Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2060D5900EE611F0918FFF6FC4F9AE02.roa
File: 2060D5900EE611F0918FFF6FC4F9AE02.roa (raw, json)
Hash identifier: lRj4EHX8OvzSfCvUqvyV8f+sMIPm8aXkWBlwZbdngJA=
Subject key identifier: EE:D8:AE:33:05:DC:E2:89:19:37:0F:8F:A2:5C:0C:20:13:E3:60:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AD3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2060D5900EE611F0918FFF6FC4F9AE02.roa
Signing time: Tue 01 Apr 2025 10:43:20 +0000
ROA not before: Tue 01 Apr 2025 10:43:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150577
IP address blocks: 103.54.176.0/24 maxlen: 24
103.54.177.0/24 maxlen: 24
2001:df1:b140::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 08 Apr 2025 12:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44347 (0xad3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 1 10:43:20 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ebc347-7c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:6c:dc:10:1c:c1:53:a7:25:da:4a:72:1e:
c5:7b:6f:f3:58:00:b7:f7:4f:80:fe:ed:ae:3b:48:
22:ae:1a:44:ca:c4:6a:06:b7:ba:c9:39:22:51:d5:
e5:63:ae:b0:1f:06:20:8d:2e:14:ab:14:88:56:d1:
b0:8a:6b:85:ff:16:43:a4:6e:3e:3a:08:5c:19:e1:
7c:ee:68:cb:36:6f:38:62:40:e8:f7:c2:de:33:38:
fb:d8:5a:42:5c:e4:b9:73:21:e8:8a:3b:a2:18:b7:
b9:6d:ea:17:67:4e:ef:13:e1:93:62:b4:62:8d:e1:
df:9c:62:5d:59:ca:fe:9b:13:a7:b3:93:9d:d5:55:
34:d7:00:ac:d4:a9:10:a4:81:55:60:fd:7d:0c:26:
6e:43:83:2d:c0:06:4a:6d:03:b9:05:57:47:45:29:
e0:08:3b:8d:be:58:87:f0:12:95:a0:56:a1:f7:f3:
4f:95:76:e8:09:e2:72:17:7f:52:62:e0:93:2f:59:
d1:87:d0:80:a7:67:bf:91:ff:25:13:b3:30:6d:53:
51:6f:f9:a8:d6:75:96:f6:eb:a1:a1:b6:f8:83:f6:
af:44:b0:47:0e:0c:0c:8e:d0:8c:30:3f:52:74:f6:
62:aa:48:17:64:3d:7d:45:3a:18:57:36:b5:62:b9:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:AE:33:05:DC:E2:89:19:37:0F:8F:A2:5C:0C:20:13:E3:60:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2060D5900EE611F0918FFF6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.176.0/23
IPv6:
2001:df1:b140::/48
Signature Algorithm: sha256WithRSAEncryption
92:a3:74:f9:96:c1:8d:94:2e:f3:ce:94:54:67:05:fb:e5:99:
49:c3:19:6b:c8:93:e3:ad:87:fd:59:b7:24:22:36:2e:52:a5:
67:07:46:11:84:b2:48:86:99:63:fc:7e:8d:c2:fe:ff:89:bb:
d9:f1:1f:b6:97:97:8c:3e:be:0f:ff:04:42:0d:3e:70:28:f6:
71:65:03:cd:9b:4b:cc:43:06:2e:6a:6f:c3:4d:c4:12:21:ad:
37:ea:ea:da:e2:62:19:47:bf:55:2e:3d:e0:13:b9:9e:a5:f5:
52:37:bb:22:c8:f7:61:e7:8c:0d:cb:79:52:64:09:59:5f:73:
c5:22:11:71:00:ca:98:23:de:f0:e9:70:6a:6f:6f:31:e9:e8:
77:ef:85:08:7a:0c:13:36:bb:75:7c:fa:27:78:54:46:5e:bc:
b0:48:c3:45:f6:30:95:42:7b:d2:6c:2c:af:4e:36:07:60:5d:
ca:7f:7b:46:8b:f6:4c:e5:5b:3d:f9:1a:58:57:63:40:be:7b:
46:36:c9:fd:fd:0e:2f:f0:3c:61:41:79:8d:1a:fe:19:aa:c5:
97:e3:1d:35:b9:21:0d:9f:f9:54:1b:50:19:f1:2e:55:f1:b5:
14:76:3a:d1:57:a1:e7:dc:f4:d2:47:f3:86:7a:cf:30:69:1a:
0d:95:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:57:13 2025 by rpki-client