Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20CDFBF21E8611F0A2343C67C4F9AE02.roa
File: 20CDFBF21E8611F0A2343C67C4F9AE02.roa (raw, json)
Hash identifier: yxqEmtMtyvFTlm320gDqyf4ATx+yOUSygISRW4re2Ms=
Subject key identifier: 7A:6E:04:00:6C:87:B9:24:8E:27:10:9C:2A:71:4F:CF:6C:09:DA:5F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AF0F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20CDFBF21E8611F0A2343C67C4F9AE02.roa
Signing time: Mon 21 Apr 2025 11:22:25 +0000
ROA not before: Mon 21 Apr 2025 11:22:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132932
IP address blocks: 43.230.104.0/22 maxlen: 24
103.155.94.0/23 maxlen: 24
103.189.40.0/23 maxlen: 24
103.208.52.0/22 maxlen: 24
103.243.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 10:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44815 (0xaf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 21 11:22:25 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68062a71-3aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:69:41:77:f1:4e:8a:03:39:cd:22:92:b1:
70:33:ae:d8:78:e1:7b:e2:84:98:cd:72:a6:db:e8:
10:ea:2d:39:b2:c0:dc:34:bf:fa:67:ca:e4:a3:41:
18:6f:b4:15:6f:e6:5e:67:9a:2d:22:2d:19:7f:9f:
83:9f:55:5d:06:60:39:12:ba:49:e2:22:85:65:98:
35:35:f8:b8:55:3a:fd:99:4d:85:5f:f7:06:40:30:
b2:94:ad:63:43:ab:e5:51:e6:7d:a8:be:75:78:b2:
68:48:55:ba:65:78:62:c0:81:fe:e5:a8:f0:b7:3a:
51:9c:5a:1f:48:87:f4:87:32:5d:c1:a4:0c:db:ed:
28:2f:d3:fe:cc:66:9d:57:b9:ae:83:3f:03:4b:2d:
6e:ad:c2:43:ae:a8:7c:ac:3e:f0:b6:1b:5a:00:93:
ea:b3:8f:29:46:a4:30:3b:a2:08:d0:c1:e4:c2:45:
16:3b:8e:8c:97:be:59:ff:50:b6:a4:e2:66:51:6a:
0e:43:65:ce:bb:b1:da:9c:0c:e8:84:43:cf:8a:cc:
b0:23:68:27:49:3b:60:32:6c:4a:df:2f:f1:ca:52:
63:fa:b5:8f:92:6a:be:a9:96:60:f7:90:c5:72:fe:
2a:7d:80:6b:4f:b9:09:f0:e0:e1:57:ce:79:a7:8b:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6E:04:00:6C:87:B9:24:8E:27:10:9C:2A:71:4F:CF:6C:09:DA:5F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20CDFBF21E8611F0A2343C67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.104.0/22
103.155.94.0/23
103.189.40.0/23
103.208.52.0/22
103.243.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:33:32:52:59:4f:3a:5c:6d:8a:76:8c:7b:d4:bf:74:fb:15:
4c:4d:e2:e6:06:41:72:a1:ee:76:ca:32:3b:30:a1:1e:b2:dd:
e6:66:d4:dc:29:71:c7:24:4a:88:e4:c8:fc:46:09:85:ae:77:
8a:a6:4a:05:46:49:55:44:f9:fd:74:32:8c:0e:95:f2:6c:64:
9d:b7:3d:e6:01:5d:f2:3c:89:f5:06:fc:da:18:35:96:eb:0b:
80:18:45:a1:16:47:e5:c1:b4:6b:9e:66:8e:39:76:0c:13:14:
5b:cc:5b:13:34:e3:82:99:b7:b3:9d:e0:64:d6:e1:c7:21:25:
d4:15:4b:87:42:35:67:e3:49:e9:4c:81:e7:6d:1b:89:db:a7:
dd:ae:8a:fa:52:db:3c:8c:84:37:1e:eb:e4:ee:cf:53:e8:6b:
16:3c:45:0d:05:41:f0:89:a8:20:6d:dd:31:1a:0d:d9:0e:c5:
50:35:7d:29:65:96:42:68:7a:5d:47:27:84:61:16:27:e0:be:
99:7a:51:e8:58:1c:7d:e1:6e:b9:03:c2:e0:fe:02:7e:31:3a:
97:34:f4:6d:74:63:c8:13:e6:c2:06:fc:68:95:42:79:3b:8e:
cb:72:6b:2f:dd:b2:96:ff:bc:9a:04:9a:36:36:66:bc:a3:c2:
5a:0d:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:32:45 2025 by rpki-client