Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/77245FEC589C11EFAA456D60C4F9AE02.roa
File: 77245FEC589C11EFAA456D60C4F9AE02.roa (raw, json)
Hash identifier: zC3drEIgyh0ukgLOboQFWPISzB1FP2wYuxw1j56GmhU=
Subject key identifier: D9:2F:10:7F:35:82:4A:73:87:00:3E:DE:4D:61:8E:59:47:55:73:4F
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A67
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/77245FEC589C11EFAA456D60C4F9AE02.roa
Signing time: Mon 12 Aug 2024 11:17:31 +0000
ROA not before: Mon 12 Aug 2024 11:17:31 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 12 Aug 2024 17:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2663 (0xa67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Aug 12 11:17:31 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b9ef4b-77c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:30:4f:72:7b:7b:57:a7:00:e2:3c:1f:6f:
4b:c5:10:2e:ea:11:81:e1:82:fb:f5:31:90:34:56:
24:5d:78:d4:ca:6b:9b:44:7f:e5:00:b8:73:7d:b3:
86:ce:ba:41:b7:2c:51:9a:a3:a7:1b:52:96:26:0d:
e6:2c:26:b5:f3:61:cc:cb:10:a1:93:3e:f9:72:1e:
93:41:9a:61:27:b4:43:2c:d6:0e:09:80:62:85:d6:
68:88:26:b6:a3:56:20:aa:f3:58:80:b4:e9:f5:46:
be:d0:25:31:22:bf:f0:d2:4a:46:e2:99:b8:49:6a:
4e:6f:ff:87:96:ff:75:e0:0a:c3:2c:af:8c:42:a5:
ec:ec:fc:f1:8e:63:e4:1f:de:ab:54:36:4a:e9:9e:
6f:1a:9e:33:45:4b:6d:f9:18:fd:a5:49:bf:8f:29:
02:77:60:4f:db:9d:62:6e:e8:c5:f6:9b:99:49:1f:
7a:63:49:af:16:d3:6f:6e:6d:e5:50:17:68:bd:a8:
e1:67:b9:a3:a7:3e:1a:5c:c0:de:bc:76:eb:df:88:
4f:24:6b:9d:da:f4:6b:ae:fb:e7:83:ac:8f:42:22:
5a:41:68:59:0f:78:1c:e7:ab:43:ea:cf:ce:bf:ae:
84:30:2b:3a:60:be:88:8d:cd:ec:c4:e9:f8:8c:df:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:10:7F:35:82:4A:73:87:00:3E:DE:4D:61:8E:59:47:55:73:4F
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/77245FEC589C11EFAA456D60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.129.0-14.192.130.255
14.192.132.0/23
14.192.135.0-14.192.139.255
14.192.145.0-14.192.147.255
14.192.149.0-14.192.150.255
14.192.155.0/24
14.192.159.0/24
43.247.120.0/22
103.20.132.0/22
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
96:79:c8:15:95:ce:15:90:f8:33:8f:83:1c:cb:c4:36:bc:0e:
7c:d3:97:ee:9b:81:f1:9e:ce:82:c0:47:65:fd:e9:f3:dd:37:
90:4c:66:e2:bf:c0:81:20:8e:5c:ce:e0:f9:e3:b9:d5:c9:ff:
c9:68:79:86:8e:43:0d:cb:da:d7:46:b2:64:86:c6:04:2e:08:
71:e7:81:10:03:21:bd:d0:98:a7:3d:0d:ae:f7:8f:c3:df:a5:
57:fd:b3:b6:d2:60:b1:ba:2e:09:d4:de:e9:76:91:04:c2:cf:
ae:ee:60:fb:a2:fb:93:bc:ec:1c:b0:f6:20:65:8a:43:ae:22:
f2:b7:7f:82:e0:40:ab:d5:e7:14:32:ed:ea:4c:b1:58:8a:96:
b9:d3:47:6a:52:f0:4c:a4:9b:42:ab:45:4e:d4:33:09:aa:e9:
e2:b4:5a:b5:48:db:18:8b:46:d9:16:c5:52:f9:4b:23:10:8e:
0b:84:e0:76:7f:96:9e:35:61:2b:eb:3d:79:10:22:3a:85:48:
bc:b4:58:8d:34:18:b0:5a:5c:f6:94:ab:a1:36:f4:39:25:58:
54:88:dd:f0:99:9a:d5:c8:82:40:27:18:96:1b:13:92:28:54:
eb:2e:f1:4b:57:e6:69:66:ae:20:33:06:60:8d:6b:4e:2b:82:
b6:52:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:12:33 2025 by rpki-client