Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/FEF011A47C1A11EF97E94645C4F9AE02.roa
File: FEF011A47C1A11EF97E94645C4F9AE02.roa (raw, json)
Hash identifier: H4pBYiIh6lXZHPqIgSBoLXvPCx9s5nIvzJ/1AyX9hXw=
Subject key identifier: 2D:41:3E:A5:A7:EC:47:0B:C9:BB:E0:C6:22:90:98:94:1E:30:46:CC
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0AE1
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/FEF011A47C1A11EF97E94645C4F9AE02.roa
Signing time: Sun 29 Sep 2024 08:02:12 +0000
ROA not before: Sun 29 Sep 2024 08:02:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 02 Oct 2024 15:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2785 (0xae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Sep 29 08:02:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66f90984-352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:b4:9e:bc:c8:11:9e:65:b8:4a:92:28:d4:
86:25:c2:e8:28:a1:08:9e:b8:13:5c:96:5b:69:ee:
88:cd:81:c5:2f:28:bc:f9:13:30:e7:af:c4:a6:31:
01:a5:77:31:5b:09:46:10:30:c3:16:50:9d:71:82:
11:09:96:f3:f4:8e:9d:a4:a7:83:b4:50:f7:a2:67:
31:3c:2b:24:9a:3e:a5:e0:38:f5:07:8d:bf:5c:da:
af:c7:0a:08:b9:51:74:30:a3:10:98:e9:05:ca:c6:
44:cb:72:22:f9:f3:46:0f:c3:fb:97:b9:54:00:67:
e6:11:16:76:af:e7:99:69:cd:6f:1d:07:15:c7:51:
1a:3b:05:eb:32:6a:7b:e2:86:e4:9f:9d:7e:c4:b2:
f0:8b:07:a9:2c:30:08:56:c4:91:3a:58:27:ed:8f:
9f:62:f3:a3:86:47:60:80:2d:48:30:54:75:55:1b:
51:b6:8a:97:a4:0e:66:b0:d2:93:0c:20:44:a0:9f:
98:3f:69:9e:71:0e:97:5d:fe:b7:29:55:67:b1:d8:
c2:d8:44:6e:71:3b:93:9e:1d:42:dc:d4:61:d3:9e:
c8:5b:ba:c7:66:0c:25:84:68:65:32:f8:f6:29:dc:
66:53:dc:8b:f3:9a:c3:a6:2c:c4:c1:fb:6a:48:6a:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:41:3E:A5:A7:EC:47:0B:C9:BB:E0:C6:22:90:98:94:1E:30:46:CC
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/FEF011A47C1A11EF97E94645C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/23
14.192.131.0/24
14.192.135.0-14.192.136.255
14.192.143.0/24
14.192.147.0/24
14.192.149.0-14.192.150.255
14.192.155.0/24
14.192.158.0/23
43.247.120.0/22
103.20.133.0-103.20.135.255
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
59:0b:1d:9c:8b:41:a6:da:81:8b:41:c1:c7:d6:b5:43:39:79:
b5:a2:6e:e9:0d:b4:83:7e:8a:b7:2f:49:3c:80:76:6c:53:2a:
39:b4:84:66:c3:1a:09:f4:93:46:82:c3:46:79:74:64:96:bd:
eb:fe:2b:7f:c3:84:b7:6a:c8:eb:a1:83:e9:a3:86:0f:59:45:
45:4e:9f:5f:2f:6e:55:33:2e:a0:bc:4b:c8:c3:4a:dd:bf:60:
fa:38:df:61:ad:d1:40:3b:62:d3:c9:1e:53:d2:27:eb:0d:a6:
1c:a1:69:0b:f5:68:09:e0:dc:97:18:8c:bf:b0:a4:45:d2:4b:
a0:3b:ef:88:33:e3:0c:11:de:ad:d8:0a:cb:49:31:27:45:15:
96:72:76:82:d7:c0:c0:74:c5:70:b7:6f:0d:46:ce:90:6f:3f:
e6:8a:05:88:26:2f:18:b4:48:1b:0b:d8:87:b6:43:61:a3:4c:
1c:b3:c7:8b:cf:52:3a:40:59:98:67:e5:9b:4b:a7:45:5b:cb:
e6:3d:37:bf:ed:83:d4:bd:0d:c9:7f:13:6b:44:1a:1a:f6:3e:
9e:f8:ad:0a:f7:79:90:24:20:71:26:ab:ee:9d:9f:4a:5c:bd:
97:36:88:f6:95:8c:d3:10:32:3a:ed:35:74:97:55:d8:91:e9:
13:f4:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:59 2025 by rpki-client