Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EB970787F9311ED89265B3DC4F9AE02.roa
File: 7EB970787F9311ED89265B3DC4F9AE02.roa (raw, json)
Hash identifier: 2QM9zO9cLZ/jJs5VGE8CPfsPHicnYjRqrmV1vJPXlX0=
Subject key identifier: 47:6E:0D:FC:7C:27:8E:3E:07:7A:6F:28:42:E9:28:C0:51:5D:38:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7D06
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EB970787F9311ED89265B3DC4F9AE02.roa
Signing time: Thu 02 Nov 2023 08:45:05 +0000
ROA not before: Thu 02 Nov 2023 08:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17439
IP address blocks: 45.251.76.0/22 maxlen: 24
103.19.52.0/22 maxlen: 24
103.35.164.0/23 maxlen: 23
103.48.50.0/23 maxlen: 23
103.48.50.0/24 maxlen: 24
103.48.51.0/24 maxlen: 24
103.55.244.0/22 maxlen: 24
103.96.95.0/24 maxlen: 24
103.117.117.0/24 maxlen: 24
103.129.97.0/24 maxlen: 24
103.143.38.0/24 maxlen: 24
103.165.78.0/23 maxlen: 24
103.170.114.0/24 maxlen: 24
103.171.44.0/23 maxlen: 24
103.174.54.0/23 maxlen: 23
103.175.22.0/24 maxlen: 24
103.175.23.0/24 maxlen: 24
103.175.163.0/24 maxlen: 24
103.181.20.0/23 maxlen: 24
103.214.114.0/24 maxlen: 24
103.214.115.0/24 maxlen: 24
103.214.122.0/23 maxlen: 24
103.218.124.0/22 maxlen: 22
103.218.124.0/24 maxlen: 24
103.218.125.0/24 maxlen: 24
103.218.126.0/24 maxlen: 24
103.218.127.0/24 maxlen: 24
103.225.99.0/24 maxlen: 24
103.228.103.0/24 maxlen: 24
103.235.104.0/22 maxlen: 22
103.239.136.0/22 maxlen: 24
103.247.96.0/23 maxlen: 24
103.247.98.0/24 maxlen: 24
202.66.172.0/22 maxlen: 24
203.112.136.0/21 maxlen: 24
203.112.144.0/21 maxlen: 24
2001:df0:3a00::/48 maxlen: 48
2001:df2:f980::/48 maxlen: 48
2407:e9c0::/48 maxlen: 48
2407:e9c0:1::/48 maxlen: 48
2407:e9c0:2::/48 maxlen: 48
2407:e9c0:5::/48 maxlen: 48
2407:e9c0:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Apr 2024 07:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32006 (0x7d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 2 08:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65436191-7e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:bf:1d:2e:8e:52:47:9e:61:d8:92:59:dc:
b6:56:77:4c:a0:8c:ce:ce:e0:db:5d:4f:fa:37:98:
ac:84:a7:5f:15:ad:1c:9e:e5:43:ee:5d:a9:d0:5d:
df:87:16:05:11:e9:f6:64:65:d6:cc:bb:f0:bb:21:
43:6d:17:5f:02:d6:5c:ba:3c:74:c0:2a:ea:7b:00:
da:01:7c:a8:ea:cc:b7:2b:d0:4d:3f:8e:11:12:59:
c6:9d:c6:2a:93:14:2b:ed:b6:e6:2b:16:cf:73:3a:
13:21:82:9c:82:98:eb:6e:d3:b0:7d:a6:15:a3:d5:
8c:e2:a5:00:96:e5:39:54:3b:0d:df:b3:e6:61:23:
db:05:2d:42:29:fb:9a:d3:51:a7:cc:7a:65:5e:93:
f3:50:c2:27:2e:a4:b8:4a:c6:ec:23:69:c0:33:3b:
90:32:72:4e:2f:4b:84:92:25:69:f0:cd:d1:84:88:
71:46:ca:1c:e8:38:7e:7c:4f:ae:2d:af:40:c5:7f:
24:06:47:db:3d:cf:70:7a:74:48:c2:8d:39:6c:53:
34:2f:b8:ef:ff:49:5f:ab:bb:da:17:62:fc:9a:42:
94:5c:eb:b4:37:8e:32:3a:ea:28:95:72:a5:c6:c1:
29:ed:f1:5c:c5:f9:8d:01:22:81:21:e9:8a:db:2d:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6E:0D:FC:7C:27:8E:3E:07:7A:6F:28:42:E9:28:C0:51:5D:38:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EB970787F9311ED89265B3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.76.0/22
103.19.52.0/22
103.35.164.0/23
103.48.50.0/23
103.55.244.0/22
103.96.95.0/24
103.117.117.0/24
103.129.97.0/24
103.143.38.0/24
103.165.78.0/23
103.170.114.0/24
103.171.44.0/23
103.174.54.0/23
103.175.22.0/23
103.175.163.0/24
103.181.20.0/23
103.214.114.0/23
103.214.122.0/23
103.218.124.0/22
103.225.99.0/24
103.228.103.0/24
103.235.104.0/22
103.239.136.0/22
103.247.96.0-103.247.98.255
202.66.172.0/22
203.112.136.0-203.112.151.255
IPv6:
2001:df0:3a00::/48
2001:df2:f980::/48
2407:e9c0::-2407:e9c0:2:ffff:ffff:ffff:ffff:ffff
2407:e9c0:5::/48
2407:e9c0:7::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ce:6e:9f:dd:31:a5:4b:ac:eb:48:6d:f5:00:7f:13:9a:dd:
c2:88:43:7b:cf:9a:ed:79:0c:09:71:41:50:ed:f0:05:ff:51:
a8:a5:6f:79:93:7a:39:8a:7c:1f:f6:45:8e:95:f9:86:65:58:
d2:d1:be:9c:80:37:6e:fb:f0:f1:84:d9:3a:ba:b8:4e:af:60:
95:87:c5:95:e7:4c:a8:69:74:b7:53:82:13:ed:19:0e:76:1f:
3b:8b:06:45:27:2b:37:4f:81:60:f2:57:9d:4d:00:4f:f5:ac:
ab:96:55:56:ce:10:df:63:71:fb:86:c8:d5:70:fe:f6:6c:d2:
61:ad:ca:7d:17:61:73:e6:59:9e:50:89:1c:9e:a6:ea:91:31:
67:38:c8:c6:c3:78:fb:1e:57:c5:6e:e6:34:29:22:f2:89:82:
87:67:36:1e:98:8f:67:11:20:6c:a1:df:9c:3e:42:2f:8e:e0:
b4:0f:b2:03:c1:e8:d0:9d:de:ef:b8:c1:7f:bb:d0:91:95:76:
f4:f7:d8:b8:10:ef:be:68:bc:f0:b7:df:1d:63:69:87:75:48:
49:4d:8a:ae:0d:d7:91:5f:9c:68:09:92:cd:d1:47:5a:b0:c7:
69:8a:a9:8d:87:9d:96:d7:b4:52:99:fa:f9:02:bf:e7:fc:fc:
df:90:1f:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 12:30:16 2024 by rpki-client on console-ams.rpki-client.org