Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/46B4B7169BDC11EF9F91AD78C4F9AE02.roa
File: 46B4B7169BDC11EF9F91AD78C4F9AE02.roa (raw, json)
Hash identifier: J+oNWwUOBe5ZMLa5F3Tx3NDW5joUcnhJb9dcKpJLBlQ=
Subject key identifier: 15:AA:83:13:C8:CA:09:74:23:7B:B2:85:D4:47:9E:86:DE:11:0C:2F
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 08
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/46B4B7169BDC11EF9F91AD78C4F9AE02.roa
Signing time: Wed 13 Nov 2024 01:46:55 +0000
ROA not before: Wed 13 Nov 2024 01:46:55 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 9266
IP address blocks: 103.36.152.0/22 maxlen: 22
103.65.216.0/22 maxlen: 22
103.225.108.0/22 maxlen: 22
202.1.116.0/22 maxlen: 22
202.1.116.0/24 maxlen: 24
202.1.117.0/24 maxlen: 24
202.1.118.0/24 maxlen: 24
202.1.119.0/24 maxlen: 24
203.5.244.0/24 maxlen: 24
203.10.124.0/24 maxlen: 24
203.12.116.0/24 maxlen: 24
203.14.106.0/24 maxlen: 24
203.14.193.0/24 maxlen: 24
203.18.151.0/24 maxlen: 24
203.19.52.0/24 maxlen: 24
203.19.220.0/24 maxlen: 24
203.20.110.0/24 maxlen: 24
203.20.111.0/24 maxlen: 24
203.21.22.0/24 maxlen: 24
203.22.169.0/24 maxlen: 24
203.23.50.0/24 maxlen: 24
203.23.71.0/24 maxlen: 24
203.24.174.0/23 maxlen: 24
203.25.68.0/22 maxlen: 22
203.25.69.0/24 maxlen: 24
203.25.70.0/24 maxlen: 24
203.25.71.0/24 maxlen: 24
203.25.123.0/24 maxlen: 24
203.25.158.0/24 maxlen: 24
203.26.171.0/24 maxlen: 24
203.26.226.0/23 maxlen: 23
203.29.21.0/24 maxlen: 24
203.29.127.0/24 maxlen: 24
203.30.78.0/24 maxlen: 24
203.31.214.0/24 maxlen: 24
203.32.44.0/23 maxlen: 24
203.32.47.0/24 maxlen: 24
203.33.28.0/24 maxlen: 24
203.33.58.0/23 maxlen: 24
203.33.108.0/23 maxlen: 24
203.34.167.0/24 maxlen: 24
203.55.194.0/24 maxlen: 24
203.55.195.0/24 maxlen: 24
203.62.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 01:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: Nov 13 01:46:55 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6734050f-17fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:80:cd:4f:8b:f3:b8:4c:5a:00:d3:7a:3a:
16:2d:1e:ba:a1:c8:67:ea:dd:ca:fe:b2:a7:8d:6b:
81:ab:a8:27:4d:f7:07:7a:9c:25:a6:9d:64:8c:52:
f2:be:f8:b6:aa:91:6a:a0:d0:cf:ea:28:27:92:5f:
2a:d5:05:e8:55:1e:40:9d:18:af:95:53:fc:5c:51:
88:e1:e6:33:91:71:f0:36:33:ad:2a:48:da:6c:5f:
26:1b:dd:5a:a1:d9:a8:c4:28:9f:69:76:f3:1c:28:
c1:0b:d2:8f:d8:8f:9a:90:12:43:b8:aa:1b:37:45:
a8:7e:4e:ee:22:ec:85:ec:83:dd:ba:aa:39:cb:1b:
5e:79:63:c7:c2:06:8d:52:41:69:da:09:94:f4:3c:
d3:c5:75:e9:33:e7:a9:ab:04:cc:72:cf:b7:78:32:
98:b7:dc:6e:c3:01:0e:10:42:cd:6a:44:e8:9b:c5:
a9:05:fd:e4:68:35:88:ec:56:f1:64:99:84:ef:0d:
51:84:d3:13:e5:7d:e7:58:f4:3c:06:26:bd:ba:38:
0a:80:db:0d:42:c8:d8:d4:81:2b:b0:11:54:f1:58:
87:78:8c:bf:50:81:ee:55:77:9a:07:bc:28:e9:18:
93:04:f6:48:aa:99:ba:a1:d0:16:68:6d:f5:d6:72:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:83:13:C8:CA:09:74:23:7B:B2:85:D4:47:9E:86:DE:11:0C:2F
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/46B4B7169BDC11EF9F91AD78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.152.0/22
103.65.216.0/22
103.225.108.0/22
202.1.116.0/22
203.5.244.0/24
203.10.124.0/24
203.12.116.0/24
203.14.106.0/24
203.14.193.0/24
203.18.151.0/24
