Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/162003A03F7311EF827B892AC4F9AE02.roa
File: 162003A03F7311EF827B892AC4F9AE02.roa (raw, json)
Hash identifier: T4w7yF8r5G3SsO72iMdwRcEnqi/BHishenKBnvFe93A=
Subject key identifier: 8F:A7:7E:20:A9:90:30:02:83:6A:DE:20:02:B4:EA:DF:D2:7F:DF:BD
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 01D6
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/162003A03F7311EF827B892AC4F9AE02.roa
Signing time: Thu 11 Jul 2024 10:51:12 +0000
ROA not before: Thu 11 Jul 2024 10:51:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149766
IP address blocks: 103.185.146.0/23 maxlen: 23
103.185.146.0/24 maxlen: 24
103.185.147.0/24 maxlen: 24
2001:df0:9840::/48 maxlen: 48
2401:93e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 21 Jul 2024 10:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3
Validity
Not Before: Jul 11 10:51:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668fb920-d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:2d:64:ed:7c:9d:a1:45:8c:02:68:39:99:
14:d2:db:0a:1e:22:0d:7b:a5:5c:ed:1d:e0:c1:e7:
31:41:6e:d8:c2:9a:f9:c6:1d:39:93:0b:5f:8a:5a:
76:3b:fb:7f:56:24:69:0c:d0:53:46:3c:7d:53:ca:
fa:66:36:a0:b9:6a:fc:22:27:a8:e6:56:44:ca:ea:
c9:72:78:44:ca:8a:56:98:7c:50:50:3b:cc:e8:6d:
f7:43:bd:e1:73:ee:4f:86:93:c6:96:5f:13:c4:9a:
a4:ea:54:b1:84:88:f9:36:7d:c4:28:f3:fb:b5:97:
26:e6:f5:3e:94:d3:0c:2d:93:34:ab:40:8e:bc:f8:
76:d5:ac:0e:d7:fd:39:40:93:fd:36:c3:b4:5f:60:
55:bf:fe:5c:20:de:2a:72:24:3b:0d:95:70:7b:db:
6f:e9:10:55:08:06:67:22:f5:11:4d:9f:40:ac:32:
bb:a9:54:26:a5:2d:e2:6f:5b:a2:6f:ef:84:15:bf:
22:76:0c:ab:5e:03:67:9a:21:0a:b1:f4:60:e5:6d:
a6:cb:ab:45:0d:02:22:02:df:42:77:86:6b:83:c5:
2d:e1:84:3e:22:60:1f:bf:c2:66:fc:c8:e6:1e:bf:
9e:10:ed:52:8b:66:29:d5:e4:30:d1:41:83:62:00:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A7:7E:20:A9:90:30:02:83:6A:DE:20:02:B4:EA:DF:D2:7F:DF:BD
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/162003A03F7311EF827B892AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.146.0/23
IPv6:
2001:df0:9840::/48
2401:93e0::/32
Signature Algorithm: sha256WithRSAEncryption
03:bd:f0:9b:e3:ea:db:81:b0:36:d8:7f:7a:76:56:07:a9:b0:
49:8c:a5:a1:73:42:ca:4e:8a:09:09:6f:6b:8c:80:a6:b9:86:
54:96:87:93:ed:ee:46:24:06:ca:f8:5e:b0:4e:53:c1:64:8a:
33:e7:8e:44:cf:84:d2:97:a5:9a:26:c9:64:4c:96:b4:a5:7d:
34:0e:fb:61:58:57:82:70:6f:ec:cb:8e:aa:dd:e4:ed:e3:84:
fe:b9:c4:8a:08:6d:35:89:f8:19:bd:d3:24:fb:08:22:bc:de:
32:db:f0:fe:d7:82:51:75:25:af:7e:84:1a:a9:df:50:41:ad:
80:18:b9:91:4a:c1:fa:6c:ea:2f:1d:76:9f:38:70:7c:67:aa:
16:c2:35:85:e4:29:56:23:b9:c0:8a:04:b4:56:63:c7:e8:51:
91:f2:33:f3:50:79:2c:a6:90:2b:c6:7c:c5:4d:9a:bf:4c:ce:
35:3e:db:5a:db:6d:69:3b:10:9f:3e:aa:d7:16:6c:97:f8:7d:
ba:f6:c5:b8:b7:3d:83:b9:b0:dd:be:45:ac:83:2f:e6:74:0b:
28:d4:19:7e:49:66:e9:ba:81:b5:6d:a2:f8:19:0c:3b:79:4c:
f3:42:6f:62:3a:58:01:95:76:fd:32:16:26:8d:9f:68:6e:cf:
a6:53:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:31 2025 by rpki-client