Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B66440FEB3D311EF91157414C4F9AE02.roa
File: B66440FEB3D311EF91157414C4F9AE02.roa (raw, json)
Hash identifier: ylbf42WhCHgIa7IFrUVKHqvy5DiNUUPabYg54yfZi5E=
Subject key identifier: 73:DE:71:B3:A0:41:F7:F3:92:2C:6A:EA:01:6C:8A:5A:CF:BC:FD:96
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0BAE
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B66440FEB3D311EF91157414C4F9AE02.roa
Signing time: Tue 17 Dec 2024 07:28:35 +0000
ROA not before: Tue 17 Dec 2024 07:28:35 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133933
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Dec 2024 17:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Dec 17 07:28:35 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67612822-c64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:a6:f6:74:2e:f1:9e:43:ba:c0:c5:f8:52:
0d:07:f4:59:d3:7b:63:7d:20:c3:9c:95:04:5b:cf:
00:2b:0b:07:20:46:a7:7c:9b:be:dc:06:58:38:40:
5d:8c:12:f0:e5:97:73:09:e8:a1:62:7d:03:15:f1:
03:75:09:34:8e:d6:6a:db:02:69:89:36:70:e5:10:
a8:89:3a:dc:67:12:77:6a:bf:e1:e5:47:6e:dc:3e:
7b:b2:39:9c:4b:73:41:78:8d:d7:d2:ab:fe:96:62:
70:f1:8d:f2:cf:b3:cd:98:78:97:18:75:3e:95:11:
48:ae:f5:46:b4:ab:c3:c2:46:91:4b:be:08:d8:7a:
ad:41:3d:7e:38:b8:9f:4d:73:c5:c9:55:77:90:59:
32:46:19:02:23:8d:b4:08:cb:90:41:0c:7e:3a:de:
e3:77:73:a3:cd:a2:23:4f:43:23:a1:ef:4e:27:0a:
f1:0a:30:1b:76:0f:74:cf:bd:af:1f:1f:b2:95:1e:
15:a0:85:93:1f:e4:61:c1:0f:f4:0e:de:ab:19:30:
5f:86:e1:69:cc:5c:b4:4d:6c:22:30:75:91:cb:53:
cb:b2:0a:ba:54:d3:9f:e8:24:d8:55:29:6e:a1:d5:
37:32:47:c7:74:bd:40:e0:c5:61:a3:63:56:6b:3a:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DE:71:B3:A0:41:F7:F3:92:2C:6A:EA:01:6C:8A:5A:CF:BC:FD:96
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B66440FEB3D311EF91157414C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/23
14.192.133.0/24
14.192.136.0/23
14.192.144.0/24
14.192.147.0-14.192.148.255
14.192.156.0/23
14.192.159.0/24
43.247.120.0-43.247.122.255
103.20.134.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0c:35:61:74:fb:3a:17:d8:ee:f9:5b:72:69:0b:49:22:44:
4e:12:0b:d4:45:4a:84:62:17:51:6b:89:4a:58:c5:16:2e:a2:
2a:60:c9:6c:1d:1d:e2:b6:bb:e3:ee:a1:46:9f:ac:15:cf:a5:
a3:b1:2d:71:ea:ad:45:05:87:b0:f5:7b:d1:88:25:b2:2a:b0:
ae:4d:39:67:00:49:d9:36:8a:f9:aa:4a:81:7d:0f:d3:67:14:
5b:a0:57:4d:b0:8a:38:98:23:47:f9:d7:54:ac:5d:c2:f9:3d:
b0:d4:8b:c3:3f:2b:d1:cb:ef:69:52:41:10:05:c3:21:e3:17:
ab:8c:54:24:00:2e:74:14:b0:4c:9c:d9:08:e2:af:ec:8b:f6:
54:d0:03:03:30:81:1c:ae:5e:33:3a:b3:d9:6a:02:81:ba:96:
0d:b9:ff:6a:0f:5e:5c:4c:a8:35:ea:ec:ac:98:8c:5e:d0:c7:
a5:46:36:ab:fd:68:fc:d4:93:22:0b:86:6b:0c:53:e4:e5:1f:
c7:7d:09:40:75:30:86:5d:6d:e8:0c:f7:af:40:88:7e:66:69:
c2:07:9f:71:e7:26:92:20:d6:58:3d:03:42:f0:e9:ef:e0:08:
40:d3:e4:74:70:9e:b0:6a:f9:b3:9c:25:e1:e0:6c:f7:e7:7d:
28:3a:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:23 2025 by rpki-client