Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/22EF269CFB4311EF9A548E6EC4F9AE02.roa
File: 22EF269CFB4311EF9A548E6EC4F9AE02.roa (raw, json)
Hash identifier: 1gxgvit4nr/sPxod2GHStfDWy+CaEdnUXK35ylznk/E=
Subject key identifier: 22:64:0D:F5:6A:EA:35:63:1F:7D:EE:4E:29:D9:DF:EF:C5:DC:7D:49
Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Certificate serial: 0A
Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/22EF269CFB4311EF9A548E6EC4F9AE02.roa
Signing time: Fri 07 Mar 2025 10:58:44 +0000
ROA not before: Fri 07 Mar 2025 10:58:44 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 0
IP address blocks: 203.13.144.0/24 maxlen: 24
203.13.146.0/23 maxlen: 24
203.13.148.0/22 maxlen: 22
203.13.152.0/22 maxlen: 22
203.13.157.0/24 maxlen: 24
203.13.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 07 Mar 2025 10:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Validity
Not Before: Mar 7 10:58:44 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67cad164-2d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:ca:f7:6c:78:40:97:45:d1:96:47:1d:de:
0f:e0:9d:1d:50:b2:90:40:e9:fe:d5:e2:e6:04:1a:
24:4d:99:98:e3:40:c6:b9:d8:f3:cd:75:a7:28:67:
f4:03:31:cb:66:af:c3:44:fe:62:10:47:e5:b3:53:
c8:55:b3:f1:0b:31:77:58:5c:29:15:b3:f9:0e:67:
d3:2e:3b:f1:8c:a5:84:f0:9f:4a:bc:7d:5f:c8:23:
92:6d:47:ed:1a:c2:99:da:d6:c6:c0:f7:d3:e6:c9:
72:d6:97:21:7e:8a:0c:30:8d:a7:91:ac:18:c7:65:
93:8a:c7:1e:c7:32:28:63:c1:a5:7d:3d:f4:d7:07:
56:57:38:11:ec:ba:ec:3a:e1:9b:7f:cb:41:bb:a3:
24:03:69:71:e1:e7:4f:56:a0:67:20:3b:74:67:39:
1c:21:b0:6b:88:ea:09:cb:d3:f6:7b:48:13:28:2e:
b8:b5:83:dd:65:50:31:c0:ed:02:df:ed:7b:8a:ee:
55:10:e4:40:c2:d6:ed:15:b5:c5:5f:5b:1c:03:e4:
af:83:7b:82:c1:02:0f:91:54:9a:cf:d2:b7:8a:4d:
83:b8:3e:0c:0c:67:6c:b3:47:1b:66:25:f9:b8:70:
c9:84:1a:6b:31:cd:9b:59:eb:02:b7:a7:7c:43:14:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:0D:F5:6A:EA:35:63:1F:7D:EE:4E:29:D9:DF:EF:C5:DC:7D:49
X509v3 Authority Key Identifier:
keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/22EF269CFB4311EF9A548E6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.13.144.0/24
203.13.146.0-203.13.155.255
203.13.157.0-203.13.159.255
Signature Algorithm: sha256WithRSAEncryption
a0:c8:15:2c:6c:d7:48:8c:61:6b:9e:ae:4c:d8:57:2f:35:11:
16:d5:c0:f5:b3:14:cc:0b:a6:60:89:dc:99:dc:c2:63:e2:be:
88:c1:4b:38:e6:7f:e1:f6:21:c5:2e:b5:c7:35:38:7a:dd:08:
79:9b:59:48:48:c0:a5:cf:d7:d6:d4:dd:eb:85:c8:8f:ab:88:
b7:b5:77:55:d1:8d:63:cf:78:fd:54:eb:5a:5b:db:c4:6e:7c:
20:3b:d7:3a:9a:a8:20:ba:30:94:3c:5a:87:5b:d7:cc:c4:b6:
f8:8f:cd:d2:f4:25:73:4c:d6:4a:2b:9e:5b:c7:1c:c8:e7:7f:
54:4f:48:3f:79:5a:ac:cc:d8:06:b1:1f:b1:27:f5:f7:ad:2f:
90:0e:cd:4f:42:60:0e:a9:5d:f2:f7:2b:52:71:68:b2:06:84:
b0:7f:cf:f4:be:6e:35:8a:bb:6f:1a:5d:cb:4b:1c:ff:9a:6b:
bd:58:0d:52:43:82:67:fc:74:10:1c:6d:ba:8e:04:c2:c2:8f:
53:7c:d4:67:ce:e5:c4:4c:bf:c0:3e:db:42:ef:5e:20:55:72:
78:78:05:18:9a:1b:b8:0f:56:be:85:96:26:d3:25:19:48:a3:
a1:3f:a5:0f:40:03:98:45:e6:35:6c:0d:a2:9c:6c:9a:e3:7b:
94:b1:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:18:02 2025 by rpki-client