Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa
File: B16C9766F97711EEB642002CC4F9AE02.roa (raw, json)
Hash identifier: +Y6VC/cgCKNcLMOGCDvp0fh3CZGvvEaWoTFTqnie1ZI=
Subject key identifier: EF:1D:E6:88:11:31:EA:85:05:AE:AC:91:42:57:F8:79:8C:76:9D:A5
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 09CF
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa
Signing time: Wed 12 Feb 2025 20:58:33 +0000
ROA not before: Wed 12 Feb 2025 20:58:33 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 7489
IP address blocks: 103.207.68.0/22 maxlen: 22
210.16.120.0/23 maxlen: 24
210.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 18:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2511 (0x9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45
Validity
Not Before: Feb 12 20:58:33 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ad0b79-22b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:6f:ea:64:d4:c8:cf:c7:d7:f0:52:fa:44:
e0:eb:eb:d0:c4:a7:74:8a:c9:b4:57:19:a0:91:97:
37:72:ec:28:af:a6:ee:4e:ec:cc:db:40:e3:f0:89:
f5:29:dd:ea:52:98:c9:d5:6f:fe:d1:f4:9a:4f:f0:
2a:2e:53:30:b2:ee:34:25:00:83:4f:9b:8a:10:1a:
5f:08:c9:4a:bd:79:74:ab:75:ff:56:13:f0:e7:8e:
39:2b:02:5e:ea:79:6d:ce:5c:f7:06:f2:71:5d:e7:
fd:ea:4b:90:38:2c:bc:40:ad:7d:1e:de:1e:74:d4:
52:40:bf:f2:16:b7:74:60:60:d0:fd:29:0d:8c:dd:
24:4b:99:98:c7:ff:bf:1a:d8:ae:90:7d:59:8b:e4:
d9:a9:97:55:28:a9:af:4f:18:5f:61:4e:2e:4a:0b:
cf:01:e7:b1:ea:88:8b:b8:6e:45:d8:48:4f:4e:d9:
3f:55:ff:0f:58:28:1e:82:dd:f6:c4:65:6c:63:f0:
65:d1:05:69:94:cd:9d:83:3c:57:42:ac:19:6c:d6:
20:5b:0d:92:fd:f4:a4:e0:3a:df:d9:47:69:83:49:
96:e8:80:9b:a5:d0:42:93:49:84:24:75:43:fd:23:
23:b2:39:f5:db:a6:23:8e:70:fe:f8:2b:13:d5:50:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:E6:88:11:31:EA:85:05:AE:AC:91:42:57:F8:79:8C:76:9D:A5
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.68.0/22
210.16.120.0/23
210.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
61:26:b4:35:5b:ff:6e:43:8b:e5:32:50:22:45:81:6f:cd:b5:
75:77:09:11:6b:63:c9:72:73:1f:ac:99:7d:4b:1a:eb:67:d5:
34:91:c0:fb:be:bb:70:af:6d:fb:8a:32:a6:35:4b:96:c1:7c:
a8:e8:90:0b:86:93:65:09:f6:35:77:41:15:ea:53:f2:08:a2:
d2:99:e0:f5:73:0f:15:8c:1d:6f:00:2b:4a:cc:6c:85:67:b3:
90:78:49:3a:7e:c2:5c:38:88:75:e8:7f:85:60:14:13:c2:cf:
5a:0c:ea:65:20:1f:08:9a:ae:ab:95:71:fb:38:d1:eb:4f:91:
67:3f:09:6d:d3:2f:ff:4e:ff:45:1c:e1:a3:fd:63:6b:a6:64:
77:8c:e3:1e:9f:76:63:90:f7:52:ac:dc:0e:f3:c2:b4:db:70:
d5:19:79:35:97:83:70:e7:a9:c1:0b:cf:64:83:c9:bb:0e:3e:
b1:c7:e3:42:b4:fa:85:78:26:91:22:cf:c7:18:ff:22:c4:8d:
8f:8b:61:fb:a0:27:d4:f7:f5:6b:78:ef:23:ed:9c:f3:ef:7b:
4e:b8:6a:e2:89:1e:d4:be:87:98:ab:77:f3:fb:7b:f2:8a:52:
d7:c5:06:5b:d6:d6:6c:2a:86:cb:07:b9:ae:34:74:37:ba:ee:
7d:6d:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 26 23:32:32 2025 by rpki-client on console.sobornost.net