Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/F69E273EE66A11EEA1E9285DC4F9AE02.roa
File: F69E273EE66A11EEA1E9285DC4F9AE02.roa (raw, json)
Hash identifier: XtkixrnaNPQ6PNl2VvWvEqr7zVN7MobDVoRKW/p1wiU=
Subject key identifier: F5:A9:C6:FA:C5:04:1B:5E:E7:EB:C1:E0:30:BE:28:C6:0B:83:FE:48
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 01AA
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/F69E273EE66A11EEA1E9285DC4F9AE02.roa
Signing time: Wed 20 Mar 2024 03:35:57 +0000
ROA not before: Wed 20 Mar 2024 03:35:57 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 46573
IP address blocks: 103.102.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 11:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Mar 20 03:35:57 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65fa599d-fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:2b:d1:57:f5:c2:8f:2a:af:da:b2:4e:ac:
7d:f9:f6:06:8f:91:1a:4a:49:e7:51:66:e8:63:a3:
b2:c3:35:6d:18:4a:a6:92:a2:95:22:3b:dd:d2:26:
8f:c3:c2:c2:d6:bc:56:f6:4e:c9:4b:d7:18:91:78:
8b:e1:aa:f0:66:73:34:1d:3c:1b:86:b0:5e:09:b7:
b2:9e:02:16:93:38:98:16:03:6a:bc:7f:b4:41:46:
f4:8e:5a:23:56:47:ec:9b:fd:3e:d8:1f:b6:a2:60:
6c:40:27:a7:98:b5:9e:e0:37:db:4f:e1:7f:b6:c5:
f8:60:49:35:76:eb:13:0c:bb:85:35:8b:cc:f6:ea:
3f:6c:de:70:ba:38:7e:43:62:6c:76:96:af:42:1e:
f4:a9:7f:b9:6e:9f:76:a9:a0:ab:a5:3f:17:78:b9:
03:f7:01:96:81:13:8e:67:f4:62:21:9b:18:51:ec:
f0:61:18:2d:1e:fa:9d:80:85:52:e5:2c:56:b9:70:
a8:46:12:24:bd:73:dc:0d:80:fd:23:a3:0a:9d:45:
03:9a:c9:6c:ce:8c:b1:da:a5:9a:f4:7a:6a:49:89:
63:96:b7:0a:fc:5b:cb:ab:a1:00:62:0d:68:d5:81:
99:c7:53:21:db:bc:7c:90:cc:bb:f2:98:98:c2:bc:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:C6:FA:C5:04:1B:5E:E7:EB:C1:E0:30:BE:28:C6:0B:83:FE:48
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/F69E273EE66A11EEA1E9285DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
21:67:de:2e:ee:e8:f4:13:b9:64:68:16:a9:e7:46:4f:cd:e6:
02:0e:52:7b:1c:23:1e:6c:af:f4:26:91:8f:db:9d:67:b5:f4:
c0:49:1c:a9:b3:8c:95:4f:77:46:b3:92:3a:99:0d:cc:f4:34:
58:7c:e4:e5:0b:0e:1b:e6:7b:7a:42:24:19:f6:81:cb:9c:30:
b9:d4:42:29:fc:4f:df:de:b4:e6:d0:25:e6:3e:62:5c:99:83:
cc:77:9d:df:5a:87:5a:2e:e5:b5:e4:1d:44:19:c5:6d:7d:94:
fc:af:1f:63:e0:c4:7a:85:ca:79:da:23:38:d6:88:62:25:bc:
69:84:eb:0a:eb:33:47:71:ce:38:99:64:2b:62:ab:06:0c:76:
a8:e0:d3:51:04:0e:89:2e:e7:70:30:5f:48:c6:5b:4f:92:67:
7a:3a:40:6e:7e:9c:3f:c9:60:6a:12:90:9d:4a:b9:16:34:97:
28:a1:1f:9f:27:61:a6:b5:6e:17:43:dc:45:66:a3:46:da:a2:
d3:ea:0e:af:0c:b8:de:49:24:aa:a9:9c:f8:49:0c:89:7a:30:
4b:ce:97:5a:97:81:7b:e2:28:54:ca:eb:4e:53:b7:24:7a:75:
9e:c6:31:6b:61:67:ea:72:94:dd:c5:4e:c8:11:02:43:14:3f:
81:a9:7b:53
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG
MkU0MDkyQjQwHhcNMjQwMzIwMDMzNTU3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWZhNTk5ZC1mYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5vwr0Vf1wo8qr9qyTqx9+fYGj5EaSknnUWboY6OywzVtGEqmkqKVIjvd0iaP
w8LC1rxW9k7JS9cYkXiL4arwZnM0HTwbhrBeCbeyngIWkziYFgNqvH+0QUb0jloj
Vkfsm/0+2B+2omBsQCenmLWe4DfbT+F/tsX4YEk1dusTDLuFNYvM9uo/bN5wujh+
Q2JsdpavQh70qX+5bp92qaCrpT8XeLkD9wGWgROOZ/RiIZsYUezwYRgtHvqdgIVS
5SxWuXCoRhIkvXPcDYD9I6MKnUUDmslszoyx2qWa9HpqSYljlrcK/FvLq6EAYg1o
1YGZx1Mh27x8kMy78piYwrw1XQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPWpxvrF
BBte5+vB4DC+KMYLg/5IMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4
NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr
clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTgwRDIvRUJDMUFDMkMxODRGMTFFREFEQkMzQzY1QzRGOUFFMDIvRjY5RTI3M0VF
NjZBMTFFRUExRTkyODVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZn4wDQYJKoZIhvcNAQELBQADggEBACFn3i7u6PQTuWRo
FqnnRk/N5gIOUnscIx5sr/QmkY/bnWe19MBJHKmzjJVPd0azkjqZDcz0NFh85OUL
Dhvme3pCJBn2gcucMLnUQin8T9/etObQJeY+YlyZg8x3nd9ah1ou5bXkHUQZxW19
lPyvH2PgxHqFynnaIzjWiGIlvGmE6wrrM0dxzjiZZCtiqwYMdqjg01EEDoku53Aw
X0jGW0+SZ3o6QG5+nD/JYGoSkJ1KuRY0lyihH58nYaa1bhdD3EVmo0baotPqDq8M
uN5JJKqpnPhJDIl6MEvOl1qXgXviKFTK605TtyR6dZ7GMWthZ+pylN3FTsgRAkMU
P4Gpe1M=
-----END CERTIFICATE-----
Generated at Thu Apr 18 13:30:08 2024 by rpki-client on console-fra.rpki-client.org