Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/778D3E88227B11EF88C3CA12C4F9AE02.roa
File: 778D3E88227B11EF88C3CA12C4F9AE02.roa (raw, json)
Hash identifier: TXqpVMNPsUq8aYi7jq0moIc3KNpnXcY+f3ZSWC+Lovc=
Subject key identifier: E7:BA:27:4E:8C:53:6B:C2:7B:48:5F:12:16:37:30:FA:F3:B0:ED:40
Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial: 0128
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/778D3E88227B11EF88C3CA12C4F9AE02.roa
Signing time: Wed 08 Jan 2025 14:19:46 +0000
ROA not before: Wed 08 Jan 2025 14:19:46 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 398704
IP address blocks: 103.233.178.0/24 maxlen: 24
103.233.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 03:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Validity
Not Before: Jan 8 14:19:46 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=677e8982-4fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:5e:e4:b5:77:a1:36:56:88:55:41:e4:50:
63:91:ba:76:3d:c4:79:c8:dd:ad:c3:72:ce:38:32:
21:99:7d:01:21:57:04:54:16:6f:eb:70:5a:7b:0a:
2c:16:7e:5e:ee:ea:d1:97:fe:66:b9:fe:86:d8:78:
39:62:90:46:f4:b2:55:ac:d3:3e:c2:a0:ad:7d:61:
01:e9:4e:d7:91:0f:6f:15:f5:86:e5:41:f8:0d:d1:
0e:90:3c:ec:e5:91:12:44:4f:38:ec:fd:9e:97:d1:
13:0c:73:2b:7f:c3:5a:7c:d3:3a:1e:22:7f:4f:7c:
c8:12:60:88:cb:d1:5b:ac:5d:8d:b4:87:e3:20:08:
00:17:26:51:1a:31:f9:f6:f6:a5:35:32:e0:fa:23:
36:9d:d6:0d:21:14:59:36:80:97:db:70:99:83:a8:
8c:ed:31:1b:7c:50:3b:f7:49:a6:7f:fd:7e:b2:5a:
3b:8b:22:9c:ed:5a:bc:81:52:64:da:9e:8d:6f:de:
8a:c0:7e:da:e1:57:22:96:af:cf:19:fd:e0:34:c3:
fc:87:05:f1:be:c3:5a:3c:5e:8d:91:9b:7a:19:d6:
da:e4:2c:32:45:81:ae:5a:00:75:fb:c0:07:f6:4c:
5f:66:b7:f2:42:58:aa:8a:af:b0:05:ab:5e:f2:44:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:27:4E:8C:53:6B:C2:7B:48:5F:12:16:37:30:FA:F3:B0:ED:40
X509v3 Authority Key Identifier:
keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/778D3E88227B11EF88C3CA12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.233.178.0/23
Signature Algorithm: sha256WithRSAEncryption
63:65:41:7f:fe:75:fd:7e:1e:56:12:9f:ec:3b:c6:0a:bf:57:
73:f7:c4:19:0d:f6:a8:8b:bb:99:18:e5:d8:81:ef:ae:19:9c:
49:5d:fe:e2:b1:1c:b0:6a:30:08:8f:f5:2d:d4:34:3b:fd:bd:
d6:00:f6:65:7d:7d:4d:68:75:b7:20:84:a9:69:0c:f6:49:53:
24:a5:d5:ba:9d:f5:f4:ee:2e:20:2e:6d:aa:69:21:7f:31:85:
ba:21:8c:78:ef:d5:1f:9e:d9:ad:4c:25:7e:3a:be:33:62:08:
f7:4f:ff:3a:2c:2d:6f:58:0e:23:55:2f:85:56:be:d3:57:3a:
c3:92:9b:fc:8c:64:18:ed:97:c7:bf:1c:7c:91:72:07:60:0c:
a7:46:aa:6c:9f:2a:2d:1a:10:a7:51:31:d0:c4:45:ea:36:8d:
54:a4:ca:5e:5a:7b:ca:9d:f1:01:33:7b:24:1b:22:61:76:5d:
8b:6e:21:78:fe:62:20:b2:aa:88:ab:5b:e5:06:cf:56:f3:10:
83:33:5b:f7:bc:1b:95:6e:00:ae:a1:e8:51:03:0e:9a:9e:c0:
88:82:53:4e:a6:94:6c:40:81:32:ca:83:68:a8:c2:fa:75:87:
cd:b9:2b:1e:14:bd:4e:69:42:72:b7:e7:0d:8a:55:23:84:f1:
a0:4b:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:20:27 2025 by rpki-client