Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/D198BFBAFBBC11ED9E093480C4F9AE02.roa
File: D198BFBAFBBC11ED9E093480C4F9AE02.roa (raw, json)
Hash identifier: PujVBMPDPJuv+knUiE0nlEVfY3Kwft66F7dDkj0pUac=
Subject key identifier: 1C:E9:2D:E7:05:1A:C4:A6:2D:FC:5B:95:ED:69:3D:82:84:7F:C0:C5
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 0778
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/D198BFBAFBBC11ED9E093480C4F9AE02.roa
Signing time: Tue 02 Jan 2024 22:20:20 +0000
ROA not before: Tue 02 Jan 2024 22:20:20 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 147186
IP address blocks: 103.125.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 10:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Jan 2 22:20:20 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65948c23-5313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:a1:5d:01:b9:ce:42:4c:2b:05:5d:73:22:
1e:a3:02:82:70:db:a0:74:f7:e0:40:5d:dc:52:90:
7b:4e:e6:51:44:97:b8:bf:7e:01:93:8e:9b:fa:9a:
6e:db:ac:0d:71:fe:ba:fd:4f:4d:03:93:e2:8b:e3:
50:bf:6e:d9:7b:f2:11:b5:6c:d1:19:79:52:41:f2:
4d:d3:88:eb:17:22:fc:04:d2:f2:97:e6:cd:e8:d6:
ea:31:24:7f:98:17:76:54:31:62:b7:47:5c:dd:e7:
bc:a7:57:52:21:16:dc:52:86:62:0a:57:c5:3e:60:
8e:a4:fd:5b:60:75:c0:58:4f:40:21:9d:8d:d2:8d:
16:eb:c6:30:47:e0:f4:4d:ff:8e:37:35:c4:5e:2b:
0a:aa:29:e4:44:45:33:7c:40:7d:7a:06:ab:92:9a:
d3:b8:e3:9b:1a:27:f0:57:2e:f7:d8:8b:70:3d:65:
72:e1:8c:be:78:e5:5a:6e:62:22:2a:eb:89:a3:32:
43:c9:35:61:25:4b:66:4f:b5:70:6b:f2:f3:c3:4e:
ec:ab:fd:c6:d8:98:46:32:ac:b9:af:0e:27:3f:b7:
cd:de:83:aa:3b:59:45:d3:65:b0:19:04:dc:34:c9:
03:11:24:e4:5f:56:da:c8:4a:5e:da:0b:55:bb:73:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:2D:E7:05:1A:C4:A6:2D:FC:5B:95:ED:69:3D:82:84:7F:C0:C5
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/D198BFBAFBBC11ED9E093480C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:71:97:d6:d2:0d:37:f7:ef:91:08:d0:e7:64:bb:77:df:3f:
9b:ee:47:f2:da:1e:8a:05:a7:e3:ff:20:2b:e2:0e:42:93:6c:
de:d7:0a:11:20:4d:4d:27:1a:0f:ea:cb:96:d3:87:fa:8e:e1:
dd:5e:ff:91:46:79:6f:58:5d:2e:9e:7b:24:24:6b:ba:61:54:
c6:78:1c:42:17:ad:66:fb:e2:13:cb:62:c0:27:54:51:ee:2d:
43:0c:aa:96:10:7b:80:c5:25:ce:a9:26:2a:f3:71:11:b8:cd:
fb:2e:e2:9a:40:e7:04:85:22:4b:a1:27:65:2f:26:d8:90:5b:
2f:d3:56:7d:9d:52:82:42:3b:f5:18:0c:b0:30:f8:24:6d:8a:
0f:e6:eb:d4:b4:cc:6d:33:ff:7d:11:80:63:96:81:f3:a5:bf:
20:ba:97:86:94:c5:2c:06:db:04:eb:63:21:9b:fb:20:95:72:
7a:33:59:90:43:ef:2b:57:50:82:6f:bf:0a:d6:b4:c1:28:78:
48:72:3c:ab:b6:5f:ce:b4:df:5e:7c:cf:21:28:44:d9:a3:24:
33:a1:ed:de:17:cb:9c:fc:5c:7a:3d:07:a3:ca:ef:65:44:9b:
a6:ff:7f:36:49:2f:c3:d7:93:d1:ed:71:96:f1:7c:c4:26:97:
39:72:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:23:05 2024 by rpki-client on console-fra.rpki-client.org