Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/A9528278E9C411EF8AB90E0CC4F9AE02.roa
File: A9528278E9C411EF8AB90E0CC4F9AE02.roa (raw, json)
Hash identifier: 5Bi6DF9ilRSHgxWM72M5HXJmrNPGGM8FtSbDJ2iYaAg=
Subject key identifier: EA:C7:A7:5D:21:E8:43:03:B6:E1:3B:C8:7B:D8:7D:10:DB:FA:B7:73
Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial: 09
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/A9528278E9C411EF8AB90E0CC4F9AE02.roa
Signing time: Thu 13 Feb 2025 04:40:34 +0000
ROA not before: Thu 13 Feb 2025 04:40:34 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 41095
IP address blocks: 103.84.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 04:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Validity
Not Before: Feb 13 04:40:34 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67ad77c1-89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:07:dc:a8:58:8d:d3:ab:a9:86:ab:4e:6c:
76:5d:f1:a1:de:b6:ea:4e:68:7c:64:3c:ed:77:09:
a2:47:5c:e9:0d:7b:ed:bf:f2:1f:d6:c5:88:1b:5f:
38:e7:de:f0:ba:e7:5c:f6:4b:39:59:e7:34:42:f7:
f8:e4:38:e2:50:4d:a8:5f:3a:7a:28:e1:1b:98:cd:
41:36:72:a5:21:57:0f:ba:1e:4a:d6:f4:4b:6c:1d:
d5:c4:5f:52:6a:89:24:f8:f5:f8:ef:0e:d3:6d:91:
03:72:37:33:22:91:c3:1f:92:df:5c:8e:d0:c2:90:
af:55:1f:1f:34:23:18:28:33:7a:f5:04:d9:64:50:
81:da:b3:00:e7:95:dc:e9:45:56:27:48:6b:c4:ba:
19:e7:37:06:65:3a:a9:05:e9:71:75:81:4a:77:63:
56:4b:6a:87:3e:1c:c1:e8:06:5d:87:76:46:c5:ff:
80:19:1a:0b:8f:84:da:74:5a:52:c4:65:b9:fe:13:
72:0d:02:f3:96:ca:cc:e0:1a:7d:4f:7a:0e:3f:8b:
22:05:22:d6:57:89:16:d0:29:6a:d4:83:1c:97:e8:
09:47:4e:14:86:a9:69:89:0a:ae:dd:85:6a:db:3b:
90:93:7f:2f:72:17:59:3f:f9:dc:ad:d3:6d:d9:c0:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:A7:5D:21:E8:43:03:B6:E1:3B:C8:7B:D8:7D:10:DB:FA:B7:73
X509v3 Authority Key Identifier:
keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/A9528278E9C411EF8AB90E0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.169.0/24
Signature Algorithm: sha256WithRSAEncryption
35:df:14:0a:a8:46:79:c1:cd:f6:65:cc:bd:c0:4e:4f:62:70:
15:25:fe:12:19:07:88:7e:6e:a9:55:07:56:0d:df:94:da:ef:
41:b7:bb:3e:25:cd:20:61:96:b3:1e:74:0d:bd:68:94:9e:c2:
39:a3:85:9f:6a:b2:aa:d3:0f:56:90:09:c0:77:c6:ed:3c:c7:
69:a0:dd:75:7f:f3:fe:13:8e:72:59:b5:93:26:e1:15:9d:b7:
ff:fb:58:41:fd:1a:b6:43:f5:45:69:c0:b0:55:2a:a8:83:9f:
f9:f3:de:2d:3b:a1:12:3c:8b:da:df:f2:3c:47:d7:32:e9:16:
f6:58:6a:ab:e7:12:63:c2:5d:07:6c:55:bb:7e:ab:17:2a:9c:
0b:9d:8b:9f:50:17:71:eb:28:5f:6d:28:35:50:64:9e:ad:8b:
85:84:89:0f:95:90:32:8d:b2:e8:74:6c:84:97:a8:13:57:37:
d3:7c:94:c7:bc:fd:02:ab:14:4b:14:99:68:9a:b2:da:84:9c:
0c:31:46:65:1a:12:ea:a9:6b:76:42:73:c3:37:f2:c9:50:73:
b4:6b:a8:06:44:cf:1e:6d:ca:58:1a:76:a4:c5:80:c0:af:ef:
6c:e9:72:3a:ab:3b:8b:dc:f8:36:e5:18:f4:95:d3:6a:3c:9a:
8f:60:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:32:03 2025 by rpki-client