Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4950D0921F4C11F0A0F28121C4F9AE02.roa
File: 4950D0921F4C11F0A0F28121C4F9AE02.roa (raw, json)
Hash identifier: CcKJ2WzwYA1MSARg4ul8yJQbdIvoo18hgSpGzSUXrsM=
Subject key identifier: 2D:40:5C:CC:8D:28:16:1A:D8:EB:20:3E:7D:7E:65:5E:7F:77:63:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AF38
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4950D0921F4C11F0A0F28121C4F9AE02.roa
Signing time: Tue 22 Apr 2025 07:34:56 +0000
ROA not before: Tue 22 Apr 2025 07:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150086
IP address blocks: 103.99.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 10:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44856 (0xaf38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 22 07:34:56 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6807469f-33dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:9d:f4:4e:7f:1a:51:88:4f:b4:08:b3:b7:
bf:b2:2a:eb:f2:2b:3f:6f:cc:ea:db:21:a0:13:ea:
51:9b:6b:87:d1:15:b9:c4:d3:49:d9:55:cb:7c:7c:
7f:d3:02:5d:7d:fb:a9:24:58:12:38:db:10:69:5b:
6c:96:56:db:d9:0d:1b:c0:ec:5c:10:88:1f:ca:e1:
ad:e3:ab:6a:1d:a3:a1:c6:24:33:00:14:c8:7d:ce:
96:7f:20:b3:d4:11:b6:95:70:ea:8c:24:ff:fe:45:
8a:3f:fb:48:c4:4f:3f:90:f7:89:f3:44:88:50:9c:
23:8f:7f:d5:f7:93:97:90:bc:a8:d7:dc:80:87:c5:
b4:9e:92:6c:d7:01:b0:6c:b2:3c:e3:0d:2b:28:e0:
ea:f2:2f:3a:ce:a5:54:91:26:44:4b:e0:46:87:f9:
f0:06:20:74:9d:15:e2:3b:fc:e6:bb:11:14:e4:c1:
3e:52:08:00:66:82:3c:d5:3e:14:ab:18:1a:71:d8:
66:25:f0:11:1e:fb:d6:82:51:a5:a1:b8:38:95:8f:
90:a1:09:d7:8b:2b:fd:1e:da:25:63:87:64:53:98:
8f:7e:b1:8e:b6:51:3e:1e:7e:f5:f8:69:29:42:59:
3a:72:0f:ce:d4:f9:3d:31:ce:38:97:e2:8f:ca:72:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:5C:CC:8D:28:16:1A:D8:EB:20:3E:7D:7E:65:5E:7F:77:63:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4950D0921F4C11F0A0F28121C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:57:f1:45:8e:63:df:0c:69:d2:83:63:3d:2e:5d:88:55:ea:
eb:d4:6f:8e:fa:34:a4:21:db:2b:d1:94:02:43:1d:1f:87:69:
27:b0:5a:7e:9b:52:c4:10:37:27:67:fc:1a:e1:db:c4:09:de:
9a:c7:1e:c2:89:90:c3:ee:ec:e8:aa:38:ca:92:55:ad:fb:e0:
51:00:b8:d3:e8:0a:ff:94:7b:12:5d:cb:41:d0:f3:60:ba:1a:
61:0a:73:b7:4a:8a:13:e2:66:f1:37:b0:54:cf:17:52:da:55:
0f:9f:69:85:d5:3f:d0:d4:6f:ee:3f:23:40:4f:f1:b6:c9:7b:
7e:de:de:07:ed:b9:e7:85:80:80:03:19:4b:2e:c3:79:35:52:
f4:06:18:dd:d7:ec:ae:0c:7b:c9:21:4e:96:f9:05:17:1e:3a:
3c:5c:17:e0:83:0c:e5:45:d4:97:fa:a9:32:a2:c6:56:cd:fb:
3b:24:79:6c:0c:2e:8e:14:79:e1:8e:78:5a:99:da:f5:82:01:
4f:75:d8:af:f6:c8:30:af:94:0b:72:d2:51:6d:64:9a:59:30:
f7:ac:71:22:3b:7b:ab:ab:10:e6:2f:12:f4:ac:a6:87:f2:81:
22:e2:5d:d2:15:cf:e1:1e:b5:95:c6:51:29:86:4d:40:94:d7:
7e:d7:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:01 2025 by rpki-client