Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/978913FC717111EF997A817AC4F9AE02.roa
File: 978913FC717111EF997A817AC4F9AE02.roa (raw, json)
Hash identifier: rxeV04LW05XnvrSII8B0yZjl7R87IshcVUoM4yzaWLs=
Subject key identifier: 90:19:67:D2:50:F9:CA:27:E9:A4:1B:69:C9:A1:BC:3D:E6:C5:94:33
Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial: 04
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/978913FC717111EF997A817AC4F9AE02.roa
Signing time: Fri 13 Sep 2024 01:43:36 +0000
ROA not before: Fri 13 Sep 2024 01:43:36 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 18400
IP address blocks: 160.25.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Sep 2024 01:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Validity
Not Before: Sep 13 01:43:36 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66e398c8-357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:1d:69:a7:52:c9:25:82:f4:0a:db:2a:8c:
dc:7d:d5:0f:5a:4c:d5:4d:63:b9:5a:84:86:cc:6a:
b6:2a:bd:18:e0:b0:3c:2b:55:fd:fe:c1:ad:cd:e6:
b1:7f:72:ed:94:41:fd:d2:53:90:2f:3c:9d:c2:2b:
ef:e8:88:80:76:79:ac:cb:2d:2c:fd:8b:a5:00:58:
26:45:85:cb:7e:07:d8:95:19:fc:11:d1:4b:8c:84:
c7:75:d6:a3:d5:18:ad:74:df:e7:ce:c8:6a:a1:a7:
d3:9b:02:cb:73:cb:68:98:b6:ac:03:c1:0c:26:07:
f7:2c:33:4f:1d:19:97:ae:69:3d:5b:55:2b:08:17:
4e:a8:fb:bf:f1:95:73:02:6a:6f:8e:ea:36:e8:c4:
76:1d:d7:54:cc:2a:d9:60:91:2f:47:4b:b3:76:d8:
03:a5:e2:8c:40:bc:89:00:af:a3:8d:61:a3:27:5b:
47:1c:46:70:94:bb:b0:d5:f7:7a:e6:24:7a:61:8b:
2b:62:ba:b9:15:8c:5a:39:3c:1f:aa:22:e5:60:e7:
90:cd:8b:14:8f:84:b0:5f:1a:a5:77:79:39:11:cc:
d9:c4:fd:9c:e2:8e:f4:af:fb:38:27:a7:e8:14:20:
6c:4d:c3:ab:0a:9f:28:ed:15:f5:49:94:ab:4c:de:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:67:D2:50:F9:CA:27:E9:A4:1B:69:C9:A1:BC:3D:E6:C5:94:33
X509v3 Authority Key Identifier:
keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/978913FC717111EF997A817AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.96.0/23
Signature Algorithm: sha256WithRSAEncryption
15:34:06:73:aa:df:fb:6a:1d:b6:05:7d:a5:e5:37:db:18:90:
9b:4c:f1:4a:09:75:be:27:f7:3d:a7:39:70:17:da:1a:0c:b7:
ca:76:63:a4:1e:3d:7d:cb:20:f7:b8:d5:10:79:22:19:80:8c:
c9:9b:df:c2:a9:18:a9:e5:0b:0c:e3:42:f2:87:b7:bc:68:11:
2d:cc:10:33:31:2e:28:d0:07:ae:58:72:87:6b:c3:69:8a:0b:
99:ab:e8:d4:38:2b:b6:c2:5c:3e:d9:46:ca:61:25:29:86:1c:
5f:6a:f3:f0:1d:06:60:40:66:3e:ca:3e:a8:ac:40:7f:61:7a:
6d:db:43:14:55:27:dd:46:58:9e:08:7b:f4:f0:00:a2:7b:ac:
52:36:e0:c4:5c:a5:0e:be:60:4c:cc:32:1c:aa:bf:3f:be:84:
9e:8c:bf:08:ef:18:05:96:8b:61:ba:93:04:7d:46:35:19:ec:
3c:c2:5e:e1:c7:95:eb:94:70:3e:41:d1:cb:aa:11:77:da:08:
89:d4:b7:b9:8d:8c:6b:26:fc:25:08:74:3b:03:52:21:7e:5c:
d3:e3:46:59:be:84:27:57:61:dc:dd:38:2e:82:b8:c0:68:29:
b1:d2:2f:f3:cb:e1:23:70:ce:0f:a2:ee:f1:ae:ab:74:13:f5:
0d:97:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:46 2025 by rpki-client