Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa
File: 5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa (raw, json)
Hash identifier: CGdeLtM8YSQi0fb1YlzoV1ypZJiAVnjN91PpdVG3YHA=
Subject key identifier: E1:3B:0F:5C:F1:85:55:1F:E6:15:BA:5C:40:01:D0:9A:D1:61:94:A2
Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial: 0226
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa
Signing time: Fri 30 Aug 2024 01:00:13 +0000
ROA not before: Fri 30 Aug 2024 01:00:13 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 140952
IP address blocks: 103.209.253.0/24 maxlen: 24
103.209.254.0/24 maxlen: 24
2404:5d80:6300::/40 maxlen: 40
2404:5d80:7400::/40 maxlen: 40
2404:5d80:9000::/40 maxlen: 40
2404:5d80:9400::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 31 Aug 2024 13:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BCEE
Validity
Not Before: Aug 30 01:00:13 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66d1199d-ae00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:ff:84:b5:02:49:bc:72:40:4c:2e:a6:1e:
8c:87:2f:ad:ac:b9:b9:0e:d9:d7:15:45:7f:e6:29:
78:48:23:de:a1:91:2e:ce:71:84:1c:08:f7:36:83:
ef:19:bb:18:53:99:ed:6f:a2:6b:ef:a8:fc:05:12:
4e:a2:c1:68:3b:0a:c3:08:eb:28:42:12:99:ea:dc:
39:1f:38:77:30:ad:56:b7:25:8d:94:9d:a7:d5:49:
f9:7d:33:a0:1a:78:87:45:8d:a8:66:08:53:d9:45:
7a:8e:94:5f:4e:11:c7:fd:d9:f6:ee:62:b0:ed:05:
83:94:99:cc:dc:6f:83:9c:e2:b9:cf:0d:b0:ed:dd:
1f:67:86:03:2e:ab:c6:73:62:28:0f:37:91:da:5d:
db:bd:6f:7e:9e:07:73:4e:9e:e0:c9:b2:5a:d5:29:
a6:4c:c3:1f:aa:72:46:d0:57:18:c3:83:a5:d1:ca:
77:fc:17:7c:ac:b5:f8:ef:fa:28:26:ea:84:4d:88:
ca:bb:c6:83:5d:21:85:90:6a:14:55:0e:eb:22:eb:
2b:34:9c:46:75:fa:c7:e8:b2:d8:99:73:47:6c:97:
24:20:a0:c6:72:bc:bc:5b:ff:6e:95:0c:6d:03:c7:
47:b7:a0:0f:35:24:f8:d3:59:f3:fd:69:8d:3f:c4:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3B:0F:5C:F1:85:55:1F:E6:15:BA:5C:40:01:D0:9A:D1:61:94:A2
X509v3 Authority Key Identifier:
keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.253.0-103.209.254.255
IPv6:
2404:5d80:6300::/40
2404:5d80:7400::/40
2404:5d80:9000::/40
2404:5d80:9400::/40
Signature Algorithm: sha256WithRSAEncryption
b5:03:b3:b2:2a:ea:f8:da:ed:10:11:0e:01:61:99:af:48:57:
6f:d9:a9:ef:7f:a6:0e:cc:9a:a5:0c:64:eb:9c:87:0c:d2:d6:
f9:46:ac:2f:9e:6a:96:83:50:f7:ed:15:4f:c7:67:6a:c9:f5:
15:14:69:2f:68:ae:d6:b7:37:70:69:1c:1f:73:00:62:3d:12:
8a:9b:d9:84:12:44:5b:55:bf:b3:98:c9:ee:df:36:1f:83:fe:
e1:95:3f:cc:a6:9d:3d:b4:c6:83:13:36:f1:98:75:6b:bb:b8:
8a:02:c7:11:af:7a:cd:d4:2e:12:4e:80:f0:27:52:fd:4f:b1:
ce:fe:cc:4f:a3:f5:ca:4a:64:83:ca:32:e2:5b:a1:3a:1e:f9:
0a:d9:87:e6:36:e9:54:b8:42:ac:01:64:70:00:77:f0:62:82:
d5:d7:64:1a:ec:69:51:ac:82:8e:fa:2e:b4:ea:ad:17:84:cf:
33:ef:fb:6b:cd:ea:91:5e:fe:85:a3:a9:64:42:1b:97:44:a4:
0c:4f:3c:41:8c:18:a3:95:b6:ca:a9:f2:09:0f:29:8b:4c:3d:
fb:77:76:3d:3b:87:f7:45:c6:72:f1:bf:65:02:37:e0:35:28:
13:1d:12:96:1c:1a:93:00:0a:94:e3:c7:07:66:ba:fe:13:a3:
11:ab:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:03 2025 by rpki-client