Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/849FCB82389611EFAA0E0E37C4F9AE02.roa
File: 849FCB82389611EFAA0E0E37C4F9AE02.roa (raw, json)
Hash identifier: jKRLxVuUwVqXhukf0Y8Woo88Qp2SyZ2T0jihiW0pLRA=
Subject key identifier: C6:4D:9F:BF:37:62:35:45:4A:E0:67:A0:CE:BF:49:DC:27:2C:E0:DD
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 09EA
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/849FCB82389611EFAA0E0E37C4F9AE02.roa
Signing time: Tue 02 Jul 2024 17:14:19 +0000
ROA not before: Tue 02 Jul 2024 17:14:19 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/23 maxlen: 23
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
111.92.128.0/24 maxlen: 24
111.92.129.0/24 maxlen: 24
111.92.130.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 09 Jul 2024 16:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 2 17:14:19 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684356b-fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:00:a0:46:b8:9f:d9:bb:8e:44:1a:f2:ec:
99:ca:bc:9e:5a:44:68:9d:67:9c:65:ce:f8:a0:7a:
a3:ea:7e:43:c3:75:a2:41:81:06:22:18:2b:ae:34:
ea:62:59:fa:de:a3:55:59:b0:5e:e2:42:c1:21:1e:
ae:2a:61:93:67:3f:22:c0:08:a6:5e:89:40:dd:fd:
de:35:23:9b:cd:b9:a3:66:46:00:64:40:b6:eb:cd:
7f:95:0b:20:c6:40:5a:10:09:fe:2f:1f:28:f5:b5:
13:7d:03:72:03:93:41:27:82:3d:66:04:0c:23:56:
67:cb:52:bd:fb:59:b7:66:6f:39:13:12:b2:e5:12:
d3:39:6a:75:d5:22:3d:5c:83:7d:62:14:08:a0:17:
08:87:a8:76:bc:41:e9:5f:21:4d:c3:f8:08:66:43:
09:65:09:a0:c5:d0:05:95:d1:e8:06:bc:5a:27:ec:
3c:8b:1b:a8:2f:fe:d4:1b:44:ba:8a:07:bc:b9:71:
f4:7d:04:c5:98:27:73:8c:f4:ae:87:1f:e4:cd:c3:
74:58:40:41:58:b4:b0:11:bf:e9:82:0b:7c:23:05:
ac:fc:25:9f:33:e6:d4:c6:59:5a:c1:46:d9:0d:ed:
f0:11:e6:e9:86:3a:95:ee:b8:a0:3c:69:56:2f:c0:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:9F:BF:37:62:35:45:4A:E0:67:A0:CE:BF:49:DC:27:2C:E0:DD
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/849FCB82389611EFAA0E0E37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0-14.192.132.255
14.192.134.0-14.192.139.255
14.192.141.0-14.192.153.255
14.192.155.0-14.192.159.255
43.247.120.0/22
103.20.132.0/23
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
b7:ad:34:b9:87:ef:a2:03:01:06:08:51:5d:f2:4e:f8:b4:e8:
eb:6e:47:2a:73:e8:ca:36:41:63:50:f4:04:f2:e9:f6:54:a7:
85:65:68:f6:64:96:b8:68:39:71:99:f7:7e:a1:21:c8:3b:1f:
44:84:7c:e1:f8:47:29:a7:a0:ff:43:21:c3:9d:a0:d6:dd:d2:
ef:f6:ce:87:a4:54:9b:63:51:75:63:a8:5b:29:fe:d7:5a:13:
5c:99:29:55:23:19:e8:a8:45:ec:7d:d4:ae:b8:b5:15:15:0c:
8e:cb:27:7e:f8:f2:0e:f2:a7:3d:21:e8:8d:45:78:47:12:4b:
51:69:f9:d6:fc:53:35:6c:f6:63:ea:79:1f:a6:8a:a0:73:47:
98:96:7b:22:09:8a:a1:8a:2e:07:ad:0e:4f:88:c4:a3:10:2d:
fc:c1:6f:c8:bf:d8:ed:b6:33:f7:c4:b7:cd:80:bc:81:b8:9e:
8f:5c:87:71:16:2a:8d:3d:92:12:72:c8:1d:7d:f4:42:06:86:
26:06:1b:69:2d:6d:ec:97:91:cd:54:36:9f:c5:1e:f8:b0:78:
f2:6e:26:5d:4e:f3:16:bd:8c:9f:9b:c2:82:fa:46:86:53:c6:
7a:af:bb:4d:93:04:af:78:fb:46:a9:e5:d0:17:ee:e4:b0:24:
4e:3b:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:43 2025 by rpki-client