Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/79161B2880CF11EFBC92BF51C4F9AE02.roa
File: 79161B2880CF11EFBC92BF51C4F9AE02.roa (raw, json)
Hash identifier: dYQV1PMwDmVTMkphNVTAQdXu+tMvT0JWGhCUKtRFh4Y=
Subject key identifier: 48:3F:97:AC:7F:7B:FE:19:E6:84:5E:EA:81:7F:7E:60:92:84:B6:6E
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0AF4
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/79161B2880CF11EFBC92BF51C4F9AE02.roa
Signing time: Wed 02 Oct 2024 15:03:25 +0000
ROA not before: Wed 02 Oct 2024 15:03:25 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133933
IP address blocks: 14.192.129.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 07:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2804 (0xaf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Oct 2 15:03:25 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66fd60bd-e110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:61:29:88:57:be:a9:a1:ba:d9:4d:fd:cf:
2c:be:6f:f7:ca:cb:83:ad:f7:61:c1:61:ab:9c:9a:
e9:b6:b2:a2:60:7c:d7:b6:7e:53:d5:9d:26:0b:09:
bc:28:9d:26:4c:33:f8:b3:9c:fb:d3:d2:1d:82:a9:
84:2c:cc:5b:ec:3d:0d:27:10:d8:fa:d6:af:10:73:
94:b4:c7:54:81:7a:ec:1c:7e:9f:ce:36:37:a8:4f:
83:7d:99:38:63:92:2d:ef:9c:81:18:5b:d5:19:46:
20:9b:54:ac:28:1a:25:f7:92:96:e4:b2:a1:7b:dc:
0d:93:1e:ba:b9:ff:e7:f3:db:f5:d6:6b:64:9a:dd:
20:47:24:ad:b5:f2:a3:ac:84:ee:bc:29:94:34:74:
8e:93:61:82:f3:0a:18:8d:6e:cd:ab:02:e0:21:99:
8e:f7:e9:1f:38:bb:7a:e6:a1:7b:70:61:19:de:b4:
e2:5a:80:e4:01:cc:39:f8:e1:8d:c3:89:85:82:0d:
d1:61:6a:1a:54:a9:96:81:f3:0c:5b:b2:14:11:a8:
4d:f8:13:fa:19:b1:f7:ed:b8:2a:42:8f:12:29:3e:
11:80:00:3d:32:03:92:fa:06:c9:70:e6:3f:b3:17:
ef:b3:3e:2b:9f:37:61:52:ee:1c:0e:7c:47:bb:6a:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:97:AC:7F:7B:FE:19:E6:84:5E:EA:81:7F:7E:60:92:84:B6:6E
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/79161B2880CF11EFBC92BF51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.129.0/24
43.247.120.0-43.247.122.255
103.20.134.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:37:8b:b8:a2:f2:55:9f:4a:44:d8:d7:76:2b:78:db:a3:ce:
66:37:48:88:f0:22:d4:6a:10:8f:04:d0:c6:31:99:b6:82:30:
1e:d4:cb:0d:40:44:bd:ee:6a:c1:c5:15:ba:a7:6d:27:d6:82:
4a:06:71:4b:88:0f:bb:50:4c:5e:c6:cf:7b:ec:3f:89:5f:7b:
26:32:1c:c9:73:ea:c9:23:08:8f:1a:8e:f1:17:5e:c3:a5:a2:
1d:ab:37:a2:0a:a5:df:c2:ac:50:06:f6:c7:e0:51:28:b4:21:
d1:a2:fb:7e:3a:ef:5e:18:ca:4e:23:07:4f:d1:04:51:36:46:
26:24:57:54:cc:d7:15:f8:b4:59:15:69:28:87:5e:9f:89:06:
1f:8e:c2:35:31:ea:2a:21:22:f5:c8:e2:0b:d2:ff:5e:b3:87:
84:d9:62:05:a4:00:4c:b3:cd:2e:9b:d1:34:3f:8e:dd:4a:54:
09:fa:0d:86:9e:30:71:31:ef:13:48:28:d9:94:82:90:be:65:
aa:23:18:e7:fc:41:29:34:84:63:4d:f6:ee:99:fb:fa:47:98:
52:7a:46:90:1e:1b:39:42:cb:3b:ae:59:8e:d7:a9:29:49:8e:
8a:b0:b3:ad:df:01:0f:a1:c4:4c:c2:71:8a:de:85:64:02:54:
06:78:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:20 2025 by rpki-client