Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/FE01F520B20011EFB577317FC4F9AE02.roa
File: FE01F520B20011EFB577317FC4F9AE02.roa (raw, json)
Hash identifier: KqY08d2zca48/rOCNSVyTHuUmPAeetDStFcxR2juINQ=
Subject key identifier: E3:54:03:69:28:D1:04:FA:82:83:2F:A6:07:9B:E4:9C:38:BF:4A:66
Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial: 1DC6
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/FE01F520B20011EFB577317FC4F9AE02.roa
Signing time: Wed 04 Dec 2024 05:31:21 +0000
ROA not before: Wed 04 Dec 2024 05:31:21 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58424
IP address blocks: 43.255.112.0/22 maxlen: 24
103.5.124.0/22 maxlen: 24
103.206.200.0/22 maxlen: 24
116.214.24.0/23 maxlen: 24
116.214.30.0/23 maxlen: 24
2407:8180::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Apr 2025 14:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7622 (0x1dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Validity
Not Before: Dec 4 05:31:21 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=674fe928-fe5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:3a:eb:c1:12:9b:72:98:0c:96:5d:d0:8f:
d7:58:c5:90:c4:1b:19:f1:76:a8:6c:fa:13:88:3b:
12:cc:2b:ff:d6:fc:bb:dd:c6:82:89:8c:cb:6c:5a:
02:72:3c:a1:80:b4:c1:72:73:1a:92:2c:dc:4b:4e:
fe:a5:7f:b3:7b:b5:77:de:35:fb:3f:c5:f5:0a:cd:
b8:be:9a:09:ed:d4:09:c0:69:98:91:54:d4:41:3c:
5d:6d:27:3c:d1:30:85:c9:ed:b8:dd:2b:20:8b:be:
cf:5f:e1:a5:95:8a:19:b5:1a:76:da:6a:ae:54:fd:
ed:72:b0:3b:5e:e8:55:2e:c2:a5:99:bd:76:c1:ea:
4d:e5:df:8d:9b:e8:d5:20:bc:66:0c:50:74:3e:c1:
91:bb:80:24:4e:eb:7a:2f:0f:11:ce:45:0b:e8:c7:
54:64:ff:7f:8a:eb:e0:64:11:56:cd:5c:82:82:36:
41:b5:d2:21:44:43:5e:5b:42:5c:87:5f:2a:36:32:
d9:a3:e2:d3:d6:8f:44:80:b8:d3:52:89:b0:07:59:
8a:b9:d3:b4:dd:1d:ea:a0:06:30:27:ed:09:d5:dd:
ef:31:0f:c4:66:e6:dc:94:a7:a6:6d:c4:49:16:32:
10:73:03:a1:cc:6a:d9:fa:e1:14:54:73:eb:4c:20:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:03:69:28:D1:04:FA:82:83:2F:A6:07:9B:E4:9C:38:BF:4A:66
X509v3 Authority Key Identifier:
keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/FE01F520B20011EFB577317FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.112.0/22
103.5.124.0/22
103.206.200.0/22
116.214.24.0/23
116.214.30.0/23
IPv6:
2407:8180::/32
Signature Algorithm: sha256WithRSAEncryption
27:6e:46:73:2b:ff:25:3e:ea:3e:8b:fe:41:0f:1a:14:dd:af:
2e:43:88:81:b6:55:33:d9:04:92:b3:30:73:a5:31:93:67:73:
b1:f0:f0:0b:a3:91:19:57:8e:45:b5:c4:cb:64:95:46:11:66:
a7:c2:af:62:d2:3b:8e:02:9d:16:a7:3d:b3:f6:f1:3d:32:de:
69:b7:ca:c2:49:d9:ff:76:78:a3:d6:d2:d1:14:36:89:2e:b1:
ee:04:1c:32:15:00:f5:69:ef:89:e7:1b:e5:53:f0:bd:ff:00:
41:91:1c:02:9f:48:29:e5:cc:c4:c8:77:be:4a:91:cc:7b:47:
49:a5:51:68:1a:36:d1:8c:6f:5b:c8:54:f4:57:41:11:59:85:
b2:a7:18:83:18:41:e7:9f:37:33:0e:03:2d:91:f6:f3:22:5d:
eb:90:ab:a2:c2:3f:60:54:d2:ef:95:d6:03:d8:6c:ea:20:f5:
7d:20:95:ad:36:00:f7:e8:34:df:f0:c3:5e:db:fd:06:70:f6:
dd:d4:a7:f1:c3:50:f2:c8:c3:88:e6:42:41:dd:c7:b1:6e:a3:
c0:51:8d:a8:02:22:eb:5b:20:49:2f:63:06:03:f4:21:cd:84:
cb:fd:35:6d:d7:e5:7c:fa:81:8f:9f:10:1b:54:eb:9e:a7:cd:
a1:b0:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:26:48 2025 by rpki-client