Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/A758392A99E411EAA0DC703FC4F9AE02.roa
File: A758392A99E411EAA0DC703FC4F9AE02.roa (raw, json)
Hash identifier: oFzrJCJLO0xOIFuW8sWmt7x5W5wgD0rhhiJgaU7KHZM=
Subject key identifier: 35:AD:38:5E:CE:7A:A5:B5:7F:F4:EC:D5:4B:37:E3:54:3B:13:60:15
Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial: 0C70
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/A758392A99E411EAA0DC703FC4F9AE02.roa
Signing time: Tue 12 Dec 2023 18:46:30 +0000
ROA not before: Tue 12 Dec 2023 18:46:30 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 138397
IP address blocks: 103.124.110.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 21:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Validity
Not Before: Dec 12 18:46:30 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6578aa86-c8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:1f:dc:85:9d:39:5e:9a:16:68:3e:9e:46:
86:5b:54:d1:8e:72:6f:3a:67:6b:2d:d5:2e:91:24:
09:ce:0b:46:52:82:64:d9:77:80:81:77:72:07:d8:
73:e7:13:b0:59:ce:58:e8:a4:f2:5a:65:b7:70:d5:
69:bf:f8:11:b8:fa:97:62:b8:08:09:93:93:c3:8a:
de:96:b7:5e:5b:e0:8b:b4:b7:23:d1:67:7b:6a:27:
13:a5:61:13:f6:11:dc:46:0b:db:92:42:b3:5a:94:
64:65:03:71:2a:e0:4d:48:bd:67:17:a7:99:79:8d:
42:7d:09:5c:ea:f0:f7:fd:e9:ae:0a:68:68:0e:93:
71:76:c7:19:10:41:d5:a1:83:9d:16:08:73:63:ca:
ef:e4:42:3f:1e:05:48:5f:96:8c:f1:2a:88:34:4e:
48:4a:06:9e:0a:cd:3c:b5:d5:ae:d4:72:d4:5d:9c:
5a:ce:25:95:82:c6:51:a4:d6:cf:58:9b:79:9f:cc:
a7:bd:84:27:35:de:c1:0d:5c:8e:a5:3f:5a:f0:65:
58:5e:0e:cc:34:ef:a1:44:f4:17:44:53:42:99:fe:
11:bc:4b:09:01:91:43:e2:a6:80:e7:04:b7:ca:90:
e9:71:03:7c:47:8c:1f:73:de:59:44:d1:c3:fa:86:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AD:38:5E:CE:7A:A5:B5:7F:F4:EC:D5:4B:37:E3:54:3B:13:60:15
X509v3 Authority Key Identifier:
keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/A758392A99E411EAA0DC703FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.110.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:c3:6d:e2:98:6a:2c:99:6e:57:d2:3f:3f:15:5a:59:fe:a4:
bf:11:9d:1b:b9:da:65:d8:58:43:29:3d:e1:56:ce:41:3b:eb:
36:a0:68:14:b8:16:98:23:11:bc:08:88:2c:99:df:7b:09:ae:
ea:28:06:1c:f5:99:db:e0:c4:c9:33:44:8f:48:08:15:1c:a5:
85:d1:8e:bd:46:be:cb:dd:c0:69:67:a1:37:06:50:b2:b8:6c:
56:40:2a:2d:04:20:18:0b:34:1a:05:65:bb:e6:56:56:cf:d5:
c8:07:db:a5:db:6d:82:5c:44:a2:35:cd:2a:7e:da:04:44:92:
92:78:6a:73:00:96:1c:46:99:5c:97:18:41:ad:ae:85:8c:12:
38:fd:3d:06:ea:cc:2d:da:3f:23:ec:31:47:a2:db:21:be:6e:
8c:23:79:a9:5a:48:3a:63:45:7e:cb:2f:45:7e:1b:c2:9b:b0:
18:9a:e3:18:b5:d3:a9:02:b3:52:f0:a6:45:b8:25:49:21:90:
81:76:1f:53:00:25:ae:5c:b1:62:85:68:6e:66:f5:a6:d9:96:
5e:c0:96:b7:29:c0:cc:3f:bd:84:38:bd:6f:6b:6e:14:c3:ad:
d1:10:5d:6c:e2:42:18:74:b8:1b:da:9e:b2:43:66:a6:b8:a2:
a8:b6:fb:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1
NzQ3NzY3QUMwHhcNMjMxMjEyMTg0NjMwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTc4YWE4Ni1jOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Gcf3IWdOV6aFmg+nkaGW1TRjnJvOmdrLdUukSQJzgtGUoJk2XeAgXdyB9hz
5xOwWc5Y6KTyWmW3cNVpv/gRuPqXYrgICZOTw4relrdeW+CLtLcj0Wd7aicTpWET
9hHcRgvbkkKzWpRkZQNxKuBNSL1nF6eZeY1CfQlc6vD3/emuCmhoDpNxdscZEEHV
oYOdFghzY8rv5EI/HgVIX5aM8SqINE5ISgaeCs08tdWu1HLUXZxaziWVgsZRpNbP
WJt5n8ynvYQnNd7BDVyOpT9a8GVYXg7MNO+hRPQXRFNCmf4RvEsJAZFD4qaA5wS3
ypDpcQN8R4wfc95ZRNHD+oY/AwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDWtOF7O
eqW1f/Ts1Us341Q7E2AVMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB
MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjAzREYvOTI3Mzk3QjRDQTM0MTFFOTk2ODM3RTU2QzRGOUFFMDIvQTc1ODM5MkE5
OUU0MTFFQUEwREM3MDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnfG4wDQYJKoZIhvcNAQELBQADggEBAA3DbeKYaiyZblfS
Pz8VWln+pL8RnRu52mXYWEMpPeFWzkE76zagaBS4FpgjEbwIiCyZ33sJruooBhz1
mdvgxMkzRI9ICBUcpYXRjr1GvsvdwGlnoTcGULK4bFZAKi0EIBgLNBoFZbvmVlbP
1cgH26XbbYJcRKI1zSp+2gREkpJ4anMAlhxGmVyXGEGtroWMEjj9PQbqzC3aPyPs
MUei2yG+bowjealaSDpjRX7LL0V+G8KbsBia4xi106kCs1LwpkW4JUkhkIF2H1MA
Ja5csWKFaG5m9abZll7AlrcpwMw/vYQ4vW9rbhTDrdEQXWziQhh0uBvanrJDZqa4
oqi2+/c=
-----END CERTIFICATE-----
Generated at Wed Mar 20 23:02:14 2024 by rpki-client on console-fra.rpki-client.org