Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/403338AAC77B11ECB1362373C4F9AE02.roa
File: 403338AAC77B11ECB1362373C4F9AE02.roa (raw, json)
Hash identifier: 9FbkfqMdICXmglNmpWD79Vv9G955gS4oInVvfL5SBgQ=
Subject key identifier: C9:45:99:90:BC:36:52:F5:C7:BF:CC:84:CD:41:1F:22:0E:6E:EB:98
Certificate issuer: /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
Certificate serial: 0251
Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/403338AAC77B11ECB1362373C4F9AE02.roa
Signing time: Fri 15 Mar 2024 03:25:24 +0000
ROA not before: Fri 15 Mar 2024 03:25:24 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 132113
IP address blocks: 123.253.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 06:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
Validity
Not Before: Mar 15 03:25:24 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65f3bfa4-cb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:51:3b:82:16:8d:c5:ca:e7:20:7b:92:fa:
19:98:4e:6f:54:58:2c:cf:2b:44:99:a5:9f:67:05:
b7:08:d6:3b:50:b3:74:f9:f5:de:8c:6b:e2:d5:ba:
1b:74:95:ed:17:28:74:e8:d4:b8:a9:37:f2:ed:cd:
fc:32:ee:9f:c0:ff:0e:c8:a1:fd:fc:b5:3e:39:1f:
86:11:b1:40:11:08:29:1d:a5:86:59:01:bd:c1:7a:
db:6f:88:9d:64:9f:e4:63:80:57:78:e1:d5:c8:c5:
35:f0:cd:81:c2:d1:18:ce:b4:e5:7d:57:18:09:08:
62:62:db:3f:01:41:e6:d9:9d:92:81:78:72:9f:5a:
40:a6:a1:37:67:eb:7f:b4:e5:86:ef:49:06:65:37:
60:ec:94:38:18:07:16:a8:0b:93:0c:da:40:85:75:
77:54:d4:71:72:13:c0:66:0c:48:2b:e5:b8:de:91:
f1:27:df:6c:99:70:3b:71:b5:9f:4b:bb:ec:ba:21:
b4:c6:1a:85:c9:b0:cf:42:9b:40:31:d0:69:0a:90:
cf:67:54:4d:a6:f7:24:0c:39:67:41:71:97:77:20:
c4:b4:a3:1c:bc:bc:5b:e5:f3:b8:f7:fe:02:cf:9c:
42:76:cf:fd:77:a2:08:4b:e4:8f:d1:7c:24:d6:71:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:99:90:BC:36:52:F5:C7:BF:CC:84:CD:41:1F:22:0E:6E:EB:98
X509v3 Authority Key Identifier:
keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/403338AAC77B11ECB1362373C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0b:25:be:42:92:20:5f:fb:ba:58:a4:68:be:22:2b:0d:e5:
8b:d6:a2:bf:36:36:e3:75:de:9b:a5:3a:a2:d9:2e:8a:70:1a:
77:e3:38:0f:f0:2e:e0:9c:ce:2f:01:16:c2:3b:25:39:81:b3:
c7:57:43:9d:91:03:ca:3c:c7:e0:8d:4b:08:23:16:51:98:3d:
93:79:c3:fd:1a:e0:0d:60:ca:d9:c3:15:2c:19:5c:0a:55:a1:
a8:7d:98:70:fa:6f:75:ab:e3:e0:63:10:fe:43:e4:4a:5a:81:
04:cf:bf:78:ee:72:b6:db:bc:d9:8a:69:68:3b:38:91:be:22:
d6:46:f7:ac:3a:3f:d9:3b:3c:f0:0a:65:05:c4:dd:8c:2d:b9:
ce:22:c7:61:46:15:ec:b8:bb:6c:f1:cb:a1:a7:42:8d:75:28:
52:b9:43:8f:8f:6a:26:71:ff:81:ae:e8:91:48:d6:b0:d0:0e:
55:88:c7:d0:a5:30:8a:1f:f9:aa:e9:fe:c7:fd:5a:a2:52:b1:
83:fe:51:2e:19:97:ec:ba:d8:1a:d5:a9:9d:05:4f:39:b4:f0:
e1:60:74:bd:83:22:13:eb:46:ff:7f:3a:40:ce:bc:6e:10:0b:
83:1f:51:61:ad:74:1b:2b:bb:be:1c:2f:eb:d4:83:73:5a:73:
55:60:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:58:24 2025 by rpki-client