Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1EEC9958FF1C11EF93501B76C4F9AE02.roa
File: 1EEC9958FF1C11EF93501B76C4F9AE02.roa (raw, json)
Hash identifier: lCZOCljVBFr+AUFc1/TWaSFt6BzD3QnRcu4hfK8vwF8=
Subject key identifier: 63:A1:58:CB:07:83:BC:13:ED:F0:97:EE:E2:F6:23:23:17:3C:17:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AAA7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1EEC9958FF1C11EF93501B76C4F9AE02.roa
Signing time: Wed 12 Mar 2025 08:29:31 +0000
ROA not before: Wed 12 Mar 2025 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133648
IP address blocks: 103.50.150.0/23 maxlen: 24
103.79.168.0/22 maxlen: 24
103.79.248.0/22 maxlen: 24
103.95.164.0/22 maxlen: 24
103.163.62.0/23 maxlen: 24
103.167.98.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 08:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43687 (0xaaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 12 08:29:31 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d145eb-9575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:0f:6c:25:0d:ab:c3:28:a6:e2:2e:00:01:
43:98:40:9a:24:b8:0a:66:b4:ae:8e:9d:f3:7b:9b:
5a:fd:e1:db:33:9a:35:fd:e3:b8:31:1f:e6:cc:19:
80:8e:6a:af:a6:3c:95:ff:1f:c6:9c:e1:d3:fb:6d:
9f:9e:b6:0e:a9:57:16:46:e5:5f:99:be:71:da:28:
ba:a6:be:c2:11:5d:5b:02:91:a7:5b:cb:86:42:0d:
b1:b8:15:ea:20:b8:c4:08:d1:5d:73:6c:23:ad:7e:
15:4a:3d:80:05:1e:9c:c3:f3:f6:6c:92:e5:43:35:
1a:10:19:b5:51:af:45:bd:e0:7f:9a:7a:d2:ca:dc:
f8:76:c7:59:6a:9d:a6:41:2c:65:b7:81:ea:15:0b:
da:3c:56:09:e0:2f:f4:be:93:68:50:6d:29:de:55:
cd:17:f5:00:57:2c:75:3b:bd:82:8d:02:95:fe:3a:
a7:df:7e:2e:d9:f2:f1:2f:1c:de:c2:a0:1c:8f:90:
01:9a:74:ab:72:d1:ef:4c:e5:41:ac:a5:99:48:a4:
19:1d:39:df:f8:af:79:93:19:ba:1e:ef:a4:b5:87:
7b:eb:4b:4c:64:7e:cb:9c:8c:1e:71:06:c7:1e:16:
73:42:ae:54:a3:bb:16:26:d9:fc:27:d7:fc:eb:f4:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A1:58:CB:07:83:BC:13:ED:F0:97:EE:E2:F6:23:23:17:3C:17:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1EEC9958FF1C11EF93501B76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.150.0/23
103.79.168.0/22
103.79.248.0/22
103.95.164.0/22
103.163.62.0/23
103.167.98.0/23
Signature Algorithm: sha256WithRSAEncryption
11:cb:0c:a3:11:9d:c3:95:23:35:ec:36:e2:1a:d8:21:9a:eb:
67:39:cf:97:81:03:42:15:42:05:31:27:37:85:2e:52:66:93:
44:b0:b6:f4:e9:c6:19:e2:30:02:74:46:b6:8f:45:63:e9:a1:
2b:c8:5d:79:27:99:5c:db:ba:f2:9f:f0:bd:bb:13:02:a8:16:
69:c4:36:0f:7e:cd:f7:5f:40:91:05:b5:07:39:62:f7:da:58:
96:d9:f2:3e:ad:e7:55:36:02:aa:bc:41:f5:c4:74:98:19:b2:
f7:f4:6a:54:6b:bd:f8:d1:1e:cc:5a:9f:9e:25:9b:e7:f3:ed:
52:da:87:d7:3a:3f:6c:aa:a4:85:4e:63:2b:4b:d6:e9:4b:32:
e0:ab:69:b3:85:ca:fb:9c:4d:76:d7:d8:e1:31:06:08:d2:a9:
7c:38:1a:53:da:79:27:c7:7f:62:b3:1d:41:89:d7:64:5c:7f:
78:ae:0d:74:ff:54:3e:f5:2e:15:b3:91:34:ac:fa:10:c8:02:
4e:67:29:9f:40:86:09:a5:c9:f4:5f:06:4f:59:6f:81:92:bc:
1c:40:ea:92:8a:7d:c4:d7:d1:5f:42:69:34:89:52:de:d9:d5:
7c:12:1a:3d:a3:f8:11:f0:57:cd:67:61:31:ae:78:49:4c:3e:
f2:f9:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:30:29 2025 by rpki-client