Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/7A589CF6A39D11EDB714273AC4F9AE02.roa
File: 7A589CF6A39D11EDB714273AC4F9AE02.roa (raw, json)
Hash identifier: 6lsGBtrnvcBm0t+pZh1ND+NZ7mAtIYzvny8VS286Y0o=
Subject key identifier: 06:06:61:A0:27:70:37:1E:40:FE:7B:32:60:11:8F:E6:8F:C5:D5:69
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 025E
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/7A589CF6A39D11EDB714273AC4F9AE02.roa
Signing time: Thu 07 Dec 2023 03:14:17 +0000
ROA not before: Thu 07 Dec 2023 03:14:17 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 40065
IP address blocks: 103.103.245.0/24 maxlen: 24
103.235.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 06:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Dec 7 03:14:17 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65713889-557d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:5b:75:f1:0c:30:cf:c6:a3:0c:7a:b5:0a:
25:dd:ed:43:2d:68:d1:f2:c4:fc:b4:85:61:4c:7d:
d4:ca:ba:28:ef:1e:0e:96:9c:1f:75:02:d3:e6:78:
85:bf:8a:0f:39:5c:ee:03:35:d4:11:c1:68:0c:c8:
75:06:7a:10:ea:53:1d:e3:cc:c0:a3:43:51:e8:1e:
8a:40:7a:2c:a2:7a:69:d8:1a:1f:a5:03:e9:05:9b:
84:61:5f:67:17:1b:62:5f:fb:f8:ac:90:a1:87:32:
2f:c9:26:5c:50:57:2c:23:7e:09:9c:ab:33:77:22:
e8:30:3f:f8:d3:b0:29:8c:4c:23:2e:5b:d3:69:55:
e0:96:e2:07:0e:2c:8a:fa:10:1d:7d:d2:2d:72:d0:
1f:65:31:69:81:62:18:0f:fb:0a:52:af:17:5a:8d:
aa:1a:56:dd:dd:fa:62:00:ef:33:7b:49:54:97:42:
6a:00:8b:01:b6:7a:30:dc:bd:f6:a7:f0:48:75:84:
03:e6:94:4e:4a:bd:4d:a2:e7:e6:17:dd:7b:8b:1e:
f4:2c:bd:9e:54:73:1b:30:27:f8:04:0d:93:21:7d:
c4:0b:9f:60:25:3b:7c:a2:b7:df:9f:63:e9:94:ec:
bb:af:eb:a0:0f:6c:94:13:3e:8e:12:20:ce:7e:63:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:61:A0:27:70:37:1E:40:FE:7B:32:60:11:8F:E6:8F:C5:D5:69
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/7A589CF6A39D11EDB714273AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.245.0/24
103.235.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cb:08:72:71:79:69:38:51:4b:ad:8a:5f:e6:b6:67:9f:65:
d8:a1:99:84:7d:35:96:30:bf:7b:40:97:24:50:9d:e6:99:ed:
aa:3b:69:3f:50:3f:75:05:56:c8:18:21:76:6d:f1:49:9b:56:
3a:93:b2:5b:fa:df:e0:f8:ab:d9:9f:a0:97:c6:ed:b6:86:60:
d6:5f:28:33:01:ec:19:e5:b9:ea:16:df:fd:21:30:04:11:f8:
eb:49:4b:5a:b6:35:64:6d:e7:f0:ca:06:16:e9:9a:11:88:67:
77:68:a0:74:05:cd:60:a3:67:47:7e:31:74:3c:75:9e:fd:7e:
09:72:a4:2e:d8:92:5d:f7:96:9a:d4:83:15:28:96:c9:ca:c7:
7b:e1:7a:90:da:46:41:67:49:d7:2c:48:2a:4c:a5:ea:d3:49:
75:d0:1e:e0:b5:2d:77:8c:40:a6:1c:c0:75:29:fa:ac:d2:d3:
7c:11:87:e2:93:1e:74:fa:e3:f5:13:4e:eb:50:a3:42:af:19:
55:93:84:d5:bb:e4:0c:7c:dc:05:a6:33:9a:19:7a:b3:77:fd:
86:97:ac:7c:38:59:67:37:9b:dd:fb:c6:4e:64:e4:8a:8d:4b:
d3:66:1c:6d:66:f7:f5:82:e9:d0:8b:c0:de:db:84:ae:f0:f2:
dc:09:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:22 2025 by rpki-client