Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4D4183A2D73C11EFB0F9227BC4F9AE02.roa
File: 4D4183A2D73C11EFB0F9227BC4F9AE02.roa (raw, json)
Hash identifier: UmteOk0DLJPW+K4LyQmA6w1Hpwqkuw2+5+RuFBjYMa0=
Subject key identifier: E1:23:AB:75:AD:AC:36:A3:01:D4:7C:C8:CD:6B:E8:BD:26:D8:4B:CF
Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial: 29
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4D4183A2D73C11EFB0F9227BC4F9AE02.roa
Signing time: Fri 14 Feb 2025 13:34:10 +0000
ROA not before: Fri 14 Feb 2025 13:34:10 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 398704
IP address blocks: 103.75.82.0/24 maxlen: 24
103.75.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 10:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Validity
Not Before: Feb 14 13:34:10 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67af4652-b09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:ac:c1:e3:f9:4b:e7:f4:16:97:21:50:30:
5c:f5:9c:9b:56:43:19:43:56:23:2e:16:a9:00:c0:
90:84:9c:40:9f:4d:5c:d5:88:6d:8e:c1:13:69:43:
8a:cb:08:2e:32:58:af:cd:75:ed:35:77:f8:ed:17:
d9:3b:ea:ce:59:0c:f2:78:10:09:e2:56:9c:03:7c:
03:19:11:71:96:51:fb:a2:1d:cc:d7:1d:b5:cd:e8:
fc:2a:f6:56:8a:65:14:95:f7:44:49:15:2a:af:f2:
49:69:7e:c2:9e:bc:a0:e6:87:b7:bc:e7:20:fe:2d:
41:e5:4d:0d:6d:41:96:22:7b:74:33:4b:c1:6e:51:
36:f8:82:e3:05:b5:cc:d6:a3:3c:85:a2:d6:8e:19:
d2:d0:7f:b0:98:3a:e6:3e:2d:42:af:36:94:25:2c:
2e:4f:4c:2e:8a:c2:2f:44:dd:45:1c:0d:60:7f:13:
70:b3:ac:c2:79:9f:e0:ca:7b:9c:49:2b:97:9d:4e:
ed:0a:d0:ba:b6:1d:2c:61:05:91:bd:cf:ed:b3:07:
77:23:9e:ad:7f:57:cb:26:9f:57:0b:75:63:d4:d0:
74:d8:b8:cc:02:22:4e:e5:cc:8d:11:d1:77:9f:b9:
77:4a:b7:13:24:d0:bb:a8:e9:64:ea:b6:8a:c0:75:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:AB:75:AD:AC:36:A3:01:D4:7C:C8:CD:6B:E8:BD:26:D8:4B:CF
X509v3 Authority Key Identifier:
keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4D4183A2D73C11EFB0F9227BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.82.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:d9:bb:5a:a9:8f:30:f4:1a:48:ee:ba:af:d9:74:3c:b9:9a:
e8:d2:7b:f2:81:48:92:7e:41:58:27:dd:18:90:8a:83:0e:f0:
48:64:52:22:28:5b:fd:bb:34:b1:96:7e:1e:a4:49:94:57:75:
82:45:34:b6:33:04:68:24:b2:0d:98:68:94:b4:f2:a6:8d:a2:
89:83:6b:d8:c5:5c:bc:30:ec:28:88:30:7d:bb:67:bb:b1:b8:
49:b1:a2:f0:b5:2a:b7:67:f3:e6:b5:11:0e:d4:dd:55:70:a1:
6b:03:a7:49:09:05:51:5b:b6:de:00:d1:dd:f2:09:87:ce:0e:
b8:bf:88:94:2d:27:74:f3:35:5b:dc:e8:0b:83:d4:ee:99:0d:
cb:8b:22:d9:82:3f:c1:36:eb:74:0d:4c:a4:81:47:86:20:cb:
0d:b9:45:46:b9:64:5f:43:0f:c5:1f:6c:0c:62:2a:39:0a:95:
94:38:69:d9:72:d6:12:ff:9c:d7:5b:46:05:ef:50:99:e8:a2:
ba:40:1b:2c:b9:78:bd:fe:4b:11:fe:3b:8a:19:72:ca:33:f6:
27:ae:0c:67:9d:8f:ef:41:7f:75:7f:70:8b:31:b1:ef:2c:f7:
a4:2a:10:0f:17:ed:4a:db:7c:30:e0:c4:84:0b:c8:1c:0a:74:
cd:ec:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:04:09 2025 by rpki-client