Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BDF6CE506AEC11ECB61ECF30C4F9AE02.roa
File: BDF6CE506AEC11ECB61ECF30C4F9AE02.roa (raw, json)
Hash identifier: SoX108zTfo7ruX1W89cEULLlbomREsYQwZ2QFAQHGyI=
Subject key identifier: E9:F7:5F:1C:2F:DA:AF:D6:A7:00:9C:9A:69:67:3E:1A:52:DB:52:6B
Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial: 0332
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BDF6CE506AEC11ECB61ECF30C4F9AE02.roa
Signing time: Mon 19 Feb 2024 02:44:51 +0000
ROA not before: Mon 19 Feb 2024 02:44:51 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 139641
IP address blocks: 103.178.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 08:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 818 (0x332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Validity
Not Before: Feb 19 02:44:51 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65d2c0a3-f54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:17:f1:2e:39:d7:db:d1:7a:6d:83:ec:bf:
e0:74:5d:56:ae:35:82:9b:50:a1:10:88:91:cb:a1:
02:37:42:e7:c8:d3:61:6d:b7:7d:00:7d:9d:18:f2:
46:0b:4d:71:57:1b:9b:3b:04:30:47:21:65:a7:f2:
38:e5:a4:16:b9:4f:17:42:33:01:a7:1a:e9:3e:4b:
19:98:9c:af:8f:0c:77:03:63:2d:11:54:5f:4b:c6:
e3:75:84:c1:a3:77:f4:ad:9a:2e:c7:44:11:cf:0c:
32:3e:92:5e:8a:2f:f2:cd:16:a6:57:88:15:6e:60:
ba:21:94:0a:9f:9d:2f:a2:50:f7:11:58:01:3f:62:
a3:57:db:42:9c:09:23:74:1b:aa:ac:e9:a5:a2:57:
ee:3e:da:79:84:30:6b:59:4e:0e:41:a2:e5:55:57:
a4:2e:0c:c6:1a:b7:05:33:33:ae:55:a5:9b:66:88:
42:1b:f2:29:8c:0a:3c:b3:4a:11:6f:5d:96:39:7c:
82:a0:58:52:f9:c6:30:6c:01:52:10:18:d4:af:41:
8b:c4:29:cb:b2:72:2d:0c:36:0c:dd:ca:d1:75:38:
77:37:b8:35:d1:6c:05:aa:88:f6:65:2b:0d:7b:f9:
a9:96:14:ec:8f:6d:f6:6c:f4:f3:3f:f9:da:22:fa:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:5F:1C:2F:DA:AF:D6:A7:00:9C:9A:69:67:3E:1A:52:DB:52:6B
X509v3 Authority Key Identifier:
keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BDF6CE506AEC11ECB61ECF30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ad:af:cb:8d:1e:ec:1b:4d:db:c3:36:1d:c3:e2:2a:91:0e:
d3:c6:ba:41:88:cc:3d:7b:d9:20:5c:cd:64:6e:b6:b1:b5:41:
fc:17:65:94:95:78:21:da:1b:c0:f9:29:d0:af:e5:90:54:2f:
7e:e5:63:89:73:91:d9:06:25:26:85:c6:3c:7e:52:12:a3:0c:
b4:e4:59:47:45:c8:aa:33:01:0b:6a:2f:e8:98:c6:d7:e8:eb:
22:04:0b:e4:eb:0e:ce:55:67:5a:a0:15:b3:78:25:a8:26:00:
1e:f3:32:39:3c:d5:32:f8:1b:b0:d7:28:f5:96:7f:38:34:2f:
76:87:2b:4c:cc:2c:84:99:da:ab:d3:54:b9:44:37:dc:75:95:
08:87:0b:ae:ef:d1:c7:e3:1a:78:99:f3:07:32:a8:53:a7:4b:
d1:ed:ae:be:02:80:95:a4:1d:a7:cd:25:5c:5b:c9:85:28:23:
ca:b9:0b:b3:98:8a:d6:cc:71:b7:60:30:ad:73:e8:af:22:c7:
7f:c8:aa:36:05:96:8d:5b:64:37:3d:9d:02:dc:c7:6c:b9:3a:
17:3e:75:0b:32:07:44:d0:a7:95:a0:f1:53:be:0a:fe:d1:9b:
b4:e1:d7:a3:fc:88:75:da:06:ce:a5:f4:2a:7b:38:7e:d3:fd:
4d:1c:bd:da
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy
QThBRjFDQjUwHhcNMjQwMjE5MDI0NDUxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQyYzBhMy1mNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlAX8S4519vRem2D7L/gdF1WrjWCm1ChEIiRy6ECN0LnyNNhbbd9AH2dGPJG
C01xVxubOwQwRyFlp/I45aQWuU8XQjMBpxrpPksZmJyvjwx3A2MtEVRfS8bjdYTB
o3f0rZoux0QRzwwyPpJeii/yzRamV4gVbmC6IZQKn50volD3EVgBP2KjV9tCnAkj
dBuqrOmlolfuPtp5hDBrWU4OQaLlVVekLgzGGrcFMzOuVaWbZohCG/IpjAo8s0oR
b12WOXyCoFhS+cYwbAFSEBjUr0GLxCnLsnItDDYM3crRdTh3N7g10WwFqoj2ZSsN
e/mplhTsj232bPTzP/naIvowVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOn3Xxwv
2q/WpwCcmmlnPhpS21JrMB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB
RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzAxMjgvOTFCQzM3NTI2QUU4MTFFQ0E0NDg0NjVCQzRGOUFFMDIvQkRGNkNFNTA2
QUVDMTFFQ0I2MUVDRjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsvMwDQYJKoZIhvcNAQELBQADggEBAA6tr8uNHuwbTdvD
Nh3D4iqRDtPGukGIzD172SBczWRutrG1QfwXZZSVeCHaG8D5KdCv5ZBUL37lY4lz
kdkGJSaFxjx+UhKjDLTkWUdFyKozAQtqL+iYxtfo6yIEC+TrDs5VZ1qgFbN4Jagm
AB7zMjk81TL4G7DXKPWWfzg0L3aHK0zMLISZ2qvTVLlEN9x1lQiHC67v0cfjGniZ
8wcyqFOnS9Htrr4CgJWkHafNJVxbyYUoI8q5C7OYitbMcbdgMK1z6K8ix3/IqjYF
lo1bZDc9nQLcx2y5Ohc+dQsyB0TQp5Wg8VO+Cv7Rm7Th16P8iHXaBs6l9Cp7OH7T
/U0cvdo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org