Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa
File: A987B8BEDB0B11ECB433A842C4F9AE02.roa (raw, json)
Hash identifier: 5XhmwjgG2fg0OurZJyTDw4ayeN3jOAUvOPnSAPOcLso=
Subject key identifier: E5:01:F0:83:B3:5C:8F:5E:09:98:BF:06:FC:24:E6:C0:15:04:80:6F
Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial: 06D6
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa
Signing time: Thu 04 Jul 2024 23:00:46 +0000
ROA not before: Thu 04 Jul 2024 23:00:46 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45654
IP address blocks: 103.1.188.0/22 maxlen: 24
103.19.172.0/22 maxlen: 24
103.232.160.0/22 maxlen: 24
113.212.168.0/21 maxlen: 24
163.47.120.0/22 maxlen: 24
163.47.136.0/22 maxlen: 24
163.47.168.0/22 maxlen: 24
182.237.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 21:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Validity
Not Before: Jul 4 23:00:46 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6687299e-59e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:78:84:6b:40:a3:c4:d5:fc:21:77:59:b0:
a7:58:d0:66:c1:5f:6a:13:8c:f0:f8:92:b2:22:a4:
bd:d0:eb:2f:95:e3:7e:d9:71:83:b4:80:71:45:02:
7b:31:1a:3b:3a:a9:e3:07:ad:6a:25:38:1f:90:4c:
73:ad:3c:b5:33:dc:29:0f:57:bf:4e:30:56:5d:a8:
da:57:82:97:cd:d0:b8:e6:0c:90:1b:07:45:e4:bc:
99:25:cb:46:a1:a1:3f:b8:23:3a:df:2b:10:df:e9:
49:1d:ad:ab:c0:6d:6e:b4:22:52:12:b5:30:00:ea:
e2:0a:e1:a1:30:34:cc:9e:2d:70:e4:ac:05:46:26:
88:14:e0:8e:c7:d2:3e:e9:49:a5:c9:bc:ea:ad:2e:
5f:a1:6b:f8:ea:65:18:20:0a:8d:e5:72:65:ff:b0:
9e:87:4b:27:b4:e1:07:5d:96:9a:ab:0a:b2:ed:5b:
f7:98:4b:c5:88:89:56:18:37:b5:70:8c:98:b6:66:
d0:00:8c:d4:2d:d8:ea:c9:c6:ab:ee:80:9b:a3:9a:
01:8b:30:f7:10:7f:f1:aa:5a:e9:ad:88:c6:b0:d7:
7e:3e:41:2c:a2:4d:15:be:74:b9:21:ed:08:b6:a5:
fe:f3:c2:86:54:19:ab:95:08:b6:35:a7:7a:d6:04:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:F0:83:B3:5C:8F:5E:09:98:BF:06:FC:24:E6:C0:15:04:80:6F
X509v3 Authority Key Identifier:
keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.188.0/22
103.19.172.0/22
103.232.160.0/22
113.212.168.0/21
163.47.120.0/22
163.47.136.0/22
163.47.168.0/22
182.237.4.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:e4:59:21:a5:87:d7:d4:40:93:79:2a:dc:98:cc:0b:bb:3e:
ec:0f:a5:fa:a8:3b:db:ba:dd:18:47:26:3b:da:df:b1:b7:a4:
39:fc:db:cf:4f:b5:fd:50:35:35:49:1b:f9:52:45:10:9c:0b:
e1:84:38:61:fc:6d:e6:61:0a:f1:66:59:db:9f:f2:43:4b:4b:
5b:3d:82:f9:d0:f3:5f:19:c3:f0:61:33:60:59:fa:0f:f3:40:
8c:a8:a2:60:5d:15:b4:d2:81:7a:43:08:47:be:8f:36:61:ea:
06:4d:48:56:fd:1a:11:6d:c0:6d:8c:72:45:69:9e:a6:30:b0:
07:e9:fd:d4:57:d9:9d:30:82:7e:01:58:a6:f7:88:9c:d7:24:
b6:71:a4:0e:45:eb:34:a2:cf:30:dc:77:4d:b4:fe:8c:42:81:
e0:e8:97:3b:70:b4:e3:ae:59:2e:57:39:e8:6f:89:73:4e:fc:
43:d5:c7:eb:4e:f8:bd:46:34:86:40:b5:39:d6:b2:a6:ee:a5:
92:c7:b6:0a:a4:2b:51:82:09:78:d2:a1:93:e2:d8:b2:ed:17:
9e:90:d2:b1:4b:2c:bd:80:a7:39:c6:de:4e:c5:63:e6:bc:0f:
eb:0e:eb:34:9e:e7:30:c6:f5:15:6c:97:b2:7e:cc:41:65:7f:
ae:cb:91:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:14 2025 by rpki-client