Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12599E46A19011EF92DF3147C4F9AE02.roa
File: 12599E46A19011EF92DF3147C4F9AE02.roa (raw, json)
Hash identifier: tyCaZZTqNnBRU1vJjnSz44S9nTanU+ziXGdh0vXYtM0=
Subject key identifier: 43:6A:02:93:06:91:E5:0E:67:71:C0:47:A6:2B:2F:D1:A3:43:2F:57
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9D3C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12599E46A19011EF92DF3147C4F9AE02.roa
Signing time: Wed 13 Nov 2024 07:22:43 +0000
ROA not before: Wed 13 Nov 2024 07:22:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135214
IP address blocks: 103.83.184.0/23 maxlen: 24
103.83.186.0/23 maxlen: 24
2001:df7:c80::/48 maxlen: 48
2001:df7:f600::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 07:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40252 (0x9d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 13 07:22:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673453c2-6b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:7e:75:07:02:33:64:1a:17:ee:4e:56:7a:
7f:53:5e:43:93:6d:cd:f6:51:f0:e8:f3:18:c2:cf:
99:63:05:0f:54:b8:49:fc:6b:9a:51:d2:ab:50:63:
48:7f:73:0e:b0:cc:ac:96:eb:1c:94:ef:33:c9:31:
b3:ce:12:31:72:27:b8:5b:02:46:7b:eb:c4:9e:7f:
9f:eb:d7:51:dc:5d:0f:2d:7d:92:5a:99:53:49:ed:
65:8a:5c:63:38:9f:1c:13:74:49:ec:0f:3e:52:78:
b6:92:35:86:e6:59:89:ea:9d:36:61:1f:e2:48:db:
bd:85:09:b2:2e:f1:f4:5f:ef:f9:a0:aa:14:f0:5e:
ef:07:52:72:b4:2b:36:ed:f4:76:06:0c:9a:67:7b:
3f:5d:a0:87:7b:2d:c6:85:f1:d1:fd:8c:1f:01:5c:
d5:38:11:e7:83:10:8d:9d:a8:23:f8:68:62:60:07:
93:46:c3:bd:21:6a:93:86:1b:92:4e:3a:25:1d:f0:
12:86:7f:30:52:67:fd:2b:cd:72:a8:60:91:b1:5a:
21:f0:33:20:e6:ed:da:0b:8f:ce:0b:ee:4f:9a:85:
04:91:5d:53:4f:1f:bf:12:5f:f4:58:05:7c:09:15:
ea:3c:0a:28:ac:1d:c4:c4:3b:68:fa:6d:b6:3d:c9:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:02:93:06:91:E5:0E:67:71:C0:47:A6:2B:2F:D1:A3:43:2F:57
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12599E46A19011EF92DF3147C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.184.0/22
IPv6:
2001:df7:c80::/48
2001:df7:f600::/48
Signature Algorithm: sha256WithRSAEncryption
4b:84:52:41:15:48:ef:d7:67:00:e3:9b:b6:c0:3d:be:2c:d9:
e3:43:8d:4b:22:78:8e:54:6e:b8:5f:f2:4d:d7:df:95:ba:07:
9a:62:aa:6d:3b:b7:da:87:d9:06:74:e9:0f:12:0d:03:17:e2:
83:1d:9f:00:d8:0d:69:8c:23:b4:41:a0:a4:58:23:2c:71:2b:
7e:4c:d4:df:f1:7c:c0:72:4c:cd:41:f2:f5:0d:5a:b6:6c:6d:
ba:35:26:53:c2:04:6d:a6:35:d7:ec:24:16:ea:ba:21:3a:90:
a0:c3:fb:ba:ff:17:bf:da:ea:33:2c:5b:c8:a2:ff:4a:e0:83:
81:4b:9c:ac:92:59:67:2d:c7:9d:64:31:0a:f7:7b:ad:57:d2:
07:a9:4e:99:2c:4e:ad:b1:4c:8b:f7:f4:ff:81:32:dc:75:a5:
de:4e:a6:9a:fd:05:c1:92:37:36:21:83:80:de:66:01:64:ad:
7f:eb:f1:a4:fc:62:41:b8:66:59:aa:0b:e8:06:7a:72:c8:75:
3c:0c:2f:91:de:07:df:b6:17:11:d9:b6:9f:4f:b9:96:e5:74:
61:39:42:72:88:ee:a9:3c:dc:77:da:fc:7d:90:1f:68:b9:a1:
32:11:13:06:af:c2:9a:30:3f:42:8f:59:9d:b0:c1:ae:33:b4:
08:1a:45:2f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAJ08MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTExMzA3MjI0M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjczNDUzYzItNmI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALp+fnUHAjNkGhfuTlZ6f1NeQ5NtzfZR8OjzGMLPmWMFD1S4SfxrmlHSq1Bj
SH9zDrDMrJbrHJTvM8kxs84SMXInuFsCRnvrxJ5/n+vXUdxdDy19klqZU0ntZYpc
YzifHBN0SewPPlJ4tpI1huZZieqdNmEf4kjbvYUJsi7x9F/v+aCqFPBe7wdScrQr
Nu30dgYMmmd7P12gh3stxoXx0f2MHwFc1TgR54MQjZ2oI/hoYmAHk0bDvSFqk4Yb
kk46JR3wEoZ/MFJn/SvNcqhgkbFaIfAzIObt2guPzgvuT5qFBJFdU08fvxJf9FgF
fAkV6jwKKKwdxMQ7aPpttj3JdNMCAwEAAaOCAq8wggKrMB0GA1UdDgQWBBRDagKT
BpHlDmdxwEemKy/Ro0MvVzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEyNTk5RTQ2
QTE5MDExRUY5MkRGMzE0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDkGCCsGAQUFBwEHAQH/
BCowKDAMBAIAATAGAwQCZ1O4MBgEAgACMBIDBwAgAQ33DIADBwAgAQ339gAwDQYJ
KoZIhvcNAQELBQADggEBAEuEUkEVSO/XZwDjm7bAPb4s2eNDjUsieI5Ubrhf8k3X
35W6B5piqm07t9qH2QZ06Q8SDQMX4oMdnwDYDWmMI7RBoKRYIyxxK35M1N/xfMBy
TM1B8vUNWrZsbbo1JlPCBG2mNdfsJBbquiE6kKDD+7r/F7/a6jMsW8ii/0rgg4FL
nKySWWctx51kMQr3e61X0gepTpksTq2xTIv39P+BMtx1pd5Oppr9BcGSNzYhg4De
ZgFkrX/r8aT8YkG4ZlmqC+gGenLIdTwML5HeB9+2FxHZtp9PuZbldGE5QnKI7qk8
3Hfa/H2QH2i5oTIREwavwpowP0KPWZ2wwa4ztAgaRS8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:49:07 2025 by rpki-client