Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/E018A9F237A011EBBF397436C4F9AE02.roa
File: E018A9F237A011EBBF397436C4F9AE02.roa (raw, json)
Hash identifier: cXalsjKWAOtUPp8AnjktbIHrzMdXeUvyHoVuwFoJyJc=
Subject key identifier: 00:69:D2:4F:F8:21:E9:B9:32:4A:D2:FF:DD:8A:FB:06:83:B5:3A:C3
Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial: 06A6
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/E018A9F237A011EBBF397436C4F9AE02.roa
Signing time: Mon 12 Aug 2024 22:41:31 +0000
ROA not before: Mon 12 Aug 2024 22:41:31 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140973
IP address blocks: 103.154.12.0/23 maxlen: 23
103.154.12.0/24 maxlen: 24
103.154.13.0/24 maxlen: 24
2001:df1:ffc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Dec 2024 06:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Validity
Not Before: Aug 12 22:41:31 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ba8f9b-89b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:7a:ef:ef:6c:a9:81:6d:a3:60:0a:b0:33:
80:dd:88:cf:94:c9:24:b4:bd:05:d8:a6:0d:9b:85:
dc:83:95:d8:3d:bf:21:f6:e9:65:1b:ff:9c:81:13:
9b:e3:eb:8d:8a:06:ac:6f:da:89:24:2c:55:23:c7:
61:9f:cc:65:bb:08:04:cb:91:76:2d:64:b0:5a:14:
b8:e4:41:85:19:de:c7:cb:52:d3:d0:22:d8:ef:94:
62:ab:07:90:6f:f4:e6:64:33:86:3e:a5:86:a5:78:
90:8c:21:42:35:e1:df:8e:8b:af:15:fc:9a:67:c1:
5a:49:9e:5a:b4:3a:f8:97:24:09:51:4c:d9:65:9b:
ad:1c:c4:e9:c2:6f:f4:55:8c:5e:db:71:09:b4:7b:
fc:f2:ce:cc:1a:5a:7d:55:54:76:51:00:69:db:b5:
fb:8d:7c:a2:1b:dc:cf:2e:7c:36:48:15:4b:a8:9a:
96:14:28:d4:2b:d4:f7:3d:5e:98:3c:61:21:b3:75:
4f:31:d0:66:3c:6f:63:ef:21:e0:a8:93:7b:40:b7:
73:d9:1c:85:32:ea:3a:04:06:bf:48:b2:b7:5a:8f:
fd:06:07:10:ce:c6:77:51:2a:05:c9:b1:f7:c9:5b:
eb:70:e9:d8:56:f8:92:b7:d9:81:63:6d:44:e0:90:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:D2:4F:F8:21:E9:B9:32:4A:D2:FF:DD:8A:FB:06:83:B5:3A:C3
X509v3 Authority Key Identifier:
keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/E018A9F237A011EBBF397436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.12.0/23
IPv6:
2001:df1:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
91:35:48:59:0e:26:e9:58:46:52:03:c2:3c:35:99:81:68:ca:
3c:2b:63:35:7d:3c:ce:42:82:bb:47:ed:da:ca:27:c5:f9:26:
64:55:b2:b1:58:13:71:9a:33:0c:25:7d:9c:2b:2d:5a:4e:46:
1c:df:6e:d3:f6:a1:a8:f6:cb:b7:6f:c5:20:18:d9:08:50:31:
27:10:b2:0b:dc:18:df:af:72:5d:a0:f6:f5:8a:37:01:c4:14:
06:8b:c9:a1:3b:e2:00:35:c8:b8:c2:bd:01:f9:98:cc:10:0e:
89:c8:a7:b8:bd:dd:48:1a:9b:31:30:77:68:53:db:6c:67:2c:
82:46:c5:7f:2d:73:fc:28:61:d6:27:00:8a:f9:73:ea:16:05:
78:26:46:7d:85:5a:3b:68:ca:35:0c:23:09:e7:f0:2d:99:0a:
28:c9:84:7b:13:e9:49:c8:3a:8c:7a:ad:d1:13:b0:a1:f3:46:
b2:fd:b1:5e:61:7f:cd:10:e6:05:6a:13:e4:97:18:67:c3:97:
b8:b1:8e:09:4b:a0:99:b4:17:0e:7d:b0:cc:55:38:15:ba:90:
87:54:03:db:d7:0a:20:9e:d3:c6:0b:08:63:50:84:7a:a0:7f:
17:80:fd:fb:af:e0:71:27:e7:c0:2d:82:fe:c6:f8:cb:37:dc:
57:b4:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:32 2025 by rpki-client