Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8020E44E2D4F11EFA625F81DC4F9AE02.roa
File: 8020E44E2D4F11EFA625F81DC4F9AE02.roa (raw, json)
Hash identifier: b6l/BTf1sj86KRzHOxQhTMmER6R9+n2g6wbCGcbef88=
Subject key identifier: DC:F3:85:89:5A:73:8E:4F:6E:5B:B0:D7:2F:A3:27:7A:99:7C:49:27
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 92A5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8020E44E2D4F11EFA625F81DC4F9AE02.roa
Signing time: Tue 18 Jun 2024 08:48:15 +0000
ROA not before: Tue 18 Jun 2024 08:48:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135267
IP address blocks: 103.215.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 08:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37541 (0x92a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 18 08:48:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667149ce-915e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:2a:c5:c7:ff:a2:02:44:5c:9d:82:fb:3b:
21:7f:a5:f1:5c:0c:05:69:57:76:61:d7:c1:b9:7b:
83:98:27:55:b4:d2:2d:f6:62:96:02:81:c4:63:2b:
61:5c:00:5d:0a:df:fd:46:18:d3:cc:24:8d:e5:24:
20:a3:f9:ef:0e:34:1e:4b:29:52:20:b1:e0:4b:79:
01:8b:1e:d7:64:77:fe:74:24:4a:f6:fc:31:01:ca:
b0:c7:24:26:36:67:40:06:06:f3:f1:2e:96:c7:56:
36:ea:57:6e:03:b5:42:35:b4:09:c8:22:ba:59:33:
2b:05:05:e6:18:1f:0f:c8:20:80:d3:de:f1:53:42:
e2:6f:89:fd:8f:79:95:3d:9d:2d:ac:b7:83:23:99:
85:85:a6:2e:e5:b9:c5:a4:fb:90:f7:7e:d3:47:24:
f2:90:e4:e6:49:02:0d:20:09:72:ef:aa:9d:b7:40:
8a:76:a2:c7:2a:22:19:01:cf:8d:91:26:35:10:24:
7f:18:cb:70:87:1e:4e:3d:fd:ce:72:4f:c2:75:6b:
e9:91:84:d2:f5:a2:71:21:f3:b1:d2:6a:d1:54:72:
eb:37:9b:15:c1:f6:eb:f6:7b:9a:36:5b:d2:6f:07:
91:4d:dc:59:bb:d5:93:cd:fd:ca:7b:1a:10:85:bd:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:85:89:5A:73:8E:4F:6E:5B:B0:D7:2F:A3:27:7A:99:7C:49:27
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8020E44E2D4F11EFA625F81DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.164.0/22
Signature Algorithm: sha256WithRSAEncryption
97:26:e8:f5:fd:91:0f:51:26:75:e6:9f:60:20:0f:5e:46:45:
41:36:fc:56:01:23:f6:14:ae:b5:62:c8:0e:01:14:57:f0:f5:
a8:9d:e1:fa:0c:9d:3c:e4:eb:1b:cb:bf:5b:7a:6f:a0:7c:f5:
08:90:45:4c:41:08:93:5d:da:c4:60:64:4b:e6:3b:7f:52:b5:
03:f1:95:96:33:8a:32:c2:8c:dc:c4:b1:5d:bc:57:a6:47:65:
df:3f:21:39:f6:c4:cf:e9:c8:5a:a1:b8:8e:18:d2:52:4e:db:
c9:9e:00:97:69:22:02:ec:b2:99:21:7c:a1:18:fc:80:0b:b1:
80:a7:50:d1:d8:2d:60:bd:92:65:b8:ee:03:bf:d8:f2:f2:ae:
4d:dd:e1:ef:e9:17:30:4a:b3:fa:0f:82:30:07:76:99:61:f3:
92:0c:10:ba:de:ea:a8:4a:77:9f:9c:15:4a:e9:02:12:24:30:
03:07:d3:0a:74:ce:f5:0f:36:75:14:c9:c4:28:9e:d2:49:6e:
ff:5c:42:eb:36:3e:8d:cb:51:b9:80:5e:be:c5:59:77:e4:f1:
bc:1c:05:e2:8c:dc:9b:f5:5d:a8:f8:c6:f2:f4:cb:a7:b0:f0:
9f:0d:ba:31:3a:a6:6e:dd:4d:9d:59:18:b7:2a:5a:c2:7b:53:
f0:75:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:34 2025 by rpki-client