Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/0D207E32BE8711EE9C60D31CC4F9AE02.roa
File: 0D207E32BE8711EE9C60D31CC4F9AE02.roa (raw, json)
Hash identifier: ZKg+DuShGy+qhFgImN8drhRNOLJAZROrScMa7iIozQ8=
Subject key identifier: DA:4E:FA:BE:55:2D:32:A3:EC:1E:02:7A:E2:00:C7:66:47:BF:4A:44
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 029D
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/0D207E32BE8711EE9C60D31CC4F9AE02.roa
Signing time: Thu 25 Jul 2024 06:03:29 +0000
ROA not before: Thu 25 Jul 2024 06:03:29 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 151499
IP address blocks: 202.12.87.0/24 maxlen: 24
202.12.88.0/24 maxlen: 24
202.12.89.0/24 maxlen: 24
202.12.90.0/24 maxlen: 24
203.0.12.0/24 maxlen: 24
203.0.13.0/24 maxlen: 24
203.3.124.0/22 maxlen: 24
203.4.226.0/24 maxlen: 24
203.12.236.0/22 maxlen: 22
203.12.236.0/24 maxlen: 24
203.12.237.0/24 maxlen: 24
203.12.238.0/24 maxlen: 24
203.12.239.0/24 maxlen: 24
203.14.152.0/24 maxlen: 24
203.14.153.0/24 maxlen: 24
203.14.154.0/24 maxlen: 24
203.14.155.0/24 maxlen: 24
203.14.158.0/23 maxlen: 23
203.27.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 07:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC
Validity
Not Before: Jul 25 06:03:29 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a1eab1-2c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:60:0c:f8:c4:06:58:e0:52:c5:bc:32:4d:
8f:32:60:a3:3d:bb:b6:65:4c:7e:29:ca:50:f5:96:
8f:33:54:1a:85:07:48:c2:a6:c9:d2:79:e9:d4:6c:
e6:d6:17:45:7a:b7:2e:99:0d:c7:75:63:2a:47:a0:
6f:35:76:dc:9a:b5:59:51:6d:3c:cd:ea:a6:8d:b1:
de:59:48:3d:f6:5d:2d:f3:71:4b:e3:6d:80:02:df:
d2:1b:37:07:c3:15:a5:69:c5:6c:53:7f:e0:60:8e:
cc:0c:91:68:d0:e8:17:90:ee:58:96:c2:70:d8:23:
4a:bd:d2:cf:eb:dc:f7:a9:ad:06:72:a8:a3:0f:27:
e3:71:ec:5b:cf:c5:c3:db:f7:0a:0a:b8:70:3e:c3:
ab:75:60:e3:fe:71:1d:bf:22:b7:67:d8:3e:f3:24:
66:7e:bb:d0:15:ba:b3:e5:64:33:f9:1f:be:14:d9:
34:37:dd:91:c5:cf:dc:df:b0:2c:8c:2b:ed:7e:04:
da:25:9b:d8:19:af:4b:a5:37:5d:08:09:50:f8:9c:
8f:09:ac:e1:7f:19:32:43:66:c2:e9:66:37:04:f6:
92:7b:be:24:da:07:c2:e7:76:5f:71:01:6e:19:88:
5f:2e:b7:fc:16:bb:6d:04:c3:60:0b:df:41:9f:78:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:FA:BE:55:2D:32:A3:EC:1E:02:7A:E2:00:C7:66:47:BF:4A:44
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/0D207E32BE8711EE9C60D31CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.87.0-202.12.90.255
203.0.12.0/23
203.3.124.0/22
203.4.226.0/24
203.12.236.0/22
203.14.152.0/22
203.14.158.0/23
203.27.126.0/24
Signature Algorithm: sha256WithRSAEncryption
01:61:9f:e5:6a:89:07:1d:10:5f:23:55:a6:1a:69:aa:36:d9:
59:ed:1e:af:89:4c:f4:c2:96:82:a5:45:ce:ed:49:97:cf:94:
bd:6e:53:ff:94:b6:b7:2c:f5:04:73:08:68:15:48:f5:d6:bb:
74:c8:a9:13:16:9a:eb:94:c2:b2:e4:8a:b5:8e:37:5d:15:94:
ad:e8:ad:92:92:e3:af:c1:4c:05:f7:57:03:92:47:d4:f5:c5:
96:44:50:4f:47:6c:ec:7b:50:e1:59:f7:50:30:3f:6f:1b:cc:
f3:ad:11:fb:c7:cb:01:5f:0d:ba:ac:3d:f3:87:98:7f:d0:3f:
a7:6b:fb:59:fd:bb:40:fd:48:a2:09:e1:5b:0c:c3:40:06:4e:
24:93:77:f8:ca:84:d0:f7:cd:bd:fd:51:f8:d4:46:b1:d5:d2:
52:c9:c1:96:05:5e:b5:be:9e:b7:d5:3a:4b:21:5d:be:b5:f1:
fd:56:9c:d6:79:8f:76:bb:09:d7:50:bd:46:cc:c5:43:90:5d:
ba:84:a3:19:d0:62:2a:27:e3:ab:fb:45:cc:78:49:7c:6b:6a:
2b:a1:5a:fd:f5:e3:c8:f9:7c:6c:92:19:53:8d:fb:a2:1c:dd:
95:58:62:fd:f0:83:6f:ce:46:6a:2c:0c:08:5e:72:3b:a7:1a:
d6:3b:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:53 2025 by rpki-client