Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/3A418BCA95C411E6B02E9F20C4F9AE02.roa
File: 3A418BCA95C411E6B02E9F20C4F9AE02.roa (raw, json)
Hash identifier: +uR6zuVfZ+V0CW+3lEdhTP5PSUiHCLykid9pYpiYM1w=
Subject key identifier: 64:25:0E:CB:79:C3:A0:63:F5:F9:AF:1C:B4:02:94:E0:51:E9:F5:02
Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial: 1C66
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/3A418BCA95C411E6B02E9F20C4F9AE02.roa
Signing time: Tue 04 Jul 2023 16:23:05 +0000
ROA not before: Tue 04 Jul 2023 16:23:05 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 135408
IP address blocks: 103.114.34.0/24 maxlen: 24
103.217.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7270 (0x1c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Validity
Not Before: Jul 4 16:23:05 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64a44769-bb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:e8:d0:a4:a1:5c:54:8c:8a:f3:1f:67:ce:
5d:6b:2d:ca:f8:98:4c:7e:97:fe:b4:53:08:3d:48:
84:35:ff:11:de:3b:92:0e:d1:0f:98:50:63:6f:b1:
f2:5a:92:01:47:51:2d:31:a9:1c:67:54:9e:2a:3c:
53:7e:ec:0a:fe:27:fa:8e:1f:2a:c8:cc:5f:8b:48:
40:0b:fd:63:12:34:1c:e7:f7:e2:e5:5b:10:ff:d0:
6c:62:fa:a9:8b:72:74:10:81:ce:99:09:ab:19:04:
4a:35:91:34:d3:96:06:2e:cb:8a:d7:19:cf:da:6f:
a1:d3:a6:e6:b8:43:65:ab:80:94:ec:96:22:a9:9a:
fa:85:85:e9:77:78:83:b9:32:5c:ad:2d:0a:75:c0:
a9:fc:32:8e:40:e8:09:96:d6:be:a4:ef:2e:ba:c3:
4a:1f:c5:e7:76:78:6b:9a:9f:81:4c:26:d2:b7:01:
6d:90:3f:3f:70:86:c5:47:93:1f:c0:2f:d3:b5:dc:
e0:1a:21:5f:c3:c5:dc:2d:9d:87:ae:ef:07:79:bf:
03:cd:22:40:80:16:71:45:85:53:a2:e4:99:39:a5:
cd:c7:c1:20:9c:53:81:56:94:1a:65:a4:47:f5:fc:
3c:49:c9:32:d3:ba:ff:25:f3:0a:db:d9:77:bf:a5:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:0E:CB:79:C3:A0:63:F5:F9:AF:1C:B4:02:94:E0:51:E9:F5:02
X509v3 Authority Key Identifier:
keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/3A418BCA95C411E6B02E9F20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.34.0/24
103.217.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3e:75:95:ac:86:fd:cc:95:ce:12:0a:ee:43:ed:90:41:b5:
28:db:90:7a:6e:23:ea:c4:4c:f6:f2:91:d7:17:ce:79:fe:d0:
41:f4:ad:1e:54:aa:f3:52:82:e8:1f:d7:ba:72:07:ee:55:e0:
b1:be:95:19:5c:c7:56:9c:36:10:44:67:8d:ef:c9:2a:dd:ed:
6c:76:22:45:28:f7:17:9b:8b:0e:65:35:ed:61:94:ab:af:02:
4c:ca:c3:75:e8:79:70:9a:7d:33:8a:62:c1:95:d7:f8:e4:20:
fe:ee:d9:a4:c9:64:44:62:af:0d:93:b7:e0:4f:e0:ce:9a:f9:
4c:ec:48:48:f1:de:7e:1c:78:c9:01:35:fb:3e:bb:1f:64:09:
60:0e:c3:d9:23:11:9a:62:cc:f3:4c:8c:23:63:fd:52:68:94:
96:6d:27:86:f9:53:a0:d1:e5:62:a2:ce:9b:1d:da:fa:47:8a:
e5:e1:c6:1c:c9:86:e7:86:dd:ab:87:3f:87:bc:48:aa:05:d9:
6e:af:f2:82:88:3b:ab:a4:a6:57:47:6b:7b:ec:e5:9e:25:7c:
f9:29:44:25:8c:61:5c:24:0a:96:75:97:a7:9a:b3:a5:85:7c:
99:c0:fe:67:2d:29:f4:83:c1:24:e0:30:30:2e:e5:a5:71:17:
71:9d:1b:5d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICHGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx
Q0I0NUQxNzEwHhcNMjMwNzA0MTYyMzA1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE0NDc2OS1iYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyXo0KShXFSMivMfZ85day3K+JhMfpf+tFMIPUiENf8R3juSDtEPmFBjb7Hy
WpIBR1EtMakcZ1SeKjxTfuwK/if6jh8qyMxfi0hAC/1jEjQc5/fi5VsQ/9BsYvqp
i3J0EIHOmQmrGQRKNZE005YGLsuK1xnP2m+h06bmuENlq4CU7JYiqZr6hYXpd3iD
uTJcrS0KdcCp/DKOQOgJlta+pO8uusNKH8Xndnhrmp+BTCbStwFtkD8/cIbFR5Mf
wC/TtdzgGiFfw8XcLZ2Hru8Heb8DzSJAgBZxRYVTouSZOaXNx8EgnFOBVpQaZaRH
9fw8Scky07r/JfMK29l3v6UqwQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGQlDst5
w6Bj9fmvHLQClOBR6fUCMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1
QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUIwMUQvMjE5Mjk1MTY5NUMzMTFFNjg1NUEzRTFDQzRGOUFFMDIvM0E0MThCQ0E5
NUM0MTFFNkIwMkU5RjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnciIDBABn2fgwDQYJKoZIhvcNAQELBQADggEBAA4+dZWs
hv3Mlc4SCu5D7ZBBtSjbkHpuI+rETPbykdcXznn+0EH0rR5UqvNSgugf17pyB+5V
4LG+lRlcx1acNhBEZ43vySrd7Wx2IkUo9xebiw5lNe1hlKuvAkzKw3XoeXCafTOK
YsGV1/jkIP7u2aTJZERirw2Tt+BP4M6a+UzsSEjx3n4ceMkBNfs+ux9kCWAOw9kj
EZpizPNMjCNj/VJolJZtJ4b5U6DR5WKizpsd2vpHiuXhxhzJhueG3auHP4e8SKoF
2W6v8oKIO6ukpldHa3vs5Z4lfPkpRCWMYVwkCpZ1l6eas6WFfJnA/mctKfSDwSTg
MDAu5aVxF3GdG10=
Generated at Thu Sep 21 01:16:31 2023 by rpki-client on console-fra.rpki-client.org