Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35CE1642BCFF11EAB7ECDC44C4F9AE02.roa
File: 35CE1642BCFF11EAB7ECDC44C4F9AE02.roa (raw, json)
Hash identifier: QFN4WNP7YB3Ga+TSJ8HrffeRhlrKI1jiXDN8m7AcO3M=
Subject key identifier: D1:FA:D7:4C:F8:2F:56:EB:9D:01:F8:E1:C7:6F:9A:2D:A1:58:2E:96
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 71A1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35CE1642BCFF11EAB7ECDC44C4F9AE02.roa
Signing time: Wed 10 May 2023 16:49:12 +0000
ROA not before: Wed 10 May 2023 16:49:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55353
IP address blocks: 103.15.64.0/22 maxlen: 22
103.15.64.0/24 maxlen: 24
103.15.65.0/24 maxlen: 24
103.15.66.0/24 maxlen: 24
103.15.67.0/24 maxlen: 24
111.118.240.0/20 maxlen: 20
111.118.240.0/24 maxlen: 24
111.118.241.0/24 maxlen: 24
111.118.242.0/24 maxlen: 24
111.118.243.0/24 maxlen: 24
111.118.244.0/24 maxlen: 24
111.118.245.0/24 maxlen: 24
111.118.246.0/24 maxlen: 24
111.118.247.0/24 maxlen: 24
111.118.248.0/24 maxlen: 24
111.118.249.0/24 maxlen: 24
111.118.250.0/24 maxlen: 24
111.118.251.0/24 maxlen: 24
111.118.252.0/24 maxlen: 24
111.118.253.0/24 maxlen: 24
111.118.254.0/24 maxlen: 24
111.118.255.0/24 maxlen: 24
150.129.144.0/22 maxlen: 22
150.129.144.0/24 maxlen: 24
150.129.145.0/24 maxlen: 24
150.129.146.0/24 maxlen: 24
150.129.147.0/24 maxlen: 24
183.182.84.0/22 maxlen: 22
183.182.84.0/24 maxlen: 24
183.182.85.0/24 maxlen: 24
183.182.86.0/24 maxlen: 24
183.182.87.0/24 maxlen: 24
2401:c300::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 29 Jan 2024 05:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29089 (0x71a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:49:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bcb08-f488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:f4:28:ab:e0:fa:5c:c8:53:e2:19:e2:d9:
86:74:9f:a1:c3:85:be:28:cc:4a:e9:ed:ff:5e:6c:
70:ba:4c:13:14:e9:7e:e9:b2:e6:ce:75:c0:96:d0:
87:ce:4e:02:8e:cd:ea:12:77:e3:89:6e:39:f8:fd:
95:5f:0c:8e:86:6a:2a:20:5c:b9:c7:f5:f9:7f:88:
14:bc:3e:15:cf:06:0a:58:dc:cb:95:b3:48:01:14:
0a:e6:66:3d:ad:5d:6a:8c:78:fd:1c:31:25:37:6a:
ad:d7:c7:b4:6c:65:50:08:04:22:cf:a6:90:fc:f2:
e8:b6:ba:bf:7c:9a:11:ff:c3:f5:9a:44:09:6f:60:
a1:61:2c:b9:6e:4b:d9:3c:e5:e1:f8:92:fc:c8:a0:
74:06:9d:17:cf:68:3f:ee:e5:50:0e:8f:c2:17:3c:
bd:8e:e5:2c:ba:59:91:fc:dd:74:28:93:8b:cc:b0:
41:58:35:4d:7a:14:96:3d:da:58:51:e3:4a:6c:f5:
70:63:d5:69:c8:5c:79:7c:be:2a:95:e0:86:bd:55:
80:1f:29:8a:f2:d1:67:fb:c4:b5:94:3b:87:2a:51:
2f:94:01:d4:67:fc:c0:f3:b7:5b:d2:d1:8b:97:b2:
dc:2b:a1:1d:47:94:30:53:32:03:39:1f:cb:e5:5e:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:D7:4C:F8:2F:56:EB:9D:01:F8:E1:C7:6F:9A:2D:A1:58:2E:96
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35CE1642BCFF11EAB7ECDC44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.64.0/22
111.118.240.0/20
150.129.144.0/22
183.182.84.0/22
IPv6:
2401:c300::/32
Signature Algorithm: sha256WithRSAEncryption
a4:a7:f3:06:85:cf:02:3c:6c:9d:9f:8b:d6:31:5a:24:fd:f8:
20:88:35:ff:c7:90:08:a3:c9:e2:d4:8e:86:88:83:b1:62:76:
5e:a7:19:d6:30:57:b0:ae:6d:8e:e0:f1:fd:98:cb:e4:65:25:
a2:2a:8e:98:ce:d8:d8:8a:28:7e:4f:f6:53:25:24:54:21:e6:
49:d1:40:e9:4b:14:a1:8e:0a:b5:15:de:5f:24:3c:b6:da:af:
e0:70:76:a0:ae:a6:61:02:03:0f:c6:35:dc:61:ff:8f:ba:5a:
bf:d4:18:5c:7b:27:5d:8b:12:0e:99:a8:f4:7a:20:ac:69:a4:
96:78:2c:e0:bf:89:dd:f7:59:f5:ac:4b:aa:cc:48:70:f3:45:
f9:b6:5a:d9:bf:03:55:48:1b:e8:25:1c:fb:67:a3:e5:b7:de:
82:6d:cc:45:30:bd:25:21:e1:8c:b0:9d:e9:61:68:06:37:8a:
94:d5:64:08:4a:6d:1a:9a:6c:16:e9:7f:46:7c:9f:2a:c7:4c:
83:a7:ce:e5:ba:5c:f8:77:26:c3:d9:58:0f:78:c1:38:32:28:
50:b7:91:3b:ba:2d:01:e9:6d:fb:7a:e1:2c:94:87:4b:38:0a:
2b:f3:f2:cf:26:3c:34:04:51:82:eb:dc:71:60:3c:e3:98:2f:
f6:c0:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 08:36:10 2024 by rpki-client on console-ams.rpki-client.org