Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/70B6543C54C611EF83B88332C4F9AE02.roa
File: 70B6543C54C611EF83B88332C4F9AE02.roa (raw, json)
Hash identifier: UQKIKp+u10POlRCPMFqFqYem8r7j/GWBxm9FbF/jMv0=
Subject key identifier: A5:72:25:84:7B:5D:B7:D5:C0:E4:0E:1C:A1:5F:92:77:79:57:2D:2F
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 359B
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/70B6543C54C611EF83B88332C4F9AE02.roa
Signing time: Wed 18 Dec 2024 14:40:39 +0000
ROA not before: Wed 18 Dec 2024 14:40:39 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 208485
IP address blocks: 116.90.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 06:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13723 (0x359b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E
Validity
Not Before: Dec 18 14:40:39 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6762dee7-8f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:dd:ef:21:10:38:ff:b5:1d:30:50:7b:b8:8b:
4a:b7:4f:7e:12:a4:5d:c3:c6:fb:1b:46:53:b1:f1:
d9:a9:5d:f5:47:4a:68:ec:da:8d:c1:dd:68:88:22:
77:aa:da:34:18:c5:e7:3a:8c:e7:ba:c5:86:56:09:
de:c6:87:71:82:4c:c7:82:78:e9:01:16:6d:ba:24:
36:bb:ac:fe:97:6f:a8:3b:31:a4:c2:c6:01:82:dd:
4a:bb:c7:1d:f6:28:e3:9d:02:72:a6:13:cb:4f:4b:
cb:8e:c7:f8:0e:c3:e4:10:b3:e6:0d:c9:6f:38:23:
3c:75:4a:63:40:6a:3e:33:e3:58:8f:ad:c3:1c:8d:
1e:2f:22:9f:a5:53:ae:8b:5f:ed:b1:f4:e5:2d:a9:
ea:18:c4:ab:f6:d8:5d:69:2f:46:7a:f5:fe:03:08:
cc:61:30:1f:dd:f0:f8:c2:c2:bb:f9:cb:68:dd:c7:
5b:2e:e1:da:4a:2d:08:7d:b4:e8:3b:a0:8c:4d:c1:
bf:4c:c7:95:f9:97:55:04:07:6a:45:61:a7:71:32:
97:d4:cd:21:a3:74:08:5a:2f:05:67:ee:61:6d:2e:
52:55:65:be:6a:bf:05:58:36:24:54:f4:56:87:9e:
7b:2d:99:de:3a:ed:54:75:03:a2:27:9e:d3:1e:6e:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:25:84:7B:5D:B7:D5:C0:E4:0E:1C:A1:5F:92:77:79:57:2D:2F
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/70B6543C54C611EF83B88332C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.105.0/24
Signature Algorithm: sha256WithRSAEncryption
72:24:a0:d9:41:52:9f:22:df:ee:32:29:75:aa:b3:57:59:c7:
87:4f:68:fc:d2:fb:d7:41:e7:ec:0a:12:01:93:84:58:8c:c4:
86:01:79:b4:77:f2:da:df:b5:16:7d:98:b1:74:65:9c:5d:18:
38:10:c0:5e:c1:cd:63:ea:ff:1f:89:a4:13:6f:59:4c:1b:55:
dd:20:f3:d6:49:86:3a:68:19:6b:1b:88:be:0b:84:21:fc:96:
37:4b:68:b9:ef:5a:44:5f:4e:6c:bf:47:ab:e4:f9:c2:d7:bc:
35:47:89:c2:ae:ab:ec:39:f9:2a:4a:af:dd:35:d0:db:d1:25:
7d:a6:42:05:5f:d9:1f:41:8d:05:e2:97:6a:a4:57:8a:25:11:
bf:89:6b:20:26:94:18:8e:b8:d5:8e:be:b1:15:54:da:f3:52:
55:8c:ca:b2:a4:27:14:ab:49:8d:9d:52:94:d3:16:e1:ad:2a:
54:47:85:25:ec:9c:e2:24:d3:93:88:74:c2:62:f0:c0:b8:0c:
76:4f:3c:30:b7:26:87:c5:87:59:a0:9b:03:e2:b4:7f:1c:92:
6b:01:de:e0:db:08:9f:22:9e:54:2f:38:c5:90:38:cc:8d:e5:
b5:9e:a7:ec:cc:b1:d5:6f:56:8f:2c:37:28:78:06:6e:20:56:
fb:8e:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:32 2025 by rpki-client