Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/EABE5FE2607211EF9B3A3E1CC4F9AE02.roa
File: EABE5FE2607211EF9B3A3E1CC4F9AE02.roa (raw, json)
Hash identifier: U+vNE4aJusmYyMowD+NgEk7i3Iec7r4sxhPfMkKSX1w=
Subject key identifier: 87:4D:B9:55:9B:65:29:70:0C:37:6F:C7:4B:04:F8:0F:06:46:E2:D8
Certificate issuer: /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial: 1339
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/EABE5FE2607211EF9B3A3E1CC4F9AE02.roa
Signing time: Thu 22 Aug 2024 10:40:15 +0000
ROA not before: Thu 22 Aug 2024 10:40:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 137877
IP address blocks: 103.64.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 03:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4921 (0x1339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Validity
Not Before: Aug 22 10:40:15 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66c7158f-1119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:c0:eb:f8:e4:06:8d:34:6d:fb:0e:0b:93:
f4:af:98:62:cb:5d:a6:47:dd:fd:18:9d:04:83:1c:
c0:7d:f2:6c:5e:fd:74:1e:4f:8c:c9:b3:e5:0f:28:
54:7b:95:38:12:dc:76:46:03:81:55:8e:af:1d:3d:
99:06:12:ca:fb:e2:d9:3c:8f:85:2b:7a:8a:02:f0:
17:1d:b7:4f:75:2b:57:5b:ba:55:39:25:f1:8f:ac:
1c:4b:d6:8b:0a:be:14:c8:29:0f:e4:2e:49:b0:44:
4c:6c:d9:4c:c2:1c:4c:c4:e9:b3:9a:5a:93:87:1b:
35:d6:f8:16:78:af:8b:84:9f:31:d3:e1:b5:13:29:
17:25:55:6f:e4:bb:0f:e8:b6:68:8f:73:2f:9d:94:
03:e6:4a:c0:4d:e5:3c:a7:be:9b:20:f9:a6:5b:d8:
ea:f2:77:d6:f5:62:5e:32:09:76:f0:bc:77:97:fe:
5e:4e:42:dd:fb:95:b7:79:91:f5:56:3c:da:2e:5f:
37:07:8a:be:81:7f:0e:f7:86:e8:6f:fa:09:16:78:
e9:98:9b:22:b9:9e:11:bd:fe:25:68:c7:6c:29:2b:
75:aa:a2:82:3c:01:74:f7:4b:40:d0:57:85:ee:6f:
67:93:72:44:23:11:21:3e:5a:d8:ac:6a:72:fc:12:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4D:B9:55:9B:65:29:70:0C:37:6F:C7:4B:04:F8:0F:06:46:E2:D8
X509v3 Authority Key Identifier:
keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/EABE5FE2607211EF9B3A3E1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.64.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:26:d8:ce:23:f3:47:d2:2c:46:e7:9a:d8:0c:f1:a3:01:23:
84:09:57:24:e3:f0:0d:77:c8:b9:91:b3:6b:73:70:80:1d:48:
24:08:8c:41:ce:aa:dd:77:ba:bf:0f:70:b0:1d:6e:de:83:da:
66:2c:4c:a1:99:82:92:13:f9:30:f1:b1:37:87:4d:12:98:7d:
08:4f:fa:bb:b9:83:b7:d2:d0:b2:70:0c:62:47:14:27:fb:63:
b0:0a:26:9c:13:5d:6b:f6:75:75:05:c8:13:8f:e9:0e:46:5f:
46:66:47:a2:d2:5f:28:94:f2:31:ff:e1:2c:e8:86:42:8d:49:
43:4b:95:2d:ad:1c:53:70:5a:f6:1f:89:0b:41:ee:4c:da:c9:
d3:e6:0a:bc:f5:71:36:32:9f:9a:a6:1e:2f:7a:21:68:47:bf:
f2:59:2e:a7:0a:3f:c7:1f:7b:28:3b:0c:d3:54:8e:7c:85:7a:
3b:8e:c4:2a:31:3f:f5:5c:b6:00:5c:8d:40:65:13:0c:84:7f:
1a:39:f1:20:5d:f4:e0:57:5d:ac:18:f1:3e:62:1c:d4:9c:f2:
42:55:44:10:a0:fe:5f:d7:45:f9:a8:bb:ff:4a:ed:2b:5b:c0:
03:c1:e7:ed:81:43:92:a9:63:9a:79:59:fb:f9:fa:9b:7b:37:
44:ca:ee:66
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5M0YxMTAvBgNVBAUTKEIyRjhBQjAwRDU3NDY0REQ1RDA1QTQ1QTQ3QzQyMEY1
Rjg5NkI4RkMwHhcNMjQwODIyMTA0MDE1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmM3MTU4Zi0xMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkxbA6/jkBo00bfsOC5P0r5hiy12mR939GJ0EgxzAffJsXv10Hk+MybPlDyhU
e5U4Etx2RgOBVY6vHT2ZBhLK++LZPI+FK3qKAvAXHbdPdStXW7pVOSXxj6wcS9aL
Cr4UyCkP5C5JsERMbNlMwhxMxOmzmlqThxs11vgWeK+LhJ8x0+G1EykXJVVv5LsP
6LZoj3MvnZQD5krATeU8p76bIPmmW9jq8nfW9WJeMgl28Lx3l/5eTkLd+5W3eZH1
VjzaLl83B4q+gX8O94bob/oJFnjpmJsiuZ4Rvf4laMdsKSt1qqKCPAF090tA0FeF
7m9nk3JEIxEhPlrYrGpy/BKe3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIdNuVWb
ZSlwDDdvx0sE+A8GRuLYMB8GA1UdIwQYMBaAFLL4qwDVdGTdXQWkWkfEIPX4lrj8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkzRi8yRUQ3NzVEQUEz
NkMxMUU4OTE0MDU5MjZDNEY5QUUwMi9zdmlyQU5WMFpOMWRCYVJhUjhRZzlmaVd1
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N2aXJBTlYwWk4xZEJhUmFSOFFnOWZpV3VQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU5M0YvMkVENzc1REFBMzZDMTFFODkxNDA1OTI2QzRGOUFFMDIvRUFCRTVGRTI2
MDcyMTFFRjlCM0EzRTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnQAwwDQYJKoZIhvcNAQELBQADggEBALYm2M4j80fSLEbn
mtgM8aMBI4QJVyTj8A13yLmRs2tzcIAdSCQIjEHOqt13ur8PcLAdbt6D2mYsTKGZ
gpIT+TDxsTeHTRKYfQhP+ru5g7fS0LJwDGJHFCf7Y7AKJpwTXWv2dXUFyBOP6Q5G
X0ZmR6LSXyiU8jH/4SzohkKNSUNLlS2tHFNwWvYfiQtB7kzaydPmCrz1cTYyn5qm
Hi96IWhHv/JZLqcKP8cfeyg7DNNUjnyFejuOxCoxP/VctgBcjUBlEwyEfxo58SBd
9OBXXawY8T5iHNSc8kJVRBCg/l/XRfmou/9K7StbwAPB5+2BQ5KpY5p5Wfv5+pt7
N0TK7mY=
Generated at Wed Sep 25 04:41:59 2024 by rpki-client on console-fra.rpki-client.org