Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/7A2626FC48B911EDB883E24BC4F9AE02.roa
File: 7A2626FC48B911EDB883E24BC4F9AE02.roa (raw, json)
Hash identifier: OeScHCaH77SGCeuxqvlWCCIBmgkA2EXibTmf85QMTCs=
Subject key identifier: 79:2E:9C:10:9F:44:CE:62:87:98:46:7A:DD:60:D4:C2:6A:36:95:5E
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 0187
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/7A2626FC48B911EDB883E24BC4F9AE02.roa
Signing time: Thu 03 Oct 2024 02:36:47 +0000
ROA not before: Thu 03 Oct 2024 02:36:47 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150338
IP address blocks: 103.15.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 16:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Oct 3 02:36:47 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66fe033f-cd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:89:a6:89:64:eb:2e:19:50:d1:92:3d:7e:
f6:51:3d:b6:97:8b:44:af:51:49:0c:62:d2:28:28:
46:40:27:f7:97:67:6f:be:9d:22:fd:38:c2:27:73:
85:31:ec:41:8a:49:76:d0:46:65:b6:40:b6:aa:cc:
cc:39:b5:e1:cb:c3:4c:56:4f:0b:92:95:ed:d8:80:
0f:90:4f:83:11:93:79:8b:1e:0c:b2:43:33:bd:78:
3c:e5:d2:dd:3d:58:9f:46:df:41:1b:fc:22:38:a9:
c1:85:a1:ae:c6:c7:ff:c5:00:76:d7:60:70:11:46:
3d:82:0b:22:b4:3e:ac:c6:f7:8e:95:3a:ff:57:d2:
91:84:cc:ba:5d:4b:45:e9:a8:b4:97:d7:64:7b:47:
40:e6:5a:28:05:15:c4:f3:a2:1d:27:ba:29:59:1b:
d7:a1:60:88:48:f6:97:3f:01:0b:7a:81:f7:3a:48:
3d:26:38:b0:c2:ac:f0:71:f8:83:50:b0:94:14:be:
39:99:7d:1c:3d:e6:7a:cf:f2:5a:0f:fd:3a:34:46:
c1:90:8e:4d:b5:35:65:e7:3a:40:e7:39:c3:93:2c:
4d:63:7f:dd:e8:47:76:46:9b:fd:01:f4:29:53:e4:
7a:47:34:39:bf:63:d2:88:ba:17:3c:c4:82:b2:db:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:9C:10:9F:44:CE:62:87:98:46:7A:DD:60:D4:C2:6A:36:95:5E
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/7A2626FC48B911EDB883E24BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2c:72:17:fc:84:7d:8a:24:57:78:11:0d:84:6a:7e:e6:0c:
ad:ea:e2:39:77:9b:b2:88:2e:ea:21:02:e5:27:88:a6:66:3d:
d9:c0:e4:f9:cf:55:7d:38:d1:f6:50:0f:86:ba:28:5c:cc:96:
91:2f:af:0a:b8:21:d1:7a:62:30:b2:f3:c4:56:8f:bf:f8:88:
33:a0:c7:25:f8:68:68:bd:60:f9:97:4e:c2:25:60:3a:26:8f:
8f:9a:81:eb:4a:ab:b1:90:7f:e8:e6:21:c1:08:29:39:ac:65:
d7:fa:b3:48:9c:dd:e0:4c:60:7a:f5:d5:e1:4e:23:59:49:cb:
4d:a3:bd:6c:ce:d4:ce:b5:26:61:74:4b:c6:c4:fd:b0:7b:e0:
9a:64:dd:97:f9:bc:cd:cb:5f:b5:3a:9d:4c:02:ec:80:d8:b9:
f5:c9:d0:04:21:08:fc:76:b3:4c:84:73:33:6f:f7:18:9a:38:
40:e4:49:a4:e4:18:f1:0b:f9:d3:49:1f:7b:53:f5:da:02:68:
8d:87:da:13:24:b3:aa:ac:ea:96:f6:02:23:61:41:58:47:47:
23:0a:98:16:f6:af:92:ff:ba:1f:1b:f1:2d:84:e7:15:e3:24:
10:44:5d:ed:61:27:2c:50:bb:68:45:89:4c:97:11:5c:61:e7:
f6:e5:5c:1f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyMDIxMTAvBgNVBAUTKDhDQkU5REQ1OTkzNEM5QUQyMDVGQ0U2QUY4RUY0REI4
MDFGMUQzRUIwHhcNMjQxMDAzMDIzNjQ3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZlMDMzZi1jZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WyJpolk6y4ZUNGSPX72UT22l4tEr1FJDGLSKChGQCf3l2dvvp0i/TjCJ3OF
MexBikl20EZltkC2qszMObXhy8NMVk8LkpXt2IAPkE+DEZN5ix4MskMzvXg85dLd
PVifRt9BG/wiOKnBhaGuxsf/xQB212BwEUY9ggsitD6sxveOlTr/V9KRhMy6XUtF
6ai0l9dke0dA5looBRXE86IdJ7opWRvXoWCISPaXPwELeoH3Okg9JjiwwqzwcfiD
ULCUFL45mX0cPeZ6z/JaD/06NEbBkI5NtTVl5zpA5znDkyxNY3/d6Ed2Rpv9AfQp
U+R6RzQ5v2PSiLoXPMSCstt+LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHkunBCf
RM5ih5hGet1g1MJqNpVeMB8GA1UdIwQYMBaAFIy+ndWZNMmtIF/OavjvTbgB8dPr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjIwMi80RDQxQ0Y5MjQw
OUUxMUVEQjM1MkVFNUVDNEY5QUUwMi9qTDZkMVprMHlhMGdYODVxLU85TnVBSHgw
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pMNmQxWmsweWEwZ1g4NXEtTzlOdUFIeDAtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUIyMