Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/826BCE12B5F811EF928EBA43C4F9AE02.roa
File: 826BCE12B5F811EF928EBA43C4F9AE02.roa (raw, json)
Hash identifier: 6ezypP5POHsxvyZJtUOOp7R00BWlom74xicJtmKPT6E=
Subject key identifier: 04:25:8A:75:14:BC:90:2F:7F:00:A8:B5:E2:1E:69:BA:7E:52:20:58
Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial: 06E7
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/826BCE12B5F811EF928EBA43C4F9AE02.roa
Signing time: Mon 09 Dec 2024 06:40:42 +0000
ROA not before: Mon 09 Dec 2024 06:40:41 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140973
IP address blocks: 103.154.12.0/24 maxlen: 24
103.154.13.0/24 maxlen: 24
2001:df1:ffc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 05:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Validity
Not Before: Dec 9 06:40:41 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=675690e9-f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:5a:5c:14:f3:e7:c4:2d:c3:f5:d0:ac:e8:
fd:94:a6:98:f8:d3:7a:e0:7b:e2:4e:32:d0:d8:e9:
6a:0a:fb:21:83:c8:e4:0e:9a:e6:8a:ae:2a:49:3f:
d4:ca:c9:fa:f3:7e:44:d6:4c:6b:ef:ab:45:33:61:
80:04:b9:a8:9e:dd:47:27:f7:48:68:33:03:7e:34:
92:b9:59:c7:ca:b4:84:40:19:05:55:5b:8d:69:e9:
8b:39:c7:28:99:2e:45:64:90:b7:ca:b8:5b:b2:2c:
69:c4:19:d1:eb:08:6b:bc:dd:55:7c:27:b0:d5:b7:
81:33:31:59:1b:8f:70:fa:b5:7e:b1:af:63:96:32:
09:34:85:1c:fc:11:bf:6c:57:5a:52:d9:04:62:5b:
70:19:17:6b:14:3b:df:ef:80:e9:da:e5:99:84:db:
bc:f3:4d:03:26:8d:e6:c4:75:52:40:8b:49:87:17:
e8:8a:3d:18:ca:c0:5a:f0:20:ff:07:57:3a:02:49:
05:fc:2f:58:8a:31:c2:dd:2e:58:b0:f1:91:5d:f0:
8a:5d:a1:8d:5d:c4:0b:cb:71:60:35:81:2d:e1:4a:
ee:5e:78:3e:c1:ba:aa:f0:e9:fd:14:c9:e5:e2:0f:
67:b5:db:7e:6c:bb:c0:fd:be:57:17:d4:eb:35:6e:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:8A:75:14:BC:90:2F:7F:00:A8:B5:E2:1E:69:BA:7E:52:20:58
X509v3 Authority Key Identifier:
keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/826BCE12B5F811EF928EBA43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.12.0/23
IPv6:
2001:df1:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:91:48:aa:ac:cb:b8:72:a0:1f:1c:01:64:d1:d9:a2:7d:59:
ab:e4:ef:93:54:8c:8f:88:43:26:0c:a6:f7:01:03:d3:f6:72:
fe:21:66:15:02:a1:a8:4f:48:8f:cd:d1:7a:98:ce:2f:b1:ca:
a6:e3:f4:8c:fd:1b:e8:f0:79:0d:b3:55:d1:52:75:a5:ff:a3:
ee:b0:73:bd:0f:58:f8:a0:f6:15:07:55:4a:65:81:91:7d:b2:
00:47:65:4f:12:a8:f3:25:c0:d7:a1:fa:fb:13:c3:1b:75:9c:
1d:b3:38:f6:01:52:e0:e0:dc:95:37:0c:72:66:83:85:80:8e:
4d:ca:8f:78:ec:65:89:7f:23:46:4a:f8:33:67:44:8d:fd:a6:
17:ae:05:03:cb:83:8f:a9:c0:e3:39:fc:ef:65:83:1d:93:72:
87:ba:89:5a:a2:fe:a0:d1:c5:1a:c4:04:23:df:b6:15:35:b7:
8d:e7:cf:f0:b6:97:b3:a6:76:de:be:cd:90:d4:8c:73:a2:75:
35:1d:0d:17:fa:44:f3:06:2e:77:d1:81:cd:95:ce:d8:c3:74:
4e:70:c4:55:6c:79:08:1b:6d:5d:43:42:0e:58:9a:a7:18:f0:
ae:bc:80:c4:23:6d:b0:6a:32:5f:5a:49:41:83:0e:35:0c:84:
22:ba:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:31:50 2025 by rpki-client