Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/BC6987B28D1C11EF94D8591FC4F9AE02.roa
File: BC6987B28D1C11EF94D8591FC4F9AE02.roa (raw, json)
Hash identifier: qLGPU/pfhMhj8AInXxl553Os98rIWu6kaMAGNS87PS8=
Subject key identifier: B3:E0:34:81:10:01:33:5B:CE:04:8B:45:5E:22:3F:3D:72:C4:44:0D
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0B7C
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/BC6987B28D1C11EF94D8591FC4F9AE02.roa
Signing time: Fri 18 Oct 2024 06:46:43 +0000
ROA not before: Fri 18 Oct 2024 06:46:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 17819
IP address blocks: 119.27.0.0/24 maxlen: 24
119.27.1.0/24 maxlen: 24
180.189.8.0/21 maxlen: 21
183.177.0.0/20 maxlen: 20
202.167.224.0/23 maxlen: 23
202.167.226.0/24 maxlen: 24
202.167.236.0/22 maxlen: 22
202.167.240.0/22 maxlen: 22
202.167.243.0/24 maxlen: 24
202.167.254.0/24 maxlen: 24
202.167.255.0/24 maxlen: 24
202.177.193.0/24 maxlen: 24
202.177.195.0/24 maxlen: 24
202.177.198.0/24 maxlen: 24
202.177.202.0/23 maxlen: 23
203.190.224.0/23 maxlen: 23
203.190.224.0/24 maxlen: 24
203.190.226.0/24 maxlen: 24
203.190.228.0/23 maxlen: 23
203.190.236.0/22 maxlen: 22
2407:b000::/33 maxlen: 33
Validation: Failed, certificate revoked on Fri 18 Oct 2024 07:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Oct 18 06:46:43 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67120453-ec46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:73:4f:8e:c4:66:6e:05:62:3b:2a:24:fd:
40:9e:28:11:8e:2a:15:b5:58:e9:ea:d5:d3:81:57:
73:02:52:9c:94:f8:7b:f1:b3:46:42:f2:a4:d1:9e:
e0:18:d8:00:84:91:6a:1d:42:97:12:76:b0:61:04:
95:a6:ff:7b:dc:bd:95:9f:74:56:11:ac:1d:f6:f0:
37:9a:d2:7d:76:f5:e5:0a:33:40:8f:0b:a1:bb:84:
14:a4:7f:37:32:5e:3c:14:5d:0a:10:93:56:4a:ec:
e1:01:00:c7:d0:d6:3c:b8:12:a7:ce:91:4e:40:69:
05:0d:f2:4c:80:20:5b:0f:9c:2a:93:35:99:8d:dc:
e2:3d:0a:aa:b5:57:08:ce:ac:5d:6f:e0:b8:b5:6d:
e9:94:5f:89:b7:5f:dd:ec:dd:f7:e5:ff:8e:15:90:
35:02:1a:13:21:49:0d:bc:44:5a:74:f9:ac:93:8d:
53:b5:e7:d5:66:76:90:0b:2a:1c:27:be:d8:1f:74:
70:4a:13:ed:de:63:26:40:64:84:df:ef:4b:78:76:
dc:f4:c8:53:dd:dc:50:8e:d8:d8:63:dd:29:1f:08:
1c:20:41:a9:f0:7b:e7:da:63:6d:5a:7b:da:38:ea:
6c:6d:44:98:69:7b:ef:b1:6c:ba:da:64:ad:b4:ea:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:34:81:10:01:33:5B:CE:04:8B:45:5E:22:3F:3D:72:C4:44:0D
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/BC6987B28D1C11EF94D8591FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.27.0.0/23
180.189.8.0/21
183.177.0.0/20
202.167.224.0-202.167.226.255
202.167.236.0-202.167.243.255
202.167.254.0/23
202.177.193.0/24
202.177.195.0/24
202.177.198.0/24
202.177.202.0/23
203.190.224.0-203.190.226.255
203.190.228.0/23
203.190.236.0/22
IPv6:
2407:b000::/33
Signature Algorithm: sha256WithRSAEncryption
8d:c1:b9:2d:d7:1a:69:d3:40:8a:e3:23:43:00:67:e2:dd:1d:
20:09:bf:b8:4e:2c:1f:49:87:38:fb:81:11:31:26:0c:a5:72:
46:b0:f2:f2:68:99:42:95:7a:b1:33:e5:a5:3c:c8:e8:e8:e0:
2c:c9:4f:94:b1:49:8c:b8:51:2f:a3:a9:24:c0:48:8d:02:29:
9a:d9:63:3e:b6:a7:ab:f2:e8:c0:bb:f6:23:fd:b4:63:e4:f6:
2f:2d:f7:0c:55:02:94:53:9c:a7:b5:62:ad:e1:a9:b8:b7:e9:
9d:31:c7:14:37:42:f4:72:18:37:d7:54:4d:c0:31:de:b8:f4:
3a:f5:c3:4e:29:bc:3b:52:5a:21:1d:a8:3a:a6:4a:86:d7:dc:
f0:46:08:56:dc:ef:d0:cf:f5:46:ae:36:f4:74:44:5c:87:df:
7c:6f:d7:2f:5c:dc:72:51:55:47:85:13:6a:e0:75:1c:3d:5f:
b7:b2:3f:67:fd:28:41:b9:ce:67:ef:ae:30:3e:84:9a:6c:d6:
87:5a:8b:9f:de:d2:7d:54:b4:a7:6f:14:50:6d:bc:5c:db:2c:
4c:49:68:fa:99:d6:fd:c4:1a:05:28:a1:50:34:f1:a0:00:ce:
9f:92:86:07:50:86:6d:18:da:8f:70:12:62:ae:be:e1:d4:14:
7d:ce:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:48:40 2025 by rpki-client