Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/79E9543E80CF11EFBC92BF51C4F9AE02.roa
File: 79E9543E80CF11EFBC92BF51C4F9AE02.roa (raw, json)
Hash identifier: yLH3lhMiDfMEDBeU9DN1Cu/UfTM9tztdFAbnziTkJxw=
Subject key identifier: 34:CF:45:33:C0:FD:4C:50:C8:C5:CF:48:D2:77:16:60:4E:F1:61:BA
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0AFD
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/79E9543E80CF11EFBC92BF51C4F9AE02.roa
Signing time: Wed 02 Oct 2024 15:20:39 +0000
ROA not before: Wed 02 Oct 2024 15:20:39 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 04 Oct 2024 06:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Oct 2 15:20:39 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66fd64c6-7625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:c0:9b:2e:17:cf:11:79:eb:c2:a4:1d:31:
e0:c8:10:0b:2c:0c:fc:73:88:04:a9:1c:3b:bf:36:
6b:c4:9b:16:0c:ee:ea:87:1c:2c:50:bd:02:52:ab:
96:ad:46:60:4c:55:7f:75:5d:74:b1:7a:7a:16:4d:
51:ff:6a:3d:59:2b:f4:13:69:ec:95:6a:21:20:1f:
36:8a:94:91:03:cf:b5:e0:f0:c3:db:9f:a8:2a:88:
37:51:16:6e:99:11:ed:78:d4:88:e7:1d:b7:e0:75:
44:22:51:65:27:fb:7f:fb:e8:ec:03:70:f0:f7:ca:
58:a5:c7:8e:c8:7e:82:cd:d3:ed:33:d6:b2:2f:5a:
a3:be:ad:47:11:80:ef:8d:6b:a4:b9:61:c7:82:b9:
65:18:11:35:a4:e3:bd:3e:ce:5c:66:b0:32:8f:14:
c3:24:ab:80:0e:95:9b:e6:07:71:6e:69:d7:f2:90:
75:82:78:e0:c8:22:97:33:d4:69:4c:41:41:c8:d0:
29:78:74:08:71:10:5d:95:db:3a:95:68:e3:61:d8:
43:c6:b9:d9:d5:e2:43:1d:94:b1:a6:28:9c:71:57:
f5:f0:8d:1c:db:48:f3:a9:57:e1:3a:fa:96:e6:7e:
58:f6:6b:9a:0e:7f:45:ee:54:66:87:5a:17:45:81:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:45:33:C0:FD:4C:50:C8:C5:CF:48:D2:77:16:60:4E:F1:61:BA
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/79E9543E80CF11EFBC92BF51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/23
14.192.131.0/24
14.192.135.0-14.192.136.255
14.192.142.0/23
14.192.147.0/24
14.192.149.0-14.192.150.255
14.192.155.0/24
14.192.158.0/23
43.247.120.0-43.247.122.255
103.20.134.0/23
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
1a:9c:3c:cd:51:9f:9b:88:0e:08:62:a4:b3:ac:df:e8:52:35:
d7:46:52:54:35:a3:e5:2b:03:1b:c4:c6:cb:1a:f6:02:f0:49:
0a:ee:f5:75:96:66:a0:26:03:a8:b1:b7:9f:f3:7b:75:a6:01:
22:67:dc:f5:cf:c8:69:d9:13:b1:53:e2:dc:97:3e:96:01:2b:
e7:bd:8f:9d:66:6c:09:02:9d:23:d5:23:8d:d9:f8:c0:dc:09:
2c:f2:e8:3f:93:66:94:47:e6:69:e1:c9:53:be:5c:3e:5a:5c:
fc:78:e4:f7:a7:e5:e3:cf:23:22:27:67:de:2e:4f:4e:0f:ec:
62:2a:8c:e7:17:79:08:88:0d:28:ef:fe:59:a0:11:55:bd:32:
2c:da:f7:22:ef:cc:25:29:ce:27:7f:a4:8b:1c:4d:8a:77:88:
e4:83:9d:2d:33:43:43:84:58:d6:43:0a:45:06:94:25:c8:f6:
b3:3a:d0:36:f8:70:99:dc:6d:83:dd:f9:68:2b:99:a9:84:30:
1a:0b:a9:8d:b6:15:97:0a:90:3b:86:6e:2a:8e:c3:fc:77:80:
b5:58:87:b0:97:d8:41:b7:a4:73:00:30:c5:13:06:b1:6a:45:
78:48:80:db:8c:5e:d4:72:6b:ed:bd:8a:77:ac:50:93:7a:e1:
d5:0f:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:17 2025 by rpki-client