Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F331EA36FB0111ED8BF3D310C4F9AE02.roa
File: F331EA36FB0111ED8BF3D310C4F9AE02.roa (raw, json)
Hash identifier: mpWB5+iiE4zAXoJePRzvuowalMmhg++Qhd/2FuXzl6Q=
Subject key identifier: 44:7E:C6:7B:EC:F6:5C:1D:11:D0:C3:FA:04:80:76:58:F8:B9:E7:E4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 72C0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F331EA36FB0111ED8BF3D310C4F9AE02.roa
Signing time: Thu 25 May 2023 13:42:11 +0000
ROA not before: Thu 25 May 2023 13:42:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141514
IP address blocks: 103.160.126.0/23 maxlen: 24
103.170.214.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.175.134.0/23 maxlen: 24
103.175.190.0/23 maxlen: 24
103.177.82.0/23 maxlen: 24
103.177.112.0/23 maxlen: 24
103.177.204.0/23 maxlen: 24
103.178.122.0/23 maxlen: 24
103.178.126.0/23 maxlen: 24
103.181.112.0/24 maxlen: 24
103.181.113.0/24 maxlen: 24
103.183.204.0/23 maxlen: 24
103.183.228.0/23 maxlen: 24
103.184.104.0/23 maxlen: 24
103.184.154.0/23 maxlen: 24
103.185.234.0/23 maxlen: 24
103.186.54.0/23 maxlen: 24
103.187.228.0/23 maxlen: 24
2400:7f60::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 01 Mar 2024 05:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29376 (0x72c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 25 13:42:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646f65b3-32ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:9b:cd:eb:b4:6d:ac:df:ae:fb:00:20:cc:
4e:80:f9:84:52:d4:2d:2a:9f:6b:c3:61:77:8d:68:
3a:0a:0b:9b:59:82:54:a7:5f:b8:95:d3:06:75:19:
dc:b0:0b:cb:02:37:85:e0:f7:06:27:6b:a5:03:38:
0f:0c:a3:09:0b:f9:1b:eb:f8:13:86:87:01:10:29:
a9:01:9c:75:2e:41:17:20:a2:2b:c0:a9:6a:3a:0b:
a2:4c:1a:1e:5d:c6:3d:11:60:3c:48:22:38:c3:1b:
39:5f:75:33:f4:88:1c:fa:c3:92:c7:f2:73:1c:72:
ea:77:10:72:99:27:1a:88:1b:30:cc:98:b9:e9:52:
45:83:7a:e7:bf:ad:a6:d0:a2:1f:5e:a9:28:f8:e4:
77:06:61:2e:53:7f:d3:e8:45:d7:7b:c9:80:53:52:
2e:d9:87:ee:bc:05:b2:37:01:5c:d9:bd:61:59:f2:
ff:8f:23:cb:e0:d2:70:8a:74:fd:48:68:84:0e:d7:
18:1a:40:df:63:5d:77:ee:cd:cf:a7:51:af:2f:6d:
9f:db:dc:d5:15:a1:77:bc:0e:1e:48:3b:bc:97:4e:
b8:0e:32:09:de:f5:01:65:79:89:a0:d6:2b:57:a2:
54:6a:35:44:a1:6a:92:e8:9a:61:09:ee:7e:11:23:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:C6:7B:EC:F6:5C:1D:11:D0:C3:FA:04:80:76:58:F8:B9:E7:E4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F331EA36FB0111ED8BF3D310C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.126.0/23
103.170.214.0/23
103.173.240.0/23
103.175.134.0/23
103.175.190.0/23
103.177.82.0/23
103.177.112.0/23
103.177.204.0/23
103.178.122.0/23
103.178.126.0/23
103.181.112.0/23
103.183.204.0/23
103.183.228.0/23
103.184.104.0/23
103.184.154.0/23
103.185.234.0/23
103.186.54.0/23
103.187.228.0/23
IPv6:
2400:7f60::/32
Signature Algorithm: sha256WithRSAEncryption
4a:45:45:a9:eb:aa:3f:9c:b4:17:0f:6b:74:62:23:f1:dc:03:
c3:a7:d8:ef:be:f6:ef:67:9e:5b:2a:26:14:62:f7:c3:64:a4:
62:7d:d5:47:47:fd:55:49:c8:18:7a:d6:23:21:79:2c:bd:e9:
13:38:6a:7c:f3:61:a2:11:53:f8:2e:21:02:e3:f0:24:00:1c:
40:6d:3b:34:3f:94:01:7b:a9:35:60:ac:d0:14:92:c8:90:26:
12:50:36:bc:aa:97:7e:aa:8c:83:7c:fd:dd:bf:20:9c:61:ef:
c6:98:1d:66:2b:0c:bd:50:85:64:76:c6:6f:d5:2d:5f:d7:86:
27:72:f8:22:d7:01:a1:c1:89:3c:fd:9d:63:60:d8:e0:9f:83:
a6:75:e0:32:fb:9b:7a:e8:a9:01:bd:2a:ec:79:d1:35:8e:83:
09:b1:68:75:58:90:b0:8e:e5:5f:5e:01:d6:ce:cb:e6:07:0e:
b9:db:88:a8:22:d6:80:97:a3:e1:40:e1:95:af:ac:62:5b:a8:
f7:a4:a5:c3:5c:ef:d2:ba:dd:89:a5:88:ec:e2:be:17:b5:69:
ca:35:e3:c9:75:5d:8b:02:e5:40:f4:83:70:45:fb:7c:6e:5b:
6d:41:51:e2:ad:ff:7a:fc:a4:d3:6b:27:f5:c7:5e:c2:fa:ab:
ea:2f:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 06:10:13 2024 by rpki-client on console-ams.rpki-client.org