Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/B056A1C6BC4711EFAB43324BC4F9AE02.roa
File: B056A1C6BC4711EFAB43324BC4F9AE02.roa (raw, json)
Hash identifier: h8M9IUHlQIkn3bNMdwAbs8V728nPXBUN5sQSzK4W+18=
Subject key identifier: F6:D0:04:F4:8E:9D:E2:7E:EF:B1:BD:C9:94:8B:3D:CB:4E:2F:02:EF
Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial: 0707
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/B056A1C6BC4711EFAB43324BC4F9AE02.roa
Signing time: Tue 17 Dec 2024 07:24:35 +0000
ROA not before: Tue 17 Dec 2024 07:24:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 45654
IP address blocks: 103.49.4.0/22 maxlen: 24
103.246.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 04:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Validity
Not Before: Dec 17 07:24:35 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67612732-b4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:dd:ac:23:9c:d9:6e:5a:10:b0:f4:7e:11:
ef:b7:52:23:14:6e:0a:62:29:b0:ed:1a:c6:52:b6:
42:df:98:84:8e:34:40:cb:53:c9:bc:6f:b9:50:6d:
77:1d:4f:a6:ef:aa:cd:a6:5f:69:09:10:91:c7:bd:
fb:60:2e:b8:31:64:9b:96:7d:6a:8f:d2:f8:4a:f0:
cf:fa:82:ea:18:75:de:97:0d:5b:b9:6c:e3:70:ae:
80:32:34:48:28:29:91:70:2a:17:ba:c3:af:13:db:
5d:46:fa:a0:64:70:9f:0f:eb:d8:e8:48:02:45:e0:
99:68:c6:a0:b1:5d:70:3d:fd:81:1d:99:87:f8:32:
4c:f0:16:ba:16:0b:b4:46:5b:fc:0d:56:94:2b:2d:
b0:35:64:c9:ca:3b:71:bf:c8:d6:f7:eb:6e:9c:4b:
b9:a6:96:90:72:b5:d1:85:a9:60:a2:69:9a:18:f2:
31:22:8b:34:7c:83:43:d4:80:c3:59:20:8a:3a:f2:
86:b9:10:dc:10:a3:14:36:90:f9:d2:a1:11:e3:1d:
3c:f8:dc:44:61:c5:81:c4:1e:6b:7d:be:e3:42:76:
60:2a:f2:6d:81:6a:c7:79:b7:b7:81:31:88:c3:a1:
95:d1:f4:5b:8b:75:ba:9b:d1:f8:8a:65:87:b9:e4:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:04:F4:8E:9D:E2:7E:EF:B1:BD:C9:94:8B:3D:CB:4E:2F:02:EF
X509v3 Authority Key Identifier:
keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/B056A1C6BC4711EFAB43324BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.4.0/22
103.246.4.0/22
Signature Algorithm: sha256WithRSAEncryption
77:1a:2c:d2:a9:eb:0f:17:4b:3b:32:1d:dc:d9:d3:41:34:2d:
1e:9f:1b:c1:b2:c7:e7:4b:f6:a4:cc:52:f7:e5:3b:a5:c7:f9:
6f:c5:41:9e:9c:47:22:ad:84:bf:39:f0:db:1b:1c:2b:65:f1:
cf:6b:ec:ea:8b:3f:a7:66:d8:ad:aa:53:58:76:64:f8:81:61:
6b:c1:9b:db:e5:6d:04:17:bc:fc:68:56:52:5f:b6:7b:fd:72:
f6:ba:9f:79:ca:86:fc:f3:26:c1:36:fe:f1:41:5e:ad:6b:14:
1b:5a:ef:0e:73:2a:8e:4e:c6:7d:46:a3:43:06:f9:8f:ff:65:
48:98:4b:ba:e8:39:31:2a:19:61:1f:ce:0f:98:a3:32:cd:78:
70:07:0f:3d:fd:19:b1:b0:3d:ad:a1:a0:80:83:a3:ec:b4:a4:
e6:91:d9:e1:9c:41:07:d5:68:99:7a:b3:db:29:d8:4a:35:c2:
43:8d:07:97:c1:c4:91:42:9d:b6:ab:bf:51:20:ce:16:7f:42:
99:01:08:98:75:ca:8b:23:bc:49:3c:b0:e9:9d:9c:70:50:15:
c5:19:60:73:27:0d:47:1a:31:f6:6a:ce:c2:e3:14:79:ad:e6:
67:6d:96:de:5d:4e:dd:9e:17:f3:64:ca:eb:86:eb:97:1c:35:
c0:06:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:02:59 2025 by rpki-client