Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/791D3E2C1F3911F0A4C56918C4F9AE02.roa
File: 791D3E2C1F3911F0A4C56918C4F9AE02.roa (raw, json)
Hash identifier: lU07E6RVleJ+34s0JLrrOrkSPVjEGfRCdE3bY9HusLM=
Subject key identifier: C6:C1:43:8D:CD:42:74:FD:DE:24:F6:02:05:25:48:51:85:8E:16:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AF92
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/791D3E2C1F3911F0A4C56918C4F9AE02.roa
Signing time: Thu 24 Apr 2025 09:21:35 +0000
ROA not before: Thu 24 Apr 2025 09:21:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141574
IP address blocks: 103.160.210.0/23 maxlen: 24
2406:f140::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Apr 2025 11:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44946 (0xaf92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 24 09:21:35 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=680a029f-e110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:09:8d:66:53:27:d9:ab:b9:e7:ac:ff:e6:
90:80:79:5c:d6:87:d0:3c:84:db:b7:51:93:96:99:
b4:81:34:6b:76:4a:7b:1a:18:20:a0:ae:0e:36:97:
05:a7:36:01:84:35:84:e5:0d:26:46:37:c4:4c:24:
39:86:07:33:4f:8d:42:65:9d:77:e8:44:f5:66:9d:
fd:45:f9:c9:2d:76:b4:39:75:b8:dc:2b:ac:7c:fb:
24:fb:33:1f:06:c9:9d:84:86:30:62:a9:64:df:29:
5e:6c:70:a4:b0:1e:67:d8:c2:85:21:27:28:e4:d0:
85:25:a9:9f:f1:16:f8:e3:ff:db:4f:19:21:f5:18:
b8:04:41:87:8f:00:8c:79:58:af:e1:80:99:ed:a4:
c5:11:f2:8d:66:91:d5:45:60:b9:35:27:16:73:85:
ae:1d:bb:f6:c8:1d:c8:12:57:07:bd:6c:06:1d:47:
67:6b:c5:60:2f:a5:ff:33:6d:b9:d1:74:1c:2c:75:
30:2e:43:fe:ad:23:23:e5:bd:15:6d:1c:a9:9e:6a:
cf:4e:3c:1c:ab:ff:5c:a9:72:a2:76:19:0f:b1:68:
e1:d9:62:3b:fd:48:18:29:da:55:51:1f:94:1b:6a:
04:d0:c8:7a:5b:1c:17:3b:b2:ca:97:1b:47:6f:c0:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:43:8D:CD:42:74:FD:DE:24:F6:02:05:25:48:51:85:8E:16:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/791D3E2C1F3911F0A4C56918C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.210.0/23
IPv6:
2406:f140::/32
Signature Algorithm: sha256WithRSAEncryption
09:9a:53:ba:6c:c5:a2:98:09:6b:d2:d0:b0:41:3f:ed:da:ba:
65:80:21:b8:f1:bf:d9:a7:4d:62:d3:d7:87:ed:8a:9d:00:e2:
90:c8:69:9e:ff:a8:78:7f:d9:15:11:ab:62:38:d1:e9:58:69:
cf:38:ec:cf:b9:c4:69:ec:17:7d:ea:a6:a6:ab:a2:bd:68:b4:
e1:53:31:8c:7a:76:14:d3:70:06:b6:9b:13:44:0f:11:8e:8c:
9d:6a:19:76:69:bd:81:bd:3f:f9:3b:94:88:de:4d:4a:a5:03:
60:6a:49:4b:f6:7e:f3:7c:dc:b9:68:c9:20:85:ac:2a:03:12:
72:7d:44:88:68:cd:a1:26:a8:a0:50:6c:b6:47:14:78:a3:b4:
92:9b:fe:96:fc:4d:d7:e9:fc:12:8a:ac:e2:06:d6:1e:2e:9c:
7b:66:82:af:d3:a1:45:72:26:54:bb:18:27:13:c6:2c:ec:c2:
3f:a3:ba:cb:82:49:04:d2:19:3c:27:74:a2:6e:d3:34:07:5c:
36:db:ca:a9:6e:61:2b:24:f3:24:9d:b5:72:0f:c2:89:8a:22:
24:1d:4c:32:15:c7:8b:7a:e6:9f:2c:be:03:d2:68:d3:a1:e4:
d2:ac:ed:5e:e6:17:ab:6e:92:44:68:36:b3:27:06:1c:8f:b3:
54:8f:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:36:45 2025 by rpki-client