Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/37C723ECB2D411EFB81FE23CC4F9AE02.roa
File: 37C723ECB2D411EFB81FE23CC4F9AE02.roa (raw, json)
Hash identifier: rFo3Rb8EMguazj1MZ82xZzCOGq2Q7oTyWc72+t7cCps=
Subject key identifier: 4D:32:13:A1:F9:44:97:FE:F3:CC:0F:66:DA:DA:F5:10:92:33:DD:C5
Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial: 66
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/37C723ECB2D411EFB81FE23CC4F9AE02.roa
Signing time: Thu 05 Dec 2024 06:44:30 +0000
ROA not before: Thu 05 Dec 2024 06:44:30 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 149014
IP address blocks: 103.67.52.0/23 maxlen: 23
103.117.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 05 Dec 2024 08:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Validity
Not Before: Dec 5 06:44:30 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67514bce-d337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:ad:82:82:9a:ad:6a:8b:61:ef:5e:5c:15:
ae:47:e3:a8:b6:87:28:23:4d:be:a5:63:a7:6a:5e:
b9:f8:ad:10:4a:cd:f4:93:c3:a3:e9:82:09:65:62:
c1:08:34:a5:84:e4:fb:4e:1f:aa:a9:c4:0b:01:58:
de:78:23:01:43:44:80:52:68:b7:03:50:3f:2b:f1:
09:6c:47:ec:ca:e6:42:31:ca:a9:92:43:b5:64:fe:
60:56:8f:0e:2a:d4:88:4f:12:71:f1:36:5c:b5:11:
ef:24:18:69:06:70:04:f9:0e:76:a8:b3:d9:a4:8e:
fa:1f:f9:c8:1d:6d:3d:98:47:ca:0c:a7:e9:29:4d:
25:ff:dc:7a:38:f6:3a:bc:ae:1d:15:8b:14:d8:be:
a1:aa:58:cd:a6:8f:ed:e1:a6:36:96:ed:20:62:7c:
87:d2:b8:0e:fd:f6:bb:bd:22:01:a8:cb:44:c2:7e:
15:25:b8:31:6a:6e:11:48:57:36:39:aa:9f:2f:b2:
e7:e2:79:65:7f:86:b3:66:2c:83:4c:9a:cd:78:11:
81:f4:84:c9:d1:e2:b3:5e:c1:73:f6:1a:b6:d9:19:
73:02:a8:b6:83:80:ca:83:c4:52:a7:ad:98:ae:a2:
b6:90:1f:e0:5e:ef:c7:4d:aa:7b:43:2a:88:3c:7a:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:13:A1:F9:44:97:FE:F3:CC:0F:66:DA:DA:F5:10:92:33:DD:C5
X509v3 Authority Key Identifier:
keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/37C723ECB2D411EFB81FE23CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.52.0/23
103.117.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:e6:e8:84:4b:e8:1a:f8:a2:b4:d1:7f:02:4c:a1:93:cf:ef:
a0:6e:21:40:da:12:3c:68:b3:b0:91:84:58:75:36:76:74:41:
0a:66:5c:33:20:f1:0b:43:30:60:5f:37:49:5c:44:1a:a1:76:
b4:ba:1b:5a:71:c1:89:0d:01:48:3d:55:71:74:41:f6:f8:5c:
c2:8d:79:6a:0c:79:bc:26:23:6e:3d:08:67:1d:d3:cd:35:67:
f2:68:5f:b5:bd:b5:ee:ea:a7:ca:9b:dd:5b:fb:3a:95:99:3f:
a1:20:18:d0:91:c8:45:d9:8d:97:7b:a7:26:e7:28:da:a3:17:
dd:65:8f:2e:6a:35:45:a0:dd:01:7b:77:87:0a:06:ca:7c:13:
53:0d:bd:7c:ad:84:bc:31:8d:33:4f:c3:a4:26:b7:1a:3e:52:
48:14:d8:6c:16:e4:7d:7a:21:df:c9:08:41:60:a5:88:73:2d:
53:06:77:8f:11:dd:78:40:82:bb:db:91:8d:3e:35:76:62:f5:
65:e2:e7:0c:d5:6c:04:a2:ef:43:85:41:9f:1f:54:0e:c9:65:
f4:8a:20:83:1f:37:6e:5b:33:ea:ac:88:af:c1:84:56:fd:6a:
aa:1f:dc:d6:31:0e:c1:f8:1f:6a:bb:a2:2d:c1:2d:b8:a8:7c:
0b:1c:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:23:04 2025 by rpki-client