Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/A98EC1AEBD3011EF88EA014AC4F9AE02.roa
File: A98EC1AEBD3011EF88EA014AC4F9AE02.roa (raw, json)
Hash identifier: 2WNUNHlwd/bP1LozSlYJayJ285iG4/FEGUg/ZD/fdZ8=
Subject key identifier: 6F:65:D6:0D:0D:9F:BC:7B:F6:50:60:07:17:C0:01:BA:C3:B9:BB:5B
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 040A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/A98EC1AEBD3011EF88EA014AC4F9AE02.roa
Signing time: Wed 18 Dec 2024 11:10:17 +0000
ROA not before: Wed 18 Dec 2024 11:10:17 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 149977
IP address blocks: 203.32.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 23:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Dec 18 11:10:17 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6762ad99-f3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:be:31:bf:51:f6:70:bb:9d:d0:3a:b1:9a:
f7:de:28:a5:6b:0f:06:9c:3d:2a:59:19:f8:2c:82:
13:03:c3:53:7f:8f:b7:f7:b9:0b:27:dc:7e:d7:19:
56:32:f0:3e:20:1b:47:62:66:e0:90:6d:87:09:31:
c0:7e:2d:d9:41:3b:52:af:f6:20:4d:39:fb:26:b2:
6f:82:0b:ba:dd:1e:4a:8f:4d:9b:e5:d0:70:0b:19:
38:29:eb:f9:63:46:62:0f:21:81:e4:05:90:3e:7c:
49:6a:18:5f:a9:36:02:f9:ed:90:ff:b5:a4:99:15:
93:16:de:e9:a2:f0:c8:68:9f:34:52:49:66:d5:71:
71:a0:46:c4:5f:87:7e:e3:b3:4a:75:9f:f9:cc:47:
c9:8e:07:9b:40:71:e9:51:4d:15:99:9f:09:5f:f5:
5c:ab:05:6d:9d:3b:3d:b4:41:8e:60:97:6e:e3:6c:
11:44:12:f6:a3:f1:e3:ef:47:6e:ba:df:7c:c2:c5:
2b:57:9b:8e:a9:fc:b3:5e:40:0a:e7:8c:09:f1:c9:
69:a0:66:16:d2:0d:db:95:c8:9d:77:80:f7:be:d3:
6a:8a:49:0e:31:23:18:49:8d:72:2d:1b:0b:48:51:
85:87:d6:9e:85:45:47:8a:0c:94:80:f3:d2:f4:ca:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:D6:0D:0D:9F:BC:7B:F6:50:60:07:17:C0:01:BA:C3:B9:BB:5B
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/A98EC1AEBD3011EF88EA014AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c5:18:6b:4d:82:bc:8b:24:cd:7b:a0:78:58:11:e0:c9:b6:
37:2f:09:70:a1:19:c7:4d:12:cb:0f:96:94:2c:d7:0d:a6:7a:
c4:82:80:09:35:a0:73:02:d1:5a:10:d5:0c:3e:2c:7f:3c:dc:
54:69:d4:24:26:a8:d2:7f:67:bc:60:25:be:65:94:39:ad:d9:
95:9b:c0:1f:de:78:f6:f3:27:f8:a7:36:1c:68:69:bd:2e:2d:
b4:55:9f:47:b1:93:b3:52:cb:d5:ca:37:30:02:6b:5a:a1:9c:
6a:0e:05:56:ac:59:b9:58:40:b7:31:b7:2c:e0:20:45:ca:06:
e5:fd:6e:50:ed:56:96:4e:ce:4a:be:07:55:9b:3c:8b:15:8c:
0e:3d:9a:00:3f:7c:6d:56:65:6c:32:d4:21:45:03:2c:1a:fb:
a5:f9:73:36:dc:d9:ff:95:ab:88:d3:b1:da:88:db:d7:93:df:
4e:a9:6c:57:e7:cb:8f:e3:6a:15:2b:92:69:b3:f9:75:49:e9:
09:f1:ce:39:4f:80:1d:fd:1a:e8:28:48:ed:60:d5:c3:22:69:
e6:c8:4c:ed:42:f0:14:5d:76:bc:7f:64:32:5c:4a:0c:b2:54:
41:57:7b:0a:da:e3:b3:5b:89:a5:ec:1b:bd:18:fb:bc:8f:3f:
ec:da:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:42 2025 by rpki-client