Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/0A35FAF2AA1011EEB2FB0578C4F9AE02.roa
File: 0A35FAF2AA1011EEB2FB0578C4F9AE02.roa (raw, json)
Hash identifier: R9CLOwu2hts2KRJ0Ca5ypcnm92oeX9LrpzEebfXvXCc=
Subject key identifier: 88:6A:2E:C1:D2:C8:DE:26:C2:90:B2:95:1E:5C:A1:C5:3C:1E:26:38
Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial: 128F
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/0A35FAF2AA1011EEB2FB0578C4F9AE02.roa
Signing time: Sat 20 Jan 2024 17:44:39 +0000
ROA not before: Sat 20 Jan 2024 17:44:39 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 10204
IP address blocks: 103.229.32.0/24 maxlen: 24
103.229.33.0/24 maxlen: 24
103.229.34.0/24 maxlen: 24
103.229.35.0/24 maxlen: 24
203.115.192.0/18 maxlen: 18
203.115.192.0/19 maxlen: 19
203.115.192.0/21 maxlen: 21
203.115.192.0/24 maxlen: 24
203.115.199.0/24 maxlen: 24
203.115.201.0/24 maxlen: 24
203.115.205.0/24 maxlen: 24
203.115.208.0/21 maxlen: 21
203.115.208.0/24 maxlen: 24
203.115.211.0/24 maxlen: 24
203.115.212.0/22 maxlen: 22
203.115.217.0/24 maxlen: 24
203.115.222.0/24 maxlen: 24
203.115.224.0/19 maxlen: 19
203.115.224.0/20 maxlen: 23
203.115.224.0/21 maxlen: 24
203.115.232.0/22 maxlen: 24
203.115.236.0/23 maxlen: 24
203.115.238.0/24 maxlen: 24
203.115.246.0/24 maxlen: 24
203.115.249.0/24 maxlen: 24
203.115.251.0/24 maxlen: 24
203.115.252.0/22 maxlen: 22
203.115.252.0/24 maxlen: 24
2001:c18::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 20:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4751 (0x128f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8
Validity
Not Before: Jan 20 17:44:39 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65ac0687-8ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:1a:a0:39:3b:51:86:81:4a:dd:e4:70:ab:
70:1e:96:37:8a:2b:62:cc:51:1e:e5:90:df:5f:8d:
88:10:a2:fd:70:a9:e1:e2:b4:2a:d4:b8:f7:5e:da:
b7:a3:98:3d:e9:2a:04:b8:54:6d:c0:2a:58:db:2f:
7d:30:95:50:d4:1c:af:9e:1f:25:1a:22:17:2e:58:
ba:91:b4:6f:39:80:3e:f0:fb:1a:25:fc:ff:07:c9:
58:42:14:3f:1a:29:df:fb:a5:be:a4:3d:1d:50:38:
6a:c2:4d:29:62:f0:a0:f8:9c:e4:d3:c0:bf:df:25:
ef:c2:d1:27:24:c9:74:75:00:aa:aa:8c:67:17:e9:
c3:4f:96:6e:bb:17:75:d1:88:bb:ab:06:72:4b:52:
b8:82:60:d2:0c:15:6d:7a:28:1c:c7:83:79:55:77:
a9:0c:bb:41:ca:94:82:72:56:95:8f:70:ee:63:fb:
de:15:30:92:2a:d5:e2:fa:eb:65:ad:04:f3:d0:94:
53:1f:f2:3f:e6:ad:ec:b0:2c:be:db:80:a0:ad:61:
e1:ca:1a:1c:94:98:29:8c:ba:5b:7f:0c:63:d3:d6:
60:ea:94:b4:93:f8:62:a7:fe:f1:91:08:38:4c:37:
ef:25:42:41:33:87:da:d5:13:25:12:9b:db:47:c6:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:2E:C1:D2:C8:DE:26:C2:90:B2:95:1E:5C:A1:C5:3C:1E:26:38
X509v3 Authority Key Identifier:
keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/0A35FAF2AA1011EEB2FB0578C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.32.0/22
203.115.192.0/18
IPv6:
2001:c18::/32
Signature Algorithm: sha256WithRSAEncryption
cd:be:2d:3c:8b:95:76:4b:07:de:d1:4a:be:5a:32:78:b0:50:
e0:2e:f4:88:dc:23:ea:a0:c2:07:2b:d7:1f:a9:6b:46:db:0b:
81:ea:5e:3f:95:5b:60:7d:0c:fd:87:a1:70:4c:fe:14:b3:74:
af:a6:96:c9:37:89:3d:d9:70:1b:46:70:49:ea:34:e3:b0:7d:
73:cb:83:1c:2f:ea:7d:44:35:19:0d:73:25:6f:49:9d:13:3e:
e0:7e:16:c0:70:c0:63:25:46:f7:db:93:5f:fd:7b:78:17:b7:
63:b3:66:cf:03:ec:9c:47:82:a5:3c:37:49:71:6a:63:33:24:
fb:bb:84:78:76:d2:b7:5c:32:a4:33:03:a2:9e:cf:94:96:3b:
40:6f:6a:a7:1e:d2:9e:56:40:43:a7:33:9b:39:77:56:75:e3:
b2:96:be:b8:19:76:8a:ec:8d:21:fb:da:60:e0:d7:4f:2c:f4:
60:cd:d1:d6:f9:91:7e:06:bb:c3:27:5d:78:b8:b0:5f:26:ac:
4a:16:7c:2f:6c:88:66:3f:bd:90:67:dd:77:96:2b:36:76:79:
ce:da:27:5b:4f:85:7f:04:2f:86:b1:01:ba:9a:80:de:fd:cc:
9e:d3:83:9b:6a:e9:ea:51:ba:13:04:c4:3f:c6:d4:fc:dc:06:
b6:74:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:55 2025 by rpki-client