Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/8B98AF1ABE8F11EF93227D61C4F9AE02.roa
File: 8B98AF1ABE8F11EF93227D61C4F9AE02.roa (raw, json)
Hash identifier: 4aycl2cwmvqdZOC8Xbyw4P/ssTpekqm52F+SF0i1FSM=
Subject key identifier: 70:2E:52:17:0F:67:A5:FA:F3:74:06:24:AF:63:03:FC:B0:55:4F:9B
Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Certificate serial: 14
Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/8B98AF1ABE8F11EF93227D61C4F9AE02.roa
Signing time: Fri 20 Dec 2024 05:02:37 +0000
ROA not before: Fri 20 Dec 2024 05:02:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137562
IP address blocks: 103.110.142.0/23 maxlen: 23
203.19.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 22:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Validity
Not Before: Dec 20 05:02:37 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6764fa6d-cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:a0:cc:7e:83:67:03:cf:55:71:f8:c5:a4:
8b:7f:11:1a:3c:cc:b7:37:0f:b9:c9:91:db:f5:b8:
e6:f9:10:cf:ea:11:0a:65:e8:2e:31:c6:7f:ae:de:
1b:a3:27:a9:20:4d:84:bf:60:93:bb:e1:70:d1:6f:
f6:b6:be:ea:08:e0:d8:6a:ff:2d:a7:94:47:e0:7e:
5e:ab:1f:99:93:8e:d2:3b:8b:a7:91:19:86:bf:57:
ea:8d:8f:8f:ce:62:5f:ae:23:0c:e8:8a:88:02:ea:
02:6c:10:09:9d:a6:2e:91:78:42:17:bd:b5:c5:8f:
90:90:5b:da:3d:84:41:7a:de:d7:14:3d:e1:75:f6:
6d:87:99:61:9e:3a:bf:dd:ab:ed:12:c7:f3:43:fc:
0c:af:b3:62:8d:19:36:21:ab:93:f1:a4:d1:ab:06:
28:8d:32:48:70:41:81:4b:41:5d:35:ea:87:27:04:
78:81:30:d9:d0:09:f4:f0:c2:76:87:f0:5d:d3:85:
eb:2e:4a:bd:8e:51:6d:ba:2c:bb:a4:68:96:71:0f:
ad:45:3b:1f:b3:4c:82:b5:9b:2d:4c:de:db:02:cb:
c3:bf:91:44:d5:64:a6:98:3f:1e:9d:08:03:0d:4f:
a5:45:02:7e:34:a2:96:56:99:cf:a7:5e:6e:2a:f6:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:52:17:0F:67:A5:FA:F3:74:06:24:AF:63:03:FC:B0:55:4F:9B
X509v3 Authority Key Identifier:
keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/8B98AF1ABE8F11EF93227D61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.142.0/23
203.19.2.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5e:ed:d6:5a:e2:09:06:f0:ce:61:c4:98:18:66:62:68:71:
28:50:61:95:b5:ed:c9:6a:3c:38:6e:6d:f8:53:19:5a:11:fb:
d0:9c:e5:12:2c:d6:38:0c:c3:a6:de:e4:ed:0c:d2:38:df:32:
20:55:f7:61:9c:40:c4:2f:c9:04:66:78:d3:aa:04:22:4b:20:
0f:9b:86:fc:62:de:54:35:98:b9:cf:0f:5a:fe:27:0a:39:0b:
34:38:18:44:f8:b9:a4:9e:75:a8:b5:c3:55:5d:fa:c5:f8:27:
7a:e1:e0:08:e3:1f:da:05:93:72:c8:41:a5:d4:cb:96:a7:5f:
28:31:8e:6c:fa:fa:74:88:99:4e:f0:17:2f:a7:94:0c:f0:59:
6d:c6:d7:9a:55:67:da:d4:ca:21:c9:f2:aa:e7:89:a4:96:00:
ca:81:03:a0:66:5c:38:1d:e3:1b:e4:e9:20:94:7e:a2:ad:a1:
90:5f:81:b7:94:17:50:d6:cb:48:62:20:4b:38:87:a6:df:0e:
7b:68:fb:38:86:c4:10:02:d0:a3:e2:00:bd:73:1f:fb:8b:91:
b9:bc:83:1c:4d:84:cb:a7:93:6a:85:bd:86:21:98:7b:c4:ee:
ff:a2:05:a1:79:a8:1f:91:c6:19:e0:e4:27:34:28:5c:e3:97:
86:fd:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 21 02:57:43 2024 by rpki-client on console-ams.rpki-client.org