Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/363327721DAC11F08430B122C4F9AE02.roa
File: 363327721DAC11F08430B122C4F9AE02.roa (raw, json)
Hash identifier: qAGeeUHvoWMUJDT2KxJKsoBpmdyTIJsvVahCRpRg/qg=
Subject key identifier: 4A:32:83:A0:DC:53:C9:7C:02:B6:85:05:9E:FF:AF:A6:01:B2:4D:D0
Certificate issuer: /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial: 84
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/363327721DAC11F08430B122C4F9AE02.roa
Signing time: Sun 20 Apr 2025 05:58:11 +0000
ROA not before: Sun 20 Apr 2025 05:58:11 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 62610
IP address blocks: 45.121.212.0/24 maxlen: 24
45.121.213.0/24 maxlen: 24
45.121.214.0/24 maxlen: 24
103.62.52.0/24 maxlen: 24
103.62.53.0/24 maxlen: 24
103.62.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 06:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Validity
Not Before: Apr 20 05:58:11 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=68048cf2-1dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:ea:da:f2:99:84:46:6a:92:b9:1e:eb:90:
7a:8c:b3:cb:b2:d1:41:f2:38:ba:c1:93:49:d6:6c:
98:18:72:17:ce:9e:b2:1e:0b:8e:c8:7a:0c:b3:4b:
86:ae:e1:de:ed:1b:dd:21:5c:a9:02:a0:b1:71:04:
7f:39:4b:1b:be:a4:d2:34:38:03:5b:42:69:a0:33:
8d:83:c0:00:80:06:c4:6b:c5:06:7b:97:21:cd:58:
89:fb:4a:98:d1:37:1a:0b:51:0f:64:13:0a:64:4a:
88:56:ff:f7:7c:f8:df:61:1d:e7:6b:a3:d5:7b:40:
64:80:f9:fa:ff:ae:86:22:9a:71:b4:df:96:8e:14:
bf:3d:f7:8e:e9:71:ee:c9:58:31:8a:83:ac:a5:d8:
54:c1:40:25:5b:47:59:ed:35:7d:76:94:79:1f:31:
60:00:f6:6e:b4:87:29:e1:b1:59:c6:a0:7a:51:5b:
23:4b:af:c6:84:86:f8:af:e8:96:a9:cd:bb:02:60:
ed:14:bd:d6:41:b2:ea:3e:c5:0c:c0:58:14:88:01:
c5:7a:50:7f:1b:23:f9:5d:47:c0:5b:64:80:36:86:
6a:c6:a8:a5:a4:a3:a4:91:d0:4e:c3:1e:39:43:7d:
e6:e1:5b:a4:49:aa:9d:4a:cf:dc:3f:88:5e:c8:59:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:83:A0:DC:53:C9:7C:02:B6:85:05:9E:FF:AF:A6:01:B2:4D:D0
X509v3 Authority Key Identifier:
keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/363327721DAC11F08430B122C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.212.0-45.121.214.255
103.62.52.0-103.62.54.255
Signature Algorithm: sha256WithRSAEncryption
93:51:37:a8:f5:54:41:80:72:8b:6e:06:d3:79:68:9a:38:8f:
4d:7d:8d:e2:f5:fb:97:ed:ad:85:36:f2:03:de:f8:78:cd:30:
30:31:56:c6:d4:32:9a:5c:88:22:d1:5f:1b:df:ac:8f:43:c8:
25:bc:f4:85:8e:f9:34:91:a1:1f:f0:db:05:ad:b1:ba:76:31:
ea:5d:c7:55:32:39:38:5c:07:80:20:4b:fe:b3:77:16:67:8a:
6f:e2:55:19:d7:6f:b4:6c:e9:33:8a:fc:52:b8:99:09:b5:3e:
a1:d9:8a:f9:99:25:78:a7:f0:4d:c0:e4:70:d8:af:1a:d4:5c:
9e:a7:8e:0f:5a:56:fe:8c:b2:86:e4:55:c9:89:6a:b0:41:2b:
e9:32:ab:96:24:a1:e6:17:4c:da:e5:23:7b:11:78:7a:7e:0f:
5d:4a:8a:d2:b8:05:8e:4d:ec:fe:56:36:83:4f:89:81:48:5a:
de:49:6f:6c:81:cf:2f:6f:8c:8a:3a:3c:04:04:55:12:66:2c:
b6:c0:28:b2:96:49:dc:14:84:59:98:5d:09:f6:69:9c:c8:25:
16:7f:2e:66:9c:10:16:ef:4c:23:b3:8a:7b:95:93:6b:c3:4c:
ee:31:bf:e6:f5:46:fc:8e:9e:ed:4b:00:a3:b5:aa:35:d0:82:
1d:98:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:14 2025 by rpki-client