Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F636F748DC9811EEA15ED615C4F9AE02.roa
File: F636F748DC9811EEA15ED615C4F9AE02.roa (raw, json)
Hash identifier: NGmjzPUFcJMJisK6EuQlnshsk6rgiaDitzzS7O1VM+c=
Subject key identifier: E3:23:82:F9:58:F9:EA:9C:5A:AA:CB:21:9E:8A:17:92:92:EC:03:D4
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 26E0
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F636F748DC9811EEA15ED615C4F9AE02.roa
Signing time: Thu 07 Mar 2024 15:40:02 +0000
ROA not before: Thu 07 Mar 2024 15:40:02 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 150452
IP address blocks: 103.192.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 15:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9952 (0x26e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Mar 7 15:40:02 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65e9dfd2-a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:54:23:2d:23:2c:21:bc:18:12:55:66:99:df:
e8:d2:31:b5:0f:37:fc:6e:b5:c9:df:a6:14:53:5e:
1f:34:4a:5d:3f:3c:bd:7a:81:57:7d:34:e6:a3:be:
cb:b7:91:5b:c6:df:29:91:35:8b:8e:8d:f6:c3:5e:
92:71:8f:cd:8f:53:0d:84:7f:aa:0a:ca:ec:6b:99:
b4:91:f0:16:c6:3b:48:32:42:56:5b:0f:28:4b:b3:
d6:a3:45:43:18:00:e6:60:4c:48:75:18:c5:8f:25:
bc:48:d6:31:e6:ae:73:d5:6d:70:d4:1c:25:33:6b:
8b:f4:fe:25:45:33:d1:bf:88:66:a8:61:90:7a:65:
d5:ad:d6:6a:e4:a8:22:62:c4:b2:7a:f8:3c:0a:22:
37:fd:fd:e5:a5:85:02:88:5e:1b:42:88:96:70:7a:
9e:83:da:e3:4e:34:3e:d2:d7:a8:ab:2a:b4:90:95:
9d:db:98:a0:8d:b3:c2:b1:fa:f3:45:fd:e3:b5:3c:
97:91:2c:50:95:ae:c0:ba:2f:42:4c:f0:c7:b0:8d:
03:15:dd:76:04:62:25:7e:b3:5d:8c:e3:6b:9c:5d:
cf:0b:0e:e4:6f:70:fc:dc:df:66:e8:bd:09:cf:5f:
21:89:1a:06:a8:0d:b0:82:b2:fa:cb:c5:f4:a6:8d:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:82:F9:58:F9:EA:9C:5A:AA:CB:21:9E:8A:17:92:92:EC:03:D4
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F636F748DC9811EEA15ED615C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.192.178.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d8:02:4b:79:eb:dd:b3:46:2f:21:73:fb:5f:dc:db:43:74:
ae:62:b7:7b:4a:43:6d:7e:51:f6:31:51:22:d5:6d:53:d8:54:
d7:69:83:0c:0c:dc:86:c2:5a:14:43:13:2c:e3:66:a3:f4:26:
34:19:17:62:46:5a:41:19:53:dd:72:f0:5d:ab:f2:19:c4:3b:
af:db:b1:d2:f5:8c:ac:c1:95:f3:61:46:c7:4a:62:e2:60:f1:
52:ba:b9:52:3a:fe:3a:ba:b7:c0:50:af:97:be:2b:28:e6:fa:
b5:aa:07:11:00:f2:3b:85:60:35:c2:8b:b4:57:64:1b:a0:2d:
3d:31:ed:d6:35:c3:0d:7e:f9:00:8a:a2:ba:ef:72:09:9a:ea:
cd:37:0c:8c:92:3a:7e:ad:14:f2:44:71:17:79:ca:80:d3:be:
cc:ec:e1:20:4d:7f:bc:ed:10:b9:ed:a1:d1:95:df:70:96:c8:
84:ad:96:8c:a2:69:13:b0:4b:c8:3e:53:d2:5f:f7:9a:57:37:
34:05:ac:63:43:3a:56:ce:eb:be:34:78:1a:ce:76:bd:84:4f:
6d:e1:0c:ba:0c:d4:e9:f8:b1:b3:38:56:73:9d:d1:33:3e:bc:
83:bd:d3:b5:9e:ae:d5:3c:fd:9b:d3:1b:79:07:58:ff:9f:10:
80:0d:7e:d5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjQwMzA3MTU0MDAyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWU5ZGZkMi1hMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6FQjLSMsIbwYElVmmd/o0jG1Dzf8brXJ36YUU14fNEpdPzy9eoFXfTTmo77L
t5Fbxt8pkTWLjo32w16ScY/Nj1MNhH+qCsrsa5m0kfAWxjtIMkJWWw8oS7PWo0VD
GADmYExIdRjFjyW8SNYx5q5z1W1w1BwlM2uL9P4lRTPRv4hmqGGQemXVrdZq5Kgi
YsSyevg8CiI3/f3lpYUCiF4bQoiWcHqeg9rjTjQ+0teoqyq0kJWd25igjbPCsfrz
Rf3jtTyXkSxQla7Aui9CTPDHsI0DFd12BGIlfrNdjONrnF3PCw7kb3D83N9m6L0J
z18hiRoGqA2wgrL6y8X0po0EbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOMjgvlY
+eqcWqrLIZ6KF5KS7APUMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRjYzNkY3NDhE
Qzk4MTFFRUExNUVENjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnwLIwDQYJKoZIhvcNAQELBQADggEBAMLYAkt5692zRi8h
c/tf3NtDdK5it3tKQ21+UfYxUSLVbVPYVNdpgwwM3IbCWhRDEyzjZqP0JjQZF2JG
WkEZU91y8F2r8hnEO6/bsdL1jKzBlfNhRsdKYuJg8VK6uVI6/jq6t8BQr5e+Kyjm
+rWqBxEA8juFYDXCi7RXZBugLT0x7dY1ww1++QCKorrvcgma6s03DIySOn6tFPJE
cRd5yoDTvszs4SBNf7ztELntodGV33CWyIStloyiaROwS8g+U9Jf95pXNzQFrGND
OlbO6740eBrOdr2ET23hDLoM1On4sbM4VnOd0TM+vIO907WertU8/ZvTG3kHWP+f
EIANftU=
-----END CERTIFICATE-----
Generated at Tue Jul 9 18:13:12 2024 by rpki-client on console-fra.rpki-client.org