Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/DD33448A807711EF85B78E7CC4F9AE02.roa
File: DD33448A807711EF85B78E7CC4F9AE02.roa (raw, json)
Hash identifier: Jo9uyMUsirKtEzLETZGLmx+gl2ZRDq0MfFXyBeh6Syk=
Subject key identifier: A5:79:84:E4:D5:13:BD:29:79:40:59:14:B7:D5:70:24:66:9F:C3:8B
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 15E6
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/DD33448A807711EF85B78E7CC4F9AE02.roa
Signing time: Wed 02 Oct 2024 04:36:18 +0000
ROA not before: Wed 02 Oct 2024 04:36:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 27.111.208.0/20 maxlen: 20
27.111.224.0/22 maxlen: 22
27.111.232.0/21 maxlen: 21
27.111.232.0/22 maxlen: 22
27.111.236.0/23 maxlen: 23
27.111.238.0/23 maxlen: 23
101.97.64.0/22 maxlen: 22
101.97.72.0/21 maxlen: 21
101.97.80.0/21 maxlen: 21
118.103.180.0/22 maxlen: 22
202.79.192.0/22 maxlen: 22
202.79.196.0/23 maxlen: 23
202.79.197.0/24 maxlen: 24
202.79.200.0/21 maxlen: 21
202.79.208.0/20 maxlen: 20
2403:b100::/32 maxlen: 32
2403:b101::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 02 Oct 2024 05:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5606 (0x15e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: Oct 2 04:36:17 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66fccdc1-4b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:10:71:09:50:5f:fe:e2:45:fc:c0:47:06:
9e:97:7b:1c:5e:40:9c:6b:85:b0:00:71:af:1c:c4:
3d:c4:6a:af:44:70:85:39:cb:1d:ee:89:e8:a3:8d:
df:68:9d:07:82:f2:18:cb:ba:54:1a:32:83:75:0e:
7e:ee:60:7d:b8:1d:ee:ef:4c:ca:c3:26:06:b2:3a:
09:c0:35:fb:5f:a2:dc:ed:56:5a:58:a1:8d:6c:f8:
d8:e8:43:99:71:ff:f3:e2:77:37:46:9f:aa:9c:ab:
94:9e:08:69:cd:e5:59:55:2d:98:c6:12:eb:09:ae:
da:f1:de:e0:0a:63:94:13:48:24:c1:24:9c:ac:6f:
22:d1:dd:7f:e4:b9:75:72:6a:c3:ef:40:ae:06:97:
5e:8d:5d:c9:d1:5a:61:8b:3a:2b:85:02:ea:23:20:
ba:de:c2:c8:48:79:79:52:06:04:e8:25:41:59:96:
49:48:44:e7:2d:39:33:14:c8:e6:1b:2c:21:b5:bb:
8e:dd:e9:f3:37:ae:1d:a9:d7:cf:f4:32:31:74:ee:
f1:ca:4f:a9:4c:0c:ff:15:8a:1a:96:cb:50:76:99:
e5:88:5a:a0:d5:f1:ab:0e:e3:f6:7d:0b:e1:0d:68:
43:f4:7b:c9:79:cf:dc:4f:47:7a:38:64:f5:b4:ca:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:79:84:E4:D5:13:BD:29:79:40:59:14:B7:D5:70:24:66:9F:C3:8B
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/DD33448A807711EF85B78E7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.208.0-27.111.227.255
27.111.232.0/21
101.97.64.0/22
101.97.72.0-101.97.87.255
118.103.180.0/22
202.79.192.0-202.79.197.255
202.79.200.0-202.79.223.255
IPv6:
2403:b100::-2403:b101:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b4:1d:71:2d:7a:32:bd:38:6e:7a:34:d2:4e:e0:65:a8:5b:ca:
2f:14:4a:89:2e:ce:c2:0c:d0:e6:26:01:e8:cb:13:8a:ff:f3:
23:27:bf:bb:bb:88:9a:f9:f1:48:aa:16:8e:08:87:ab:3f:50:
80:a1:78:b5:f6:2a:93:3b:fa:27:ea:34:5d:81:b4:07:3e:c9:
1b:07:ed:e3:28:e6:dd:9e:22:5c:20:b9:2d:51:1d:06:24:00:
53:32:8f:18:01:df:bc:3e:61:7c:c5:e9:ca:19:56:00:0f:5a:
58:5e:b8:f5:dc:26:a8:38:4c:d1:75:34:f1:05:95:eb:b2:a2:
30:2d:08:8e:be:3b:a3:3e:1c:bb:57:1e:b4:4f:75:07:19:8f:
ef:ab:17:63:8f:21:fc:7e:50:6d:08:f8:8a:59:dd:30:1c:2f:
1e:f7:cf:b9:5b:54:a5:53:1b:01:5f:82:40:26:c7:97:63:a6:
4a:3f:2f:34:4c:01:77:ee:89:e2:8d:b3:8b:98:63:90:77:df:
4f:6b:f9:e3:4a:da:81:54:5a:c8:98:04:33:04:88:89:63:2f:
af:22:38:a0:dd:ef:5a:60:05:de:ae:2f:66:ca:b7:0d:6d:aa:
e6:e4:1c:0f:6f:a9:f8:53:2e:d1:c1:ba:82:86:33:23:93:b7:
b6:a8:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:25:41 2025 by rpki-client