Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7779CE0E3E1211EFAA5D1269C4F9AE02.roa
File: 7779CE0E3E1211EFAA5D1269C4F9AE02.roa (raw, json)
Hash identifier: /CfZvumZ28IjLAz59n2K3kVeE9KTM9FwVL7QKnlMkJY=
Subject key identifier: 45:10:60:BA:99:A5:26:02:3B:5F:E3:BB:52:6B:E5:5A:4B:BB:B1:7D
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A16
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7779CE0E3E1211EFAA5D1269C4F9AE02.roa
Signing time: Thu 11 Jul 2024 16:30:23 +0000
ROA not before: Thu 11 Jul 2024 16:30:23 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/23 maxlen: 23
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 18 Jul 2024 13:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2582 (0xa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 11 16:30:23 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6690089f-9e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:eb:1a:98:a4:af:d7:ec:ad:dd:46:a1:63:
43:58:32:00:b2:70:1d:32:41:04:c0:38:61:92:c7:
60:70:33:0f:ee:66:ba:5a:62:ec:c2:32:86:86:04:
16:78:be:27:d8:7f:34:c2:66:0a:50:a0:8c:8b:41:
b5:c8:b0:15:12:3f:8b:50:83:62:19:e5:6d:49:f5:
43:22:47:df:d4:9a:6f:16:7f:f5:6e:dc:6a:0b:bb:
fe:89:ee:9d:84:29:f2:90:da:62:0d:ec:f2:57:ce:
66:e8:fe:da:38:e7:97:59:96:b1:a2:e7:8d:1f:e1:
ee:d0:45:b0:6a:fd:94:88:f2:09:2b:8c:0b:df:7e:
64:89:9b:eb:d5:7e:d9:b6:9e:eb:80:28:9e:fa:6b:
b0:a2:74:ea:ee:30:b5:6e:f7:c6:5f:4c:f0:a6:83:
24:0c:7b:75:e1:75:92:9b:af:fa:2f:d9:8f:f3:aa:
89:c3:bf:22:29:0b:7e:28:b7:c6:62:54:68:dd:a4:
10:8f:8f:3a:27:80:38:c4:7c:11:87:ee:57:39:f1:
71:96:ea:43:25:9b:77:fe:10:94:e5:9a:a4:7c:19:
9c:e2:4c:ea:aa:8c:7b:df:9c:0b:8c:26:7a:8a:e2:
63:8a:54:a9:13:21:98:c5:e7:8f:6b:ec:fd:61:aa:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:10:60:BA:99:A5:26:02:3B:5F:E3:BB:52:6B:E5:5A:4B:BB:B1:7D
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7779CE0E3E1211EFAA5D1269C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/19
43.247.120.0/22
103.20.132.0/22
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
78:df:8d:46:6a:eb:29:8b:68:00:a4:dd:75:ac:1b:b5:5b:d3:
df:eb:d4:b8:87:e7:c3:cc:14:df:97:7b:50:1c:07:d1:2e:d2:
44:8f:84:1c:06:04:54:c0:3e:8e:b8:19:e0:12:af:61:03:b5:
96:27:79:e6:67:c9:ea:6a:d3:a0:07:89:2c:8a:ce:fb:48:c8:
1d:d0:94:a6:3f:3e:02:08:e6:ea:e6:5e:37:a0:f7:65:56:1c:
b5:4d:fa:38:ce:9b:84:05:c9:83:ae:38:9c:48:75:b5:47:7a:
a9:3f:93:ad:4b:ba:65:4f:86:e2:80:78:63:90:e1:47:2b:46:
bf:51:6e:b5:d2:de:73:73:70:ce:c6:89:36:be:9c:1c:4a:1a:
47:38:7b:e6:c9:cd:a7:e9:72:ee:c3:d0:10:cf:0d:64:f2:5a:
8e:5a:e9:1e:6d:a1:18:a4:a4:74:ef:ad:b0:e4:63:74:42:01:
fc:25:75:0e:e9:76:b2:75:7e:5a:42:99:69:96:ff:f6:c3:98:
d3:2a:99:5a:15:ca:56:28:bd:25:7d:37:52:ca:0b:c0:10:a8:
ad:02:5b:98:da:ae:7a:21:3b:1a:f4:d1:20:ad:dd:41:69:4b:
93:12:c4:d2:04:09:ef:9b:be:3c:ec:b3:33:99:4e:41:5a:d4:
ff:6b:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:43 2025 by rpki-client