Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E2E7F3A4EDCC11EF850E4054C4F9AE02.roa
File: E2E7F3A4EDCC11EF850E4054C4F9AE02.roa (raw, json)
Hash identifier: D9GZQ6HD1cerf0iaS0uTCmMFvtjj5S5/gxJt7GIm7JA=
Subject key identifier: E7:72:94:BB:3D:00:C9:22:D4:C0:59:B9:FF:69:12:4B:E2:E0:76:CB
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0C78
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E2E7F3A4EDCC11EF850E4054C4F9AE02.roa
Signing time: Tue 18 Feb 2025 07:49:31 +0000
ROA not before: Tue 18 Feb 2025 07:49:31 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 213990
IP address blocks: 103.20.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 20:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3192 (0xc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Feb 18 07:49:31 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67b43b8b-53fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:9c:18:9a:0b:3b:ee:14:54:3a:68:c2:23:
a5:f6:d2:98:3c:50:9f:e3:cc:be:23:0a:dc:4b:2d:
7a:44:7e:b0:a8:75:43:ef:8e:cf:d1:af:bb:84:2e:
d6:91:71:2c:90:25:a2:6a:b1:69:c6:45:63:08:46:
3a:0c:10:9b:0c:cf:02:a4:2c:a7:9c:c3:40:11:c6:
95:cb:52:7f:17:a8:61:f1:9b:e5:d4:b5:50:71:73:
ec:9e:72:92:3e:d8:d3:80:ab:21:c3:9b:70:e6:3b:
01:6f:ec:1a:fc:3b:21:7d:24:29:ea:92:f6:30:8d:
01:6a:2e:7b:42:c4:ad:57:95:f9:60:9c:08:c6:0f:
3e:68:e7:94:41:36:f8:95:3f:03:5e:4d:3a:b6:5e:
6b:6f:e4:c8:b7:59:93:5b:0d:1d:d3:91:ff:64:25:
13:7e:5d:d7:77:ae:b0:13:21:fa:92:44:04:3e:8f:
2c:d5:dc:d6:c5:1a:5b:7d:38:15:70:17:77:0c:3d:
8c:ac:71:c6:17:c1:02:f5:8a:46:60:94:ed:49:ea:
23:ac:47:21:4d:f7:6b:ad:09:a8:fa:4d:35:ec:49:
16:e1:21:ea:28:ec:23:b2:d4:c2:0f:c8:a2:3c:41:
1c:f9:2d:c9:52:11:25:f9:c2:3a:52:9e:d0:a0:74:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:72:94:BB:3D:00:C9:22:D4:C0:59:B9:FF:69:12:4B:E2:E0:76:CB
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E2E7F3A4EDCC11EF850E4054C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.134.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cd:91:2a:37:86:8b:2c:75:24:8c:10:93:dc:03:03:cc:62:
9f:ba:be:92:3f:62:81:7a:37:24:7f:f6:a3:04:37:fb:36:66:
76:c1:79:0d:59:30:92:69:f3:0e:79:f3:63:d5:55:19:1d:fa:
22:4a:10:bf:75:d2:96:29:36:b2:a1:ab:ff:3b:6a:a6:32:fe:
37:32:0a:6f:24:75:eb:b4:97:b2:62:c2:8b:91:01:4e:6d:15:
32:8f:55:7f:7d:36:4c:99:8e:f2:79:77:da:de:0d:a2:94:8a:
61:4c:64:89:28:0a:47:5a:eb:e9:68:ae:ec:ac:a7:1f:f9:63:
2f:36:26:79:83:cf:01:64:8d:d4:c9:4b:d8:9c:52:ba:c2:51:
2f:66:03:a1:87:b4:4f:6a:8f:5a:88:16:39:63:1d:d3:73:49:
2f:20:b9:0a:ca:d6:cf:c8:83:92:dc:6b:ae:ee:ec:6f:79:e8:
cd:c1:fa:1e:f2:cb:8e:66:99:2f:48:41:a8:7c:eb:7e:12:5b:
57:25:47:bf:54:9f:99:02:24:50:f7:4b:82:3e:8c:87:95:ee:
63:a5:54:54:73:3d:16:a1:0e:c5:a2:b0:59:7f:3e:9c:1a:d8:
a5:7e:80:fb:4d:0a:a6:f6:ee:49:7e:36:4a:51:b2:15:07:84:
d3:f0:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:10:29 2025 by rpki-client