Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/BF3BA00EC19E11EF8AAC267BC4F9AE02.roa
File: BF3BA00EC19E11EF8AAC267BC4F9AE02.roa (raw, json)
Hash identifier: Mg+FlNtbrJoF4PFXAsUyBy+/WM6GQyjf/0/NlMsBYK0=
Subject key identifier: 43:7C:4F:FB:8A:AF:8D:13:08:2F:DB:FC:C7:93:FA:43:B5:4B:21:3C
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0410
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/BF3BA00EC19E11EF8AAC267BC4F9AE02.roa
Signing time: Tue 24 Dec 2024 02:28:23 +0000
ROA not before: Tue 24 Dec 2024 02:28:23 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 8100
IP address blocks: 203.32.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 23:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Dec 24 02:28:23 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=676a1c47-c650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:c5:fa:00:21:3e:fb:fc:6e:24:f4:52:73:
3e:94:6a:a9:ca:ce:4b:e7:0d:00:76:27:25:07:31:
1e:6b:ea:29:6a:42:a6:8d:40:07:18:8e:f6:ad:4c:
21:1b:02:89:4e:62:df:d3:66:54:86:b1:c2:23:a2:
ec:4c:36:dc:01:b6:45:a3:14:0f:65:73:a0:ad:12:
68:69:13:0c:9e:40:03:11:45:2c:f3:c4:a1:0b:6b:
88:37:fd:ac:7f:0b:f7:7e:d0:4c:53:90:58:5b:96:
96:88:d6:00:0e:22:40:97:63:0d:d0:d4:af:d5:97:
66:8b:ad:22:e3:45:a6:34:43:68:08:20:82:c0:45:
1c:16:21:6a:c9:ef:e7:c4:99:8e:c8:b6:8e:91:11:
1e:d3:82:15:99:69:94:71:5a:a5:a8:6c:d6:a3:91:
cc:94:73:5a:19:90:75:3d:62:9d:b5:ad:70:d7:35:
c9:de:9c:aa:5c:6b:46:2d:47:83:34:4f:a9:81:60:
32:b2:59:97:44:86:ef:6e:23:22:c6:3a:42:48:2e:
8b:b9:67:b4:5e:9f:5a:67:1e:24:3f:77:a0:c9:09:
80:27:db:c5:16:2b:3d:df:d1:b2:5f:78:2e:5e:ac:
29:8a:29:37:65:9f:02:bd:db:b5:68:bf:a2:60:5a:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:4F:FB:8A:AF:8D:13:08:2F:DB:FC:C7:93:FA:43:B5:4B:21:3C
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/BF3BA00EC19E11EF8AAC267BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5b:c4:9c:37:d6:1b:5c:b3:42:25:c1:0b:a9:76:6d:e6:ea:
82:cc:34:8c:23:52:58:49:08:07:b7:ae:8e:69:b5:12:79:c8:
fb:67:d1:bb:4f:72:f5:a0:a9:af:2a:70:73:a9:f3:ea:71:d6:
28:71:30:2c:ec:04:8a:5f:18:91:51:73:3f:8b:e7:f9:5f:57:
63:19:da:90:80:ac:d9:c4:53:a1:eb:86:a4:13:23:4e:77:fc:
ce:25:38:a6:c8:e1:ef:01:3b:a9:f6:58:65:68:9d:31:eb:98:
3f:ee:8b:f0:7a:ee:ab:56:31:1a:2e:1d:9d:ed:4f:b9:94:11:
46:ea:cd:7a:78:9e:f2:e1:12:0a:cb:68:0c:9f:fc:d2:8c:fb:
f1:9b:bd:ab:f3:68:e9:ac:a0:e3:27:96:56:49:27:5d:a7:15:
e2:f4:74:b3:12:e4:5a:b5:e3:e3:dd:0b:bb:9b:84:db:26:6e:
2b:09:4d:89:58:4d:72:4c:f9:67:60:77:38:6b:05:cc:28:fc:
b8:60:be:79:39:23:7c:74:d7:98:68:8d:53:97:2b:7e:8d:07:
17:75:3d:db:68:f7:91:30:93:e6:c5:29:b0:9c:3a:29:42:c4:
84:b7:83:7f:8f:bd:68:88:07:7d:3c:66:d1:ba:a5:8e:ff:7e:
c5:a0:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:34:55 2025 by rpki-client