Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FC90B18A6DF11EDBE86EB6EC4F9AE02.roa
File: 2FC90B18A6DF11EDBE86EB6EC4F9AE02.roa (raw, json)
Hash identifier: esBCeuxl2Sm1gs8CjNinps7G5LwsBsqUnoyXo5kMwhc=
Subject key identifier: B2:2C:66:97:EA:56:E6:2F:F8:86:97:B0:18:DC:62:C1:DB:D6:EB:8C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7146
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FC90B18A6DF11EDBE86EB6EC4F9AE02.roa
Signing time: Wed 10 May 2023 16:47:27 +0000
ROA not before: Wed 10 May 2023 16:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 103.53.55.0/24 maxlen: 24
103.54.236.0/24 maxlen: 24
103.71.98.0/24 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.175.106.0/23 maxlen: 23
103.181.194.0/24 maxlen: 24
103.233.120.0/24 maxlen: 24
203.78.131.0/24 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Feb 2024 09:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28998 (0x7146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bca9f-4f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:63:d6:34:62:ae:4b:14:7e:b0:90:c8:3f:
3b:83:6f:67:8b:e4:4c:0c:67:30:34:9d:40:d8:53:
36:fb:40:de:0b:5a:4b:bc:7a:fe:33:da:75:7a:7e:
01:2d:eb:a8:07:dd:a0:48:1f:9c:2c:c1:e9:18:8f:
39:98:76:99:53:f3:cc:21:3f:88:df:c8:b5:d8:ff:
eb:89:ab:a9:2e:65:2a:a1:4a:4e:87:ab:9c:c8:2e:
ea:e3:57:6f:7e:f8:16:2a:64:27:c9:14:cb:9f:d4:
fc:b5:2a:56:c4:e8:80:51:c7:e3:a4:99:ca:d1:45:
53:22:c7:dc:47:58:f9:54:93:19:35:d1:91:a8:4a:
43:fa:af:52:89:7a:90:58:53:39:ff:c4:2e:07:1b:
fe:53:7a:3c:3b:2a:2f:59:6c:2b:3c:b8:bd:b3:78:
a8:27:94:7f:f8:3c:fa:0d:87:79:3a:70:db:73:d4:
1b:d8:bb:6b:a7:54:d4:0d:59:c8:95:23:d8:c2:5d:
cc:d0:f2:5a:a7:c3:19:3e:bd:7c:64:71:b8:14:b4:
b5:09:8b:5b:fb:43:0e:60:3f:bd:3b:35:85:9d:b1:
d7:4d:70:e7:15:a4:69:16:c4:bb:b2:8b:d4:e2:a4:
ae:65:87:19:c5:37:6b:0a:6e:df:33:6f:0b:e4:43:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:66:97:EA:56:E6:2F:F8:86:97:B0:18:DC:62:C1:DB:D6:EB:8C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FC90B18A6DF11EDBE86EB6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.53.55.0/24
103.54.236.0/24
103.71.98.0/24
103.166.180.0/24
103.167.152.0/23
103.175.106.0/23
103.181.194.0/24
103.233.120.0/24
203.78.131.0/24
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
96:3b:38:56:c1:44:ce:d4:5b:d3:16:2b:d6:d6:e0:85:99:42:
6a:d8:74:60:21:dc:72:db:13:fd:24:43:78:00:ce:59:25:f0:
92:ea:96:72:4b:14:d4:c5:08:2d:ea:06:52:88:cc:d9:bb:96:
42:0a:b9:52:1e:65:72:d1:8f:fe:e8:06:bf:ac:59:b4:f5:20:
2f:1e:3a:a7:73:70:60:81:a9:d6:ca:f9:05:a2:f6:03:e5:d4:
d5:71:2c:9f:eb:92:fd:f3:08:a5:4c:7d:fd:77:2a:f5:0e:58:
ee:68:e8:c9:6e:39:5d:d0:bc:24:12:fd:92:41:57:43:05:66:
23:f3:8f:4b:b4:74:01:f5:65:6f:44:6c:c1:c7:cc:8b:93:5c:
40:d4:4b:ec:1a:29:9a:67:e2:9a:4e:67:1d:6f:a5:7c:89:38:
9f:60:da:6e:32:40:90:65:c8:99:71:ce:d4:e9:25:c7:d3:1c:
97:55:b3:62:c3:3d:1e:63:1a:06:dc:12:eb:be:9c:79:b2:5b:
f9:0c:f7:4b:51:0c:11:e8:0f:66:77:4f:90:a3:8e:ce:ca:07:
1e:f5:7f:27:29:6d:c5:06:02:94:c5:7d:50:ed:f3:fe:0a:b5:
a2:e9:4e:db:0e:17:b0:f0:1a:ae:f9:ef:e2:60:2f:85:a4:83:
00:78:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 12:20:04 2024 by rpki-client on console-ams.rpki-client.org