Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/5C0A4894F60D11EEADD2752BC4F9AE02.roa
File: 5C0A4894F60D11EEADD2752BC4F9AE02.roa (raw, json)
Hash identifier: +7XeFZqMBfwdRDj5B9LC6a0RhvYzARZvG3fxw/SKMF0=
Subject key identifier: D9:F7:89:F4:DF:6C:A9:5E:ED:1F:41:62:83:81:0C:D8:8C:8E:30:AB
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 0929
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/5C0A4894F60D11EEADD2752BC4F9AE02.roa
Signing time: Wed 26 Mar 2025 20:30:55 +0000
ROA not before: Wed 26 Mar 2025 20:30:55 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 41095
IP address blocks: 45.248.200.0/24 maxlen: 24
45.248.201.0/24 maxlen: 24
45.248.202.0/23 maxlen: 24
103.6.128.0/22 maxlen: 23
103.6.130.0/23 maxlen: 24
103.23.168.0/22 maxlen: 22
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/22 maxlen: 22
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.72.0/22 maxlen: 24
220.158.132.0/22 maxlen: 24
2401:47c0::/32 maxlen: 32
2401:47c0:1000::/36 maxlen: 36
2401:47c0:1000::/40 maxlen: 40
2401:47c0:1100::/40 maxlen: 40
2401:47c0:1200::/40 maxlen: 40
2401:47c0:1300::/40 maxlen: 40
2401:47c0:1400::/40 maxlen: 40
2401:47c0:1500::/40 maxlen: 40
2401:47c0:1600::/40 maxlen: 40
2401:47c0:1700::/40 maxlen: 40
2401:47c0:1800::/40 maxlen: 40
2401:47c0:1a00::/40 maxlen: 40
2401:47c0:1b00::/40 maxlen: 40
2401:47c0:1c00::/40 maxlen: 40
2401:47c0:1d00::/40 maxlen: 40
2401:47c0:1e00::/40 maxlen: 40
2401:47c0:f000::/36 maxlen: 40
Validation: Failed, certificate revoked on Mon 31 Mar 2025 04:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486
Validity
Not Before: Mar 26 20:30:55 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e463ff-3e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:3a:2b:df:36:66:35:b0:db:ae:9e:4b:9a:
59:03:e5:6e:b8:e7:77:69:d9:0e:53:af:59:d9:d1:
93:86:d6:26:6f:ee:0a:de:48:f1:cf:12:69:56:29:
68:41:d1:bb:6c:ef:a0:af:80:e6:73:0a:a3:5d:04:
49:95:01:73:20:26:5a:b8:c6:9b:f2:a4:3d:64:99:
cb:16:23:50:61:37:c0:78:dd:e9:b6:a5:78:91:e9:
41:45:8a:45:57:e9:3f:3f:f1:de:ee:b9:70:f3:1a:
74:0a:9a:1d:1c:30:94:f4:84:ac:9c:34:38:1e:01:
8d:29:d7:44:e5:0e:95:7a:93:dd:6b:f1:e8:95:c6:
76:72:27:fb:8c:70:19:33:31:86:6a:e5:90:4e:c5:
f7:31:e5:d8:dd:a5:c7:8d:fa:b1:eb:b5:ad:9c:b7:
3e:a3:03:df:4c:eb:7c:7c:3d:83:f6:69:8f:5b:af:
df:2a:6a:96:47:01:41:57:8c:08:36:16:c4:21:36:
9c:73:b0:03:55:91:c6:d6:16:6a:17:0c:b1:8b:69:
f3:7b:57:c2:c5:e3:f9:8b:0b:b0:52:cd:27:33:c2:
ad:dc:02:94:d9:a7:54:15:75:49:3d:17:39:01:e3:
f2:81:85:22:1a:ee:79:67:33:91:9d:96:d0:e8:f2:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F7:89:F4:DF:6C:A9:5E:ED:1F:41:62:83:81:0C:D8:8C:8E:30:AB
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/5C0A4894F60D11EEADD2752BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.6.128.0/22
103.23.168.0/22
103.217.160.0/22
103.242.72.0/22
220.158.132.0/22
IPv6:
2401:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
71:61:5f:e2:81:fc:3e:5e:b1:f2:11:cc:83:69:99:9d:3a:b5:
14:7b:9e:1e:f5:87:ad:b6:26:89:b3:36:07:08:79:27:e8:c3:
54:63:f9:9c:ed:61:4f:8a:3d:83:68:25:11:26:8d:b0:34:51:
6b:fd:2d:31:3e:69:6f:c1:bf:4c:27:ea:b2:90:ea:6f:10:ed:
45:a0:ca:fe:58:07:4a:c7:e5:58:a9:5f:d7:03:9d:17:a8:d1:
f9:30:bd:e5:68:2d:0a:53:1f:bf:c6:19:42:8a:b1:75:68:05:
cc:06:08:00:d5:c3:47:71:3a:97:ba:7e:8a:f9:40:e8:e2:17:
a0:65:fe:5b:0b:81:68:c1:ad:0c:18:b8:6f:86:8f:d1:98:9d:
10:1e:87:d4:e1:9d:c1:7d:fd:51:1a:2b:28:fc:84:6c:9c:40:
51:65:08:ca:35:ac:a8:49:1c:70:bb:9a:ea:70:e9:7f:65:3a:
73:48:41:bb:93:03:f3:73:0e:e5:8a:43:a0:35:39:d8:55:37:
c2:fb:62:ca:50:85:45:19:79:3b:0b:9a:66:fc:d3:3e:af:03:
b5:2e:b2:dd:bb:ad:9f:99:81:4f:83:bc:a6:cc:03:85:5d:e6:
cb:de:0f:2d:99:32:8f:b4:f0:98:10:9b:34:03:f0:44:e9:42:
34:7b:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 31 07:15:38 2025 by rpki-client on console.sobornost.net