Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/51B575404C3111ECB9639932C4F9AE02.roa
File: 51B575404C3111ECB9639932C4F9AE02.roa (raw, json)
Hash identifier: BaRX+Qi9zDahPKf9RDsastI4Vig0Z6kjhEheSofOe2g=
Subject key identifier: A4:11:D4:35:30:81:A7:BA:07:04:BD:6E:E3:20:E7:35:65:3A:C6:32
Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial: 1685
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/51B575404C3111ECB9639932C4F9AE02.roa
Signing time: Wed 04 Dec 2024 16:54:30 +0000
ROA not before: Wed 04 Dec 2024 16:54:30 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24456
IP address blocks: 203.96.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 04:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5765 (0x1685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Validity
Not Before: Dec 4 16:54:30 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67508946-16c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:bd:6e:e0:5e:c5:75:0c:02:90:3d:cd:55:
91:63:65:81:aa:a5:38:82:cb:b0:ba:d8:1a:07:0a:
6e:f8:e6:95:12:bf:53:75:1f:41:8c:a4:a2:e2:c8:
96:c1:47:d0:5b:13:1f:18:8a:27:19:f9:87:f0:f6:
3a:6b:df:83:cc:ec:bd:e4:1a:9c:86:ea:13:97:99:
ee:8f:3c:98:73:6c:bf:a3:9b:bd:17:5b:21:97:21:
01:7e:aa:75:90:a6:8e:c9:92:32:a1:59:04:c3:f6:
07:66:48:6b:17:af:54:9a:95:0e:55:62:f9:fb:1e:
10:7e:8d:5c:21:94:cd:1d:cd:2a:05:52:ed:35:60:
1d:77:5b:8d:d5:b9:68:bc:b2:fa:37:b2:01:9b:ef:
99:d1:2d:32:c3:dc:ca:18:f2:ff:68:8f:03:49:88:
56:36:68:f4:84:45:4d:84:8d:56:52:db:8c:58:1b:
e4:75:da:e4:91:55:72:ff:b4:dc:36:18:53:3b:67:
6b:2d:25:b7:dd:59:49:f0:cd:01:64:ae:52:67:2a:
b5:6d:dc:ce:be:0e:5d:a0:cf:41:bf:c5:8f:55:b2:
71:4f:a1:82:97:df:84:1b:91:3d:de:dc:56:89:21:
37:d6:79:29:38:16:3a:5f:04:7d:81:c1:0b:3e:a0:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:D4:35:30:81:A7:BA:07:04:BD:6E:E3:20:E7:35:65:3A:C6:32
X509v3 Authority Key Identifier:
keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/51B575404C3111ECB9639932C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.96.183.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7f:92:9e:d5:c1:70:15:9e:f6:c8:c2:ff:43:6f:08:ba:ee:
d1:52:95:1d:ff:9d:23:70:19:4e:8e:15:e7:04:9c:c5:37:4b:
44:1e:de:8e:bb:cd:63:f1:71:dd:97:cb:b2:5a:c0:4b:89:32:
1d:92:7d:f0:e4:e6:7e:e0:9e:78:80:01:f6:07:fc:a1:8e:6b:
18:6a:16:e4:eb:05:c9:0c:0d:65:2c:f4:33:5a:8b:c3:f2:33:
a0:8f:29:d2:a6:fb:87:04:c0:8d:89:88:31:07:49:8d:61:fc:
13:dc:f6:18:19:38:de:cd:6f:4d:19:c6:91:b0:eb:5a:dd:b4:
7f:73:83:08:e8:48:cd:24:61:9a:11:35:2b:d8:ca:6d:10:b9:
74:cf:40:d0:e0:9f:4f:87:e0:68:4f:0a:b4:b7:d8:1f:9a:25:
2a:9a:7e:6c:d0:f8:0b:b2:06:fb:65:71:30:9c:65:52:43:4e:
75:77:97:8f:8c:06:03:c5:e3:2c:2e:02:c7:e8:a2:a1:a8:e7:
78:3e:0f:d2:31:cb:36:36:72:0d:51:3e:f2:32:3d:2c:2d:ab:
99:05:86:cc:10:d8:8b:e1:34:7c:42:fe:5b:b4:08:d0:25:19:
d6:f2:55:e5:f9:2e:53:1e:81:1c:c6:60:5a:fe:bc:b7:cd:8f:
bf:bf:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:23:51 2025 by rpki-client