Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/913D69E6CE9911EFADFAD36CC4F9AE02.roa
File: 913D69E6CE9911EFADFAD36CC4F9AE02.roa (raw, json)
Hash identifier: Mu8nrSYVxQlmaticyCvC9Evo9h9TiCsFNSsgqrXvlnQ=
Subject key identifier: 2F:6B:D6:1B:AD:D2:27:60:57:4A:76:05:03:78:F1:DA:95:9B:5E:12
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0BF1
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/913D69E6CE9911EFADFAD36CC4F9AE02.roa
Signing time: Thu 09 Jan 2025 14:54:03 +0000
ROA not before: Thu 09 Jan 2025 14:54:03 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 398704
IP address blocks: 111.92.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 12:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3057 (0xbf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jan 9 14:54:03 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=677fe30b-f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:b3:9f:11:49:bf:75:0f:fe:2f:78:e0:fc:
17:0f:df:8e:b5:52:db:dd:3c:cb:b4:81:f6:3e:20:
57:5e:67:65:c8:c2:21:a5:fd:dc:4e:b8:02:2a:2f:
2e:d7:20:ec:5a:e1:66:12:fb:0d:2f:b9:8f:c8:66:
49:c0:b9:6a:50:fa:3f:14:56:5e:00:6c:58:f9:55:
2d:d9:5b:19:c4:c8:f2:9f:c4:9d:da:7e:84:e9:a6:
a6:76:0b:e5:9b:16:64:45:65:12:6d:0d:ee:f2:89:
f6:51:4a:e3:94:c5:b8:bb:73:d3:86:d5:fe:50:ee:
37:d4:48:cd:f0:3a:b1:35:4c:96:3f:50:11:7b:c2:
84:c1:82:d5:d0:50:ec:39:8b:75:81:fa:8a:b1:15:
0e:a0:5e:a2:d3:02:b7:b6:1c:63:f6:5f:97:a0:94:
2c:e4:12:46:67:6b:43:e9:d9:89:30:de:ac:a2:19:
3c:47:4f:ec:4f:1f:91:63:ff:db:0e:78:5e:ff:2e:
41:eb:78:c9:4f:fe:a0:0c:ba:d2:75:b3:fb:df:f1:
d0:f0:ab:54:d3:c7:1c:0f:2f:bb:cb:2b:ce:d4:5e:
be:15:e4:8a:83:03:97:bd:3c:03:bb:ec:8e:84:46:
4e:e4:7f:91:18:34:d9:9c:a8:a3:d7:4d:82:4a:52:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:D6:1B:AD:D2:27:60:57:4A:76:05:03:78:F1:DA:95:9B:5E:12
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/913D69E6CE9911EFADFAD36CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.92.128.0/24
Signature Algorithm: sha256WithRSAEncryption
79:71:1a:47:4f:c0:50:ec:bb:46:cf:c8:9c:f0:97:46:95:42:
21:70:44:38:6d:0e:3f:5d:be:af:4b:f5:df:dd:c9:f3:66:9f:
88:f9:71:fd:fe:de:b7:ff:d0:bb:0f:e7:80:56:1f:ce:ad:10:
1c:b4:6d:63:a1:ab:b4:d5:6e:3b:21:d3:0e:e9:9f:4a:77:a6:
4d:93:0c:36:ef:0c:9b:53:39:15:25:6c:58:e4:d2:05:bc:ee:
70:57:0c:f9:71:7f:0c:4e:6b:3f:3e:0f:a1:84:a1:b0:05:b4:
4c:1e:52:68:09:c4:f3:e7:b9:18:33:25:bd:27:d3:24:27:9b:
52:4b:27:3e:a6:ee:6f:99:38:be:6f:85:18:85:25:1e:9f:78:
62:e8:d8:87:43:56:e8:59:e7:78:4a:0b:6a:8d:e8:75:98:c8:
f9:96:9c:be:16:21:c3:f4:b5:ff:74:d1:8c:c2:24:d0:8f:f0:
9a:bd:fd:13:20:12:ae:e6:a0:f4:04:dd:cd:15:57:f2:c9:25:
ed:4e:b9:d8:3b:56:0b:8a:10:19:e5:aa:84:c2:da:7b:f8:45:
ef:0a:6c:1a:f7:a1:0d:e9:00:68:5c:28:9b:b1:d5:58:e0:36:
64:69:c4:dc:e0:9c:2f:c0:9a:74:92:80:d0:c0:76:87:57:e0:
b5:75:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:23 2025 by rpki-client