Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/FDF73B42038411EFA0101A27C4F9AE02.roa
File: FDF73B42038411EFA0101A27C4F9AE02.roa (raw, json)
Hash identifier: rWEo4AIqB/p/4RSamCW8zTcnRjLWNhpm4zUWYdRX5Kc=
Subject key identifier: 2A:87:C0:06:C4:C9:95:38:77:8B:4B:A2:D2:A1:9D:31:A9:48:63:B6
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: 10
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/FDF73B42038411EFA0101A27C4F9AE02.roa
Signing time: Fri 26 Apr 2024 04:31:32 +0000
ROA not before: Fri 26 Apr 2024 04:31:32 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 45652
IP address blocks: 43.252.120.0/22 maxlen: 22
43.252.120.0/24 maxlen: 24
43.252.121.0/24 maxlen: 24
43.252.122.0/24 maxlen: 24
43.252.123.0/24 maxlen: 24
103.233.80.0/22 maxlen: 22
103.233.80.0/24 maxlen: 24
103.233.81.0/24 maxlen: 24
103.233.82.0/24 maxlen: 24
103.233.83.0/24 maxlen: 24
110.34.139.0/24 maxlen: 24
110.34.162.0/24 maxlen: 24
110.34.164.0/24 maxlen: 24
110.34.166.0/24 maxlen: 24
110.34.180.0/23 maxlen: 24
110.34.183.0/24 maxlen: 24
110.34.184.0/23 maxlen: 24
110.34.190.0/23 maxlen: 24
110.34.220.0/23 maxlen: 24
2401:4a40::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Apr 2024 04:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Validity
Not Before: Apr 26 04:31:32 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=662b2e24-8865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:b6:a0:57:27:1e:df:0b:f0:5f:d9:c5:51:
8b:89:37:82:eb:f8:56:40:d6:b8:b3:fa:9f:39:36:
60:3b:b9:27:cd:9f:ef:0e:b7:40:cd:9e:a6:3e:1b:
b6:5e:ca:0b:f9:fe:29:e3:94:5d:ab:de:4d:a3:9e:
7d:c5:fa:6b:97:5b:27:a5:12:5d:ab:fc:88:46:f7:
6d:31:26:88:5d:81:ad:51:bb:be:c9:ca:86:cf:92:
72:73:38:fa:a6:11:01:77:d4:b1:a3:4f:21:2b:f5:
1a:5c:7a:83:69:1e:b2:fa:3e:7d:ad:2c:f4:6e:9b:
cf:16:b0:bb:94:75:23:33:11:62:34:80:36:88:c8:
6c:7b:cd:f6:5a:f5:ef:d1:32:c4:40:b4:3f:a1:73:
9e:89:33:87:10:04:e6:3b:5d:85:a5:02:99:fc:2a:
6e:46:72:38:4e:ed:5a:f9:08:22:7a:92:ae:c4:8e:
8b:1e:2f:df:71:20:91:2d:47:29:d5:19:cb:03:90:
21:1d:d0:8d:d7:3a:17:79:da:d9:f4:40:94:60:b3:
1d:fe:7d:60:f1:31:fb:bf:cb:99:49:20:8f:ea:39:
9c:fa:45:0d:56:bc:15:74:e1:19:01:dd:0d:f7:f0:
1c:b0:e3:54:3f:08:7e:fa:2f:9a:74:cf:58:4e:a2:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:C0:06:C4:C9:95:38:77:8B:4B:A2:D2:A1:9D:31:A9:48:63:B6
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/FDF73B42038411EFA0101A27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.120.0/22
103.233.80.0/22
110.34.139.0/24
110.34.162.0/24
110.34.164.0/24
110.34.166.0/24
110.34.180.0/23
110.34.183.0-110.34.185.255
110.34.190.0/23
110.34.220.0/23
IPv6:
2401:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
66:e3:74:48:8c:5a:c5:8c:6b:0e:06:dd:1d:c5:6b:8b:2b:f3:
87:36:01:e1:15:ca:fb:6e:d4:8f:f0:15:7f:e8:6c:b4:ec:ed:
86:f9:f0:5f:8a:0a:8b:b8:a1:de:23:4f:26:e5:e7:ad:4a:65:
10:e0:40:05:81:d0:4a:ee:7b:a2:f6:dd:84:89:90:b7:96:e8:
65:51:9e:b7:63:2e:f7:58:47:8c:9b:6f:ec:df:e8:84:70:df:
9a:4d:36:9e:81:8b:13:65:14:4b:ce:03:f5:8a:cd:2c:f6:70:
39:74:62:8d:da:5a:1e:43:00:ee:e2:b4:26:8c:26:5f:16:3d:
23:a6:6e:5f:62:fe:d9:87:72:09:64:1a:73:1c:2e:e2:85:03:
d6:3d:6b:1f:91:64:0d:f2:ad:cf:13:d8:5a:3e:56:b7:d6:a5:
6a:05:56:bf:78:d3:07:dd:df:69:b6:27:f0:af:a0:67:19:ba:
0a:0f:55:05:3a:d2:80:7b:dd:56:a3:d5:35:98:32:9f:66:8c:
28:01:e4:39:47:04:b6:06:b4:8b:83:7b:b8:f6:4d:09:27:ff:
45:61:d6:a3:01:89:30:4f:0e:4d:08:1f:51:d0:99:29:77:b9:
d0:b5:a9:40:6d:0c:34:3a:21:79:f6:f6:29:8e:6b:93:87:6a:
48:51:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:11:40 2024 by rpki-client on console.sobornost.net