Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/5F4C307066F711EFAADDBA80C4F9AE02.roa
File: 5F4C307066F711EFAADDBA80C4F9AE02.roa (raw, json)
Hash identifier: JWRZz26YRbpzOqMm75nrjlhQNJQ8P1wo/GEVNYlbUxA=
Subject key identifier: 66:67:C3:77:7B:8F:DA:36:12:55:88:08:D9:A2:7D:37:2F:9E:7C:66
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 0304
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/5F4C307066F711EFAADDBA80C4F9AE02.roa
Signing time: Fri 30 Aug 2024 17:43:31 +0000
ROA not before: Fri 30 Aug 2024 17:43:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.113.82.0/24 maxlen: 24
103.229.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772 (0x304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: Aug 30 17:43:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d204c3-5f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:7a:35:79:7d:e1:b0:4f:f0:a3:18:74:f8:
ff:27:e2:b7:62:ea:a5:14:87:af:ed:22:fe:40:bc:
a4:e1:a0:38:5b:d7:48:59:81:12:99:bd:63:b5:90:
43:6f:a1:38:c7:77:91:dd:69:e3:27:36:73:55:3f:
2c:76:10:d3:21:ed:b1:b4:25:c8:e2:6e:0a:76:d3:
b2:89:e5:2f:90:28:e6:42:48:1f:4a:83:e3:8f:dd:
af:69:49:aa:85:27:ad:57:cc:07:c2:ea:70:3f:3d:
4c:b4:1d:d5:78:9b:e2:ae:f5:90:e3:c5:25:56:81:
ca:64:39:c6:49:fd:d9:46:41:32:26:6f:58:00:2a:
48:b3:2b:f4:69:72:79:1a:70:c2:0b:ad:36:e3:0d:
20:e5:9b:3d:b4:1c:da:f8:5e:b9:cd:3b:21:5a:43:
25:f3:e5:a2:a7:72:46:5a:93:87:b4:12:0c:9e:35:
8a:f5:0e:34:03:ca:32:12:1e:c9:6c:ca:59:0b:c9:
72:a3:14:e5:58:ca:1e:b2:72:14:18:d4:a1:81:40:
96:0d:ea:e8:1e:ea:c0:cd:b0:6b:cf:af:b1:ee:fd:
d9:1e:a4:e0:4d:af:cf:31:13:da:00:35:2a:55:0f:
17:be:a4:2f:22:44:24:0e:f6:0f:58:f5:f3:0f:49:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:67:C3:77:7B:8F:DA:36:12:55:88:08:D9:A2:7D:37:2F:9E:7C:66
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/5F4C307066F711EFAADDBA80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.82.0/24
103.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:24:95:5b:f8:ae:3e:32:7e:65:e1:be:ef:32:6d:09:bb:1b:
57:76:d0:d4:92:a1:73:d1:22:a5:31:bd:f5:f5:64:5f:0c:17:
2e:29:dd:15:a6:80:6e:92:0e:0a:a8:9a:ff:b4:f4:8d:bd:da:
bf:ae:4a:12:fe:e1:39:a9:9a:a4:3f:d6:a6:83:58:e8:d0:98:
67:3d:d5:25:0e:5b:e8:44:0e:8b:cd:ea:aa:32:c5:f9:38:6e:
eb:7e:ce:a4:43:da:3b:d2:29:f5:84:48:23:b1:f3:69:3c:7c:
28:0e:36:b8:1a:a1:11:37:78:dd:f9:d6:57:83:3c:2d:72:f7:
69:bf:69:b1:e5:2e:58:39:d9:3f:30:49:e5:e7:d2:82:a4:6e:
95:aa:c8:b6:3b:fc:0f:2d:53:65:d7:54:f6:69:5c:6c:d1:8f:
01:12:b6:f4:23:8a:8a:4d:e2:d5:18:2e:60:bb:dc:e5:28:24:
c4:bf:4b:5a:f2:65:c2:9c:85:d4:e3:df:b4:4f:2a:09:d4:52:
c6:5c:a3:8b:24:3a:aa:fd:ac:35:9a:6b:39:41:54:3b:69:f1:
89:d3:41:21:78:a9:e4:39:fa:88:bd:80:d0:40:84:93:87:80:
35:71:da:45:98:1f:44:d1:76:0d:06:b1:18:20:21:d4:07:e9:
7a:05:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:05 2025 by rpki-client