Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/FDECD5AAC11411EF8CFEEF70C4F9AE02.roa
File: FDECD5AAC11411EF8CFEEF70C4F9AE02.roa (raw, json)
Hash identifier: xGbaIkdszdV8iay+6JK/xSO/ZldDE4l+mpR721XpUnY=
Subject key identifier: 8D:C3:60:79:52:7F:6A:49:20:0B:27:3B:95:DE:0F:FF:57:41:33:1A
Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Certificate serial: 56
Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/FDECD5AAC11411EF8CFEEF70C4F9AE02.roa
Signing time: Mon 23 Dec 2024 10:02:18 +0000
ROA not before: Mon 23 Dec 2024 10:02:17 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 138645
IP address blocks: 103.135.143.0/24 maxlen: 24
2404:7f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 25 Apr 2025 16:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Validity
Not Before: Dec 23 10:02:17 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67693529-eb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:2a:2e:bc:8f:e8:4f:ab:d5:0b:73:0e:95:
1d:1e:52:64:e8:9d:46:01:f6:e9:da:0f:55:81:47:
af:42:d4:0a:f6:f8:cd:05:ff:63:ac:67:0f:ed:88:
af:e9:ee:8d:74:f9:ed:61:48:c0:36:32:09:d8:e2:
f2:ed:40:87:1e:ab:30:80:1d:4f:2d:66:26:55:9b:
d4:8c:b0:e0:dc:cd:4c:16:41:50:4e:51:0b:2c:22:
db:eb:d8:8b:c6:24:6f:67:99:c6:68:9e:0f:a5:99:
9a:db:d5:b4:5b:4e:cf:94:c1:81:56:cb:98:18:24:
b6:c1:0d:1e:8e:db:76:e5:a6:2d:52:45:52:31:ed:
bb:19:da:5e:0f:7c:45:0c:6d:7d:18:82:0f:92:1d:
e6:35:cb:3e:84:08:f6:31:5a:6c:61:93:13:ea:ee:
2d:9f:43:b7:90:94:b1:a4:bc:b1:e1:02:4a:5c:6c:
80:b7:56:c3:00:0b:75:4e:ec:e0:49:e6:88:fd:86:
10:07:4a:7c:12:4f:f3:67:3c:40:09:fd:fe:24:ad:
c3:86:ef:03:d3:79:b7:ac:ef:8f:11:70:a3:71:1a:
3c:18:99:cd:96:a5:ae:62:9b:5b:16:97:86:2a:27:
ef:3d:22:72:60:1c:fc:1b:12:fb:68:05:7d:ba:47:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C3:60:79:52:7F:6A:49:20:0B:27:3B:95:DE:0F:FF:57:41:33:1A
X509v3 Authority Key Identifier:
keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/FDECD5AAC11411EF8CFEEF70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.143.0/24
IPv6:
2404:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
14:17:78:a5:70:91:6f:e6:f3:9e:c1:f4:a4:7c:d8:06:52:27:
80:8d:b5:2f:c6:e5:8d:a7:1e:37:36:8c:be:d1:d7:82:c2:31:
bb:5f:7d:00:94:22:af:3c:0c:89:79:99:f9:95:5e:f5:6e:97:
dc:ee:80:b0:1c:05:2d:38:43:a5:3e:31:ce:62:17:f0:d4:42:
4c:c6:26:a0:19:b9:32:4a:3e:64:d0:f2:60:d9:19:fc:c6:15:
54:a6:1b:b8:5f:1f:46:d2:17:f2:0b:e7:17:84:e4:82:4f:4e:
c3:cc:a6:e4:90:62:0a:2a:be:22:4c:0d:5d:8b:e8:b8:ed:88:
25:1a:bf:38:4b:0b:8b:7d:38:c9:51:1f:96:b2:82:6f:24:25:
fd:3d:56:d9:a5:e9:77:0d:99:77:a5:52:64:dd:3b:c7:79:46:
cc:91:03:5b:4f:f4:02:e1:45:77:bf:ce:b5:09:2e:95:4a:32:
1d:db:71:da:79:5e:5f:7d:40:11:46:aa:82:8b:c0:92:8d:20:
97:76:27:03:fd:22:4a:16:e9:15:98:81:39:61:b7:dc:40:74:
81:54:ea:86:72:74:c4:8f:7b:9a:3d:c5:12:43:1e:24:85:0a:
bc:ba:2f:e8:b1:86:e8:20:80:0f:e5:15:35:da:22:2e:18:05:
cd:ed:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:41:42 2025 by rpki-client