203.19.52.0/24
203.19.220.0/24
203.20.110.0/23
203.21.22.0/24
203.22.169.0/24
203.23.50.0/24
203.23.71.0/24
203.24.174.0/23
203.25.68.0/22
203.25.123.0/24
203.25.158.0/24
203.26.171.0/24
203.26.226.0/23
203.29.21.0/24
203.29.127.0/24
203.30.78.0/24
203.31.214.0/24
203.32.44.0/23
203.32.47.0/24
203.33.28.0/24
203.33.58.0/23
203.33.108.0/23
203.34.167.0/24
203.55.194.0/23
203.62.147.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f3:44:4c:89:15:67:17:17:5d:cc:7b:3e:af:25:8e:f9:5a:
3d:f6:1e:50:0b:a9:c8:be:98:41:81:e0:06:fe:b7:10:48:c0:
58:b1:20:26:a0:26:e6:61:3f:91:e5:8a:7f:c3:a0:e8:a2:b0:
6a:fd:25:ee:ea:b5:23:5e:37:a2:8e:23:da:83:a1:ac:6e:74:
16:75:78:5c:11:4d:10:5f:35:48:53:03:76:84:20:3a:11:b5:
6d:cb:30:bf:08:47:e3:bc:c1:f1:32:28:68:d8:57:e6:7a:2d:
27:ae:68:a7:d7:49:bf:ab:62:18:b1:56:a7:11:0b:8a:f3:ec:
53:e1:da:49:1d:df:b4:c6:b5:0f:b5:d3:ac:40:b8:66:8c:bb:
6b:f6:0b:77:5a:64:13:ff:ea:a7:95:3a:b2:85:c4:70:4b:57:
d7:9c:28:5d:a3:14:23:d7:5d:d2:e7:6f:e4:34:c8:48:69:05:
7e:7e:2e:11:c4:73:62:8e:ba:6f:f5:da:10:a6:e3:05:32:99:
18:8c:a9:2a:cf:20:8e:a5:df:a3:c9:d6:c3:a3:cb:2a:02:a0:
25:ad:7a:10:ec:a0:c9:9d:ae:94:6c:0a:61:b0:d0:aa:31:68:
f1:20:ff:a4:02:06:bd:57:d6:e4:5f:1e:b2:25:55:e3:e3:ad:
48:2b:6f:62
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RDg0ODExMC8GA1UEBRMoMUREMUI4Njg3ODg2OTI0QzQ2MTMxMTYwNTBFRTkwRTlE
NDk0MjY5RTAeFw0yNDExMTMwMTQ2NTVaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MzQwNTBmLTE3ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMF4DNT4vzuExaANN6OhYtHrqhyGfq3cr+sqeNa4GrqCdN9wd6nCWmnWSMUvK+
+LaqkWqg0M/qKCeSXyrVBehVHkCdGK+VU/xcUYjh5jORcfA2M60qSNpsXyYb3Vqh
2ajEKJ9pdvMcKMEL0o/Yj5qQEkO4qhs3Rah+Tu4i7IXsg926qjnLG155Y8fCBo1S
QWnaCZT0PNPFdekz56mrBMxyz7d4Mpi33G7DAQ4QQs1qROibxakF/eRoNYjsVvFk
mYTvDVGE0xPlfedY9DwGJr26OAqA2w1CyNjUgSuwEVTxWId4jL9Qge5Vd5oHvCjp
GJME9kiqmbqh0BZobfXWcl9PAgMBAAGjggNmMIIDYjAdBgNVHQ4EFgQUFaqDE8jK
CXQje7KF1Eeeht4RDC8wHwYDVR0jBBgwFoAUHdG4aHiGkkxGExFgUO6Q6dSUJp4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEODQ4L0MyNTFCNUIyOUIx
MDExRUZBNzJCQTAyMEM0RjlBRTAyL0hkRzRhSGlHa2t4R0V4RmdVTzZRNmRTVUpw
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGRHNGFIaUdra3hHRXhGZ1VPNlE2ZFNVSnA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDg0OC9DMjUxQjVCMjlCMTAxMUVGQTcyQkEwMjBDNEY5QUUwMi80NkI0QjcxNjlC
REMxMUVGOUY5MUFENzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDCB7wYIKwYBBQUHAQcBAf8E
gd8wgdwwgdkEAgABMIHSAwQCZySYAwQCZ0HYAwQCZ+FsAwQCygF0AwQAywX0AwQA
ywp8AwQAywx0AwQAyw5qAwQAyw7BAwQAyxKXAwQAyxM0AwQAyxPcAwQByxRuAwQA
yxUWAwQAyxapAwQAyxcyAwQAyxdHAwQByxiuAwQCyxlEAwQAyxl7AwQAyxmeAwQA
yxqrAwQByxriAwQAyx0VAwQAyx1/AwQAyx5OAwQAyx/WAwQByyAsAwQAyyAvAwQA
yyEcAwQByyE6AwQByyFsAwQAyyKnAwQByzfCAwQAyz6TMA0GCSqGSIb3DQEBCwUA
A4IBAQC780RMiRVnFxddzHs+ryWO+Vo99h5QC6nIvphBgeAG/rcQSMBYsSAmoCbm
YT+R5Yp/w6DoorBq/SXu6rUjXjeijiPag6GsbnQWdXhcEU0QXzVIUwN2hCA6EbVt
yzC/CEfjvMHxMiho2Ffmei0nrmin10m/q2IYsVanEQuK8+xT4dpJHd+0xrUPtdOs
QLhmjLtr9gt3WmQT/+qnlTqyhcRwS1fXnChdoxQj113S52/kNMhIaQV+fi4RxHNi
jrpv9doQpuMFMpkYjKkqzyCOpd+jydbDo8sqAqAlrXoQ7KDJna6UbAphsNCqMWjx
IP+kAga9V9bkXx6yJVXj461IK29i
-----END CERTIFICATE-----
Generated at Mon Nov 18 03:48:33 2024 by rpki-client on console-ams.rpki-client.org