Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/EFC75922DB0F11EF9441EC41C4F9AE02.roa
File: EFC75922DB0F11EF9441EC41C4F9AE02.roa (raw, json)
Hash identifier: p86liSw3qKLjacaLelsysttjYrhvPncui7Nc0lQqpnk=
Subject key identifier: 7E:5D:D2:D4:42:98:97:19:A8:EA:5D:A4:89:F8:BC:E9:23:BB:9D:EE
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 01C8
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/EFC75922DB0F11EF9441EC41C4F9AE02.roa
Signing time: Sat 25 Jan 2025 11:31:37 +0000
ROA not before: Sat 25 Jan 2025 11:31:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 142615
IP address blocks: 103.20.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 12:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Jan 25 11:31:37 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6794cb98-da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:1c:b2:02:da:65:07:d5:79:f7:c1:78:a5:
27:c2:f5:92:9b:89:1e:61:ee:80:12:92:1a:38:13:
4e:45:8b:b2:f5:07:55:c8:c6:4e:85:b6:7c:f8:05:
1b:7a:37:52:f0:59:63:aa:2e:75:8a:a9:a8:fe:56:
d7:93:57:ba:2d:56:c4:9e:d3:b4:a8:fe:b5:20:14:
80:a9:fb:4b:a9:00:87:9d:d3:2a:41:c0:99:d2:29:
47:cd:03:50:f0:35:a1:0f:fc:6c:0e:aa:6f:63:c2:
42:76:ef:46:6a:22:31:ba:f3:d3:a9:6b:f5:b9:6f:
c6:d3:94:f7:df:b8:ea:b2:c9:53:73:25:61:dc:2d:
42:e2:b7:a0:16:c7:91:b8:c0:69:1e:f2:2a:2c:f0:
a7:05:cf:57:14:5f:3e:31:7a:11:6b:c6:56:6d:f2:
e0:61:df:24:30:af:f6:70:4b:92:f9:a5:77:ff:8e:
6c:24:fc:b9:cb:1b:d0:3a:00:8d:dc:a1:3f:52:75:
d0:24:24:98:4c:bb:eb:74:77:58:0e:8a:aa:aa:9f:
1f:5b:02:18:d7:19:57:2f:9f:ab:5a:f0:a3:1f:37:
4b:c8:fc:0b:33:20:4b:18:f0:84:c6:09:80:0d:4a:
26:42:f8:0d:37:ec:7d:d5:f0:df:34:e7:cd:7e:c4:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:D2:D4:42:98:97:19:A8:EA:5D:A4:89:F8:BC:E9:23:BB:9D:EE
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/EFC75922DB0F11EF9441EC41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a8:c1:85:8a:35:6f:f4:c1:ca:d4:7b:6f:cc:ce:1e:93:c7:
9d:ea:26:64:c7:d0:a0:c5:fd:20:f2:4b:33:c4:ec:ea:dd:18:
95:e6:b5:ea:0e:e3:07:e6:c5:2e:56:88:8c:4c:41:40:45:86:
a8:07:db:e9:51:31:ec:3c:b4:04:e3:e9:09:7e:6e:dd:43:ca:
2b:91:f5:ad:84:13:f7:07:99:06:70:b4:47:30:08:37:dd:24:
19:15:06:1d:1e:90:13:36:a4:04:f9:49:08:b9:d0:1b:7f:e5:
37:7b:5c:0f:22:8d:84:34:e7:06:ee:87:d5:4e:2b:71:40:32:
c7:eb:5a:6d:f1:5e:a9:4a:17:aa:e0:89:af:36:e1:96:eb:b2:
78:9e:3d:fb:1d:1b:6d:f9:dd:2c:a0:38:af:b5:82:a3:ab:16:
74:e4:e3:ab:84:0b:22:18:27:b5:c1:8f:4b:42:d1:21:fa:e1:
fe:1e:74:1e:35:a1:b3:e3:dd:71:f9:f4:a7:f9:54:bc:4e:df:
c0:a2:a9:61:00:21:34:3a:c8:24:a8:19:48:57:7c:10:09:a2:
33:3b:66:79:3f:39:6f:25:99:33:55:b2:80:57:c1:ba:5c:d5:
54:31:62:e5:c3:52:6a:7f:d8:6e:fa:fd:1e:14:05:df:8b:36:
b1:a6:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:33:49 2025 by rpki-client