Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/8898BEF2E9BB11EF9EBA4472C4F9AE02.roa
File: 8898BEF2E9BB11EF9EBA4472C4F9AE02.roa (raw, json)
Hash identifier: urz/tiU3xtjY1TWiMKB9OdUXrVUYSq8Hwb7yXxemuko=
Subject key identifier: 29:BC:E7:3A:F8:F3:17:FF:B2:59:F2:90:4F:2D:9C:D7:22:4A:F6:AC
Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial: 02
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/8898BEF2E9BB11EF9EBA4472C4F9AE02.roa
Signing time: Thu 13 Feb 2025 03:35:13 +0000
ROA not before: Thu 13 Feb 2025 03:35:13 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 140951
IP address blocks: 103.84.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 04:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Validity
Not Before: Feb 13 03:35:13 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67ad6871-1dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:ab:da:05:b0:3b:1f:4d:c4:ca:bd:79:cd:
83:4c:09:1f:46:0f:06:95:4b:4b:54:75:88:29:94:
06:c9:2d:0e:8e:8a:52:14:ca:f2:e8:93:b8:19:8f:
e0:ac:20:d3:79:d7:bd:a5:f6:b6:bb:3d:53:a3:a4:
73:98:6c:17:ab:65:c7:02:53:06:84:17:46:35:58:
92:e1:39:93:4b:c7:3a:2b:46:c7:93:00:05:d3:f5:
73:9c:52:7f:df:6c:80:7e:f2:4b:3a:5b:9e:a6:c1:
ce:29:dd:df:32:4c:2e:cd:a8:14:0a:ef:86:8d:bc:
17:bc:c9:c8:32:5b:d2:60:0a:ca:88:3a:1b:7f:41:
da:17:b6:1d:cb:5d:2f:75:10:ab:60:a9:84:c3:07:
a5:b2:ce:53:7c:87:f6:74:71:09:91:24:52:7c:6e:
ae:e7:23:12:4c:2f:51:3e:35:79:17:e8:26:6a:09:
20:30:f8:32:e9:da:9b:19:72:e1:dc:0d:a6:df:5c:
10:4e:6e:c3:6b:df:0f:88:dd:30:33:e5:99:86:9a:
f2:73:f2:77:f1:18:f3:3a:ab:e2:c5:be:d7:1b:9f:
a0:47:cd:b6:5e:55:b9:9f:4c:b5:39:47:cc:36:d8:
4f:b3:17:35:1a:15:3a:67:08:51:28:0a:eb:cb:3c:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:E7:3A:F8:F3:17:FF:B2:59:F2:90:4F:2D:9C:D7:22:4A:F6:AC
X509v3 Authority Key Identifier:
keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/8898BEF2E9BB11EF9EBA4472C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.169.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0a:4e:6a:79:1f:aa:a9:b0:98:27:d2:65:2b:5d:39:75:b7:
3d:f7:cf:1d:5b:97:e4:08:7a:ab:36:df:e9:b3:de:55:b4:7d:
34:7f:68:ed:d6:4e:02:d1:b2:9b:c5:ae:92:e4:78:ab:fc:7a:
e5:01:92:d0:82:c8:9c:7c:ac:6d:b1:80:59:9a:84:2b:7f:a6:
9e:ef:14:31:67:23:5c:27:63:3d:0d:45:08:6c:aa:a5:4f:b3:
2b:b5:91:50:34:f9:0a:96:60:df:3b:e2:aa:44:b4:ce:c7:ab:
32:63:e4:55:3f:05:29:52:a6:29:4c:4b:9f:6d:ec:59:90:d9:
4b:da:ed:b6:20:cf:28:71:45:72:fb:6e:d4:6b:44:5c:c9:8f:
85:a2:a2:ca:2a:a8:86:40:4e:7c:bc:6f:14:68:1b:0f:93:f6:
c7:6e:d0:72:60:2f:f7:08:e2:d7:5a:6c:da:53:ad:30:86:08:
80:d7:f0:87:68:7b:9a:97:15:a2:ee:e3:db:9b:82:3e:ce:8c:
12:d6:93:43:4d:d7:4e:d1:b1:02:eb:a8:67:8e:95:e3:38:fa:
e3:1c:f6:e7:ee:58:aa:29:ef:67:a0:76:31:8e:59:56:e9:e3:
cc:f6:42:0b:ee:c2:7e:fc:00:f6:42:10:c4:80:a3:03:00:aa:
60:20:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:31:54 2025 by rpki-client