5e:8d:fd:6a:f5:ac:2f:f1:
7a:9c:83:2d:5f:b4:6b:95:61:73:14:60:51:32:38:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B5:37:17:3B:C2:C2:F8:7A:21:67:4D:8F:73:FE:13:50:BF:0A:4C
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/776C6F864E4B11EF95385386C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0-14.192.130.255
14.192.132.0-14.192.150.255
14.192.154.0/23
14.192.159.0/24
43.247.120.0/22
103.20.132.0/22
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
2a:a7:34:3d:4e:67:34:39:42:43:c7:bd:e2:88:f9:d9:95:ac:
cd:96:cb:d4:25:32:29:1f:52:6d:ac:45:25:52:23:4d:95:58:
19:5c:7d:95:15:3c:c1:00:ed:a8:7c:58:f0:ec:c0:cd:8a:42:
3d:1b:74:3c:64:45:90:37:57:ab:a3:6c:ae:f1:ac:55:e0:75:
12:fc:32:49:b9:f0:39:37:30:17:65:48:50:0d:b4:a0:5a:0f:
95:c0:93:9e:df:3b:c2:8a:ff:24:39:ee:84:97:9c:d7:bb:62:
3e:f0:c5:b1:7b:43:fe:f7:44:e6:1c:9a:c6:b2:67:ef:05:be:
60:9e:28:9a:0e:9d:47:15:7f:07:be:cb:c2:e8:8c:7c:19:00:
5b:bc:18:fc:ed:31:15:bf:04:a9:50:f0:ce:9c:b0:4f:19:b2:
b5:54:66:78:92:15:1c:e8:95:e4:43:86:18:77:9e:07:1c:d1:
d3:ff:57:55:61:06:4c:63:e7:4e:d6:26:4e:31:8d:4e:b0:50:
07:aa:01:0e:f4:71:67:8c:09:1e:a1:70:2c:1e:b6:fe:aa:98:
2b:a1:a2:d8:5e:be:f3:f7:f3:2c:31:4d:32:70:4c:84:f5:91:
e9:98:8f:1f:27:ad:d8:fd:28:24:a4:62:f6:ab:f1:05:0b:e6:
f4:3c:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:58 2025 by rpki-client