Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/F4B8310CFC3511EB8D17450AC4F9AE02.roa
File: F4B8310CFC3511EB8D17450AC4F9AE02.roa (raw, json)
Hash identifier: 76KLiTJFCiPr4RQVE2/WVukIFpeZPQCC1K72TsdrRZA=
Subject key identifier: 56:DA:F1:6F:82:B5:8D:3B:C9:1F:9A:09:B0:8D:CE:B7:02:6F:61:67
Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Certificate serial: 0CB5
Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/F4B8310CFC3511EB8D17450AC4F9AE02.roa
Signing time: Mon 06 May 2024 18:57:25 +0000
ROA not before: Mon 06 May 2024 18:57:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138983
IP address blocks: 103.138.30.0/23 maxlen: 23
103.138.30.0/24 maxlen: 24
103.138.31.0/24 maxlen: 24
2001:df0:2b80::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 12:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Validity
Not Before: May 6 18:57:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66392814-5f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:71:c0:b9:34:a6:ba:76:66:d4:d1:7a:97:
9a:13:b2:cf:1a:75:d0:1e:9c:bf:4f:cc:9b:19:dc:
79:11:22:a7:78:4e:f3:8d:ae:13:72:7b:f0:0f:66:
58:ba:69:9d:e1:f8:64:f7:74:c7:7d:e5:11:11:8a:
ee:c3:c3:6b:27:82:ba:d4:a0:a5:aa:86:e2:8e:0e:
8b:d7:25:21:24:52:88:1b:73:73:3c:58:22:94:cc:
4a:20:d0:8a:c8:3a:d8:30:5c:ce:1b:48:6f:d5:ec:
c1:40:7f:cb:7c:40:f6:83:52:9e:b0:13:53:0b:6d:
45:af:40:18:82:bf:d3:8c:cb:b2:e2:33:b3:9b:3a:
f3:5c:93:a2:7d:1f:b0:a6:ed:63:17:39:d9:d3:37:
37:ad:c6:6c:1a:ca:07:88:5b:b7:45:74:20:99:d6:
6d:5d:98:4d:b8:a6:fd:49:e4:df:a7:0f:7d:1d:58:
a6:9a:da:ad:3a:9d:eb:a2:04:ff:16:eb:f9:1f:2d:
9a:34:36:bb:fd:a1:e0:f9:01:25:73:8d:61:21:d1:
a8:df:b1:7e:c3:40:31:54:03:17:c0:c4:89:58:cf:
54:cb:4d:10:56:16:22:09:6a:8f:a5:4b:41:ac:e3:
1a:df:47:cd:91:55:ca:6c:04:af:be:37:eb:9c:7f:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:F1:6F:82:B5:8D:3B:C9:1F:9A:09:B0:8D:CE:B7:02:6F:61:67
X509v3 Authority Key Identifier:
keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/F4B8310CFC3511EB8D17450AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.30.0/23
IPv6:
2001:df0:2b80::/48
Signature Algorithm: sha256WithRSAEncryption
22:6b:12:56:c6:c1:4a:ea:c5:65:8b:d8:76:a2:e8:32:ca:21:
f5:b4:ca:b2:b6:b9:de:9e:0c:e8:e1:f5:e7:d8:8c:12:0f:aa:
3b:28:a0:39:2a:45:22:47:c6:0a:95:1f:c4:52:95:63:34:ee:
6b:46:67:f1:38:87:e4:53:dd:50:ac:f3:e4:fe:33:1c:72:7d:
37:29:0b:78:fe:ef:37:c5:db:77:cc:cc:30:9c:27:75:2d:cc:
f1:51:ff:29:9a:bd:93:13:e2:a6:6c:b3:99:35:14:bc:7b:8a:
ab:85:b0:23:6a:77:de:ac:67:1d:bd:84:7d:d6:46:d8:e7:cf:
13:9b:1a:3b:f2:ae:29:23:b8:09:54:ce:98:e5:e3:61:66:0e:
b0:a4:9a:89:41:69:06:f5:ca:3e:d9:0a:b9:2c:7d:6f:db:28:
ba:28:a3:d9:db:17:39:67:0d:bc:cc:93:3d:52:7f:74:56:b5:
f1:b6:a9:da:9f:58:29:b4:ca:b4:08:ae:d8:82:33:d1:61:9f:
db:cd:af:98:47:27:cd:cd:b4:d1:d0:23:3a:ff:96:d8:cc:b0:
97:4d:99:4a:f6:37:63:4a:15:ca:65:be:fb:cd:33:5e:d9:2b:
a2:10:a3:9b:0e:af:47:f4:61:f3:37:05:50:e7:44:2a:78:61:
0e:17:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:44 2025 by rpki-client