Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/93C4474E085411EBB9F0635DC4F9AE02.roa
File: 93C4474E085411EBB9F0635DC4F9AE02.roa (raw, json)
Hash identifier: r4oGdwh1wAA/HZZJFxAlSneBYqCxvrvBZTgJ6fejU+A=
Subject key identifier: 17:54:DD:28:BF:35:55:38:0A:A9:FF:FA:CD:F3:9B:0F:EA:C1:A1:E7
Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial: 21CE
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/93C4474E085411EBB9F0635DC4F9AE02.roa
Signing time: Tue 30 Apr 2024 16:23:48 +0000
ROA not before: Tue 30 Apr 2024 16:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141177
IP address blocks: 43.250.48.0/22 maxlen: 24
45.64.114.0/23 maxlen: 23
45.64.114.0/24 maxlen: 24
45.64.115.0/24 maxlen: 24
2404:7c00:2::/48 maxlen: 48
2404:7c00:2::/56 maxlen: 56
2404:7c00:2:100::/56 maxlen: 56
2404:7c00:2:200::/56 maxlen: 56
2404:7c00:2:300::/56 maxlen: 56
2404:7c00:2:400::/56 maxlen: 56
2404:7c00:10::/44 maxlen: 48
2404:7c00:20::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 26 Dec 2024 10:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8654 (0x21ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Validity
Not Before: Apr 30 16:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66311b13-7e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:f8:a1:26:6d:6a:17:c4:59:88:b3:1a:67:
d7:1e:fa:2c:a5:08:e0:cb:93:8b:ae:43:4a:91:42:
77:4d:75:90:5a:d2:aa:bc:5a:d3:1a:88:99:8e:bd:
b5:6c:fd:c1:da:9d:18:27:b4:8f:1b:51:db:4f:fe:
ab:d6:04:ea:38:6c:e7:4e:2c:ee:47:a6:4f:21:ad:
fb:60:35:ba:c7:5a:98:ba:61:f9:9f:45:b5:bd:a0:
f0:67:c0:a2:f9:09:36:20:ec:54:a7:5b:f4:67:8c:
dd:74:2b:bd:f0:d4:42:33:67:d5:7f:b1:c5:4e:19:
ae:18:f6:31:4e:6a:6d:c8:e0:da:93:5a:2d:0d:e5:
ba:47:88:48:53:be:fa:a2:60:48:a4:ce:79:86:dd:
70:55:ed:44:35:11:8f:09:bb:ef:81:52:8c:26:1e:
46:2a:43:a3:64:8f:e0:bb:6e:14:47:2c:c9:5c:d1:
8d:f2:48:00:bf:86:4c:2a:b7:0c:17:4d:39:54:70:
23:58:5e:85:de:59:e1:e8:34:8c:ae:a8:c7:72:c8:
a9:2c:e1:86:cc:69:bb:c5:c6:cb:7a:3e:68:1d:1e:
cb:50:5b:a4:03:9b:56:13:29:4b:65:97:ff:f6:4b:
e1:c4:d3:51:35:90:ef:52:7b:a0:ff:d4:8b:f5:32:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:DD:28:BF:35:55:38:0A:A9:FF:FA:CD:F3:9B:0F:EA:C1:A1:E7
X509v3 Authority Key Identifier:
keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/93C4474E085411EBB9F0635DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.48.0/22
45.64.114.0/23
IPv6:
2404:7c00:2::/48
2404:7c00:10::-2404:7c00:2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:ef:2a:99:9b:4d:42:41:d2:ad:c6:3c:26:92:25:7d:e3:64:
3f:d0:15:6c:0b:13:36:7c:ea:59:80:c9:89:5f:3c:57:73:e3:
5b:5b:a4:81:b5:17:19:cc:7c:cd:34:19:46:6f:11:d1:2a:3c:
a8:7b:72:b3:cc:57:ac:b6:00:f6:60:e8:46:5b:bd:49:53:82:
dc:3a:a3:bd:ee:90:72:e5:a5:6b:8d:b8:02:97:92:6c:19:86:
43:79:84:c6:44:d5:4d:5c:08:c4:a6:14:fb:94:38:c0:d1:15:
f0:ce:9c:ff:6c:0a:de:3d:40:5c:88:10:dd:c5:0e:a8:a8:29:
02:8e:d3:69:c3:72:f4:ca:b8:a0:6f:39:81:36:c8:f0:17:34:
f5:82:8b:f0:7e:80:fb:95:cd:a6:9c:28:dd:c4:5d:38:fc:a6:
07:fe:99:82:01:06:06:7b:7a:f6:43:bc:f9:cc:d2:57:d9:6e:
de:49:df:03:e1:82:af:18:58:5b:7a:f2:0e:05:8f:1b:c1:f1:
81:28:3d:d6:86:05:7f:bb:e2:5f:1d:2b:f0:89:c7:72:7f:14:
84:a8:57:e6:94:dd:b9:12:5e:f7:4a:10:fa:e0:a7:89:fd:88:
06:70:ca:1b:e5:80:68:5e:29:e8:df:9b:60:24:1c:ae:6b:04:
37:ca:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:00:35 2025 by rpki-client