Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/C785D21A5B9C11EFB8B48C45C4F9AE02.roa
File: C785D21A5B9C11EFB8B48C45C4F9AE02.roa (raw, json)
Hash identifier: dH2XLmO9Turcj+b5oJwMWISg91wYDY4wfo6vJmUAboY=
Subject key identifier: 10:D8:3E:E0:75:3B:D6:04:2B:F0:1E:1D:34:86:F1:98:27:C0:91:6D
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A93
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/C785D21A5B9C11EFB8B48C45C4F9AE02.roa
Signing time: Tue 27 Aug 2024 11:49:13 +0000
ROA not before: Tue 27 Aug 2024 11:49:13 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 28 Aug 2024 08:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Aug 27 11:49:13 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66cdbd38-edc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:e1:76:fe:53:6b:10:7c:d7:d4:3f:62:1c:
64:f0:6a:bc:4f:4a:eb:65:40:31:26:1b:aa:b1:df:
85:f0:cc:1e:f0:e6:0e:50:aa:ec:1e:ae:74:1a:42:
57:de:bb:c5:f2:ec:53:f8:5c:13:d5:70:93:c0:04:
f3:f6:2c:de:24:7c:f8:13:5a:b5:9e:ab:4e:c7:78:
3c:5b:a7:41:96:4c:47:c3:2c:d0:87:1b:67:aa:2d:
34:b5:42:df:bb:c9:43:e2:93:55:d1:f2:aa:36:cc:
7c:88:02:b2:69:a9:c8:e2:57:2d:20:f1:81:3c:a1:
2d:a5:05:16:d9:8b:9f:a8:46:bf:a6:2a:12:6a:bb:
b5:73:38:37:92:1e:f3:93:dd:36:0e:5b:d8:93:84:
92:d7:12:85:49:31:a9:0e:18:18:b5:38:ad:11:72:
a7:7b:70:de:38:ca:72:b6:8e:6d:ed:67:73:9a:56:
1b:5f:8f:a9:8c:ea:86:4b:81:05:36:cf:1e:b0:ef:
d7:55:77:c5:f7:94:55:52:27:d2:83:f8:10:6b:7c:
8e:f7:89:a4:c9:50:e0:7d:13:be:0f:48:2a:5c:c6:
c5:8b:af:05:6a:e0:63:bf:c0:72:7c:18:29:29:0e:
5e:0b:3b:45:f2:21:6b:c9:ef:69:f5:c2:75:72:41:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:3E:E0:75:3B:D6:04:2B:F0:1E:1D:34:86:F1:98:27:C0:91:6D
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/C785D21A5B9C11EFB8B48C45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.129.0/24
14.192.131.0-14.192.133.255
14.192.135.0-14.192.136.255
14.192.139.0/24
14.192.142.0/23
14.192.145.0-14.192.147.255
14.192.149.0-14.192.150.255
14.192.155.0/24
14.192.159.0/24
43.247.120.0/22
103.20.133.0-103.20.135.255
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
92:fb:de:26:5f:c6:38:85:5f:14:f7:2b:5e:56:68:68:cd:70:
76:88:07:dd:5c:55:3f:54:40:0e:c1:56:17:d6:97:2d:ac:79:
59:04:7d:4b:3c:ca:b0:23:a5:43:d7:53:97:b9:42:fa:23:b8:
ec:e2:a4:e5:f5:e8:b5:ac:82:b9:86:d1:10:6b:b1:29:f5:f0:
1d:56:ef:ba:f7:a5:6e:4e:5e:f2:f2:5c:42:b5:4e:f8:83:b1:
d4:b7:12:17:b4:62:ed:1b:d2:85:ca:b0:55:25:51:c1:b2:a9:
f7:f5:56:33:10:55:b1:d1:31:b4:05:2b:ec:a8:ee:46:30:24:
33:ed:eb:9e:04:8f:97:48:bd:e2:40:2d:4a:04:8a:a9:cb:00:
7c:cf:f2:29:09:11:b2:07:04:6a:ed:bd:2a:85:40:c2:4d:e4:
69:a4:51:59:92:99:57:cb:d6:c2:49:83:5e:d2:64:64:14:69:
e2:f8:fd:ee:d4:e4:ef:9c:15:39:ad:e3:03:b3:1e:6c:0f:dd:
4d:04:c1:be:61:ca:2b:61:0f:ca:a1:69:8b:52:bd:d8:c7:3c:
a7:0c:3c:0c:e5:cf:bc:0e:2f:40:99:01:22:8f:2c:99:1c:4e:
6b:01:1c:27:04:75:ad:91:3d:55:2d:92:08:91:aa:c3:c5:cf:
88:f7:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:47 2025 by rpki-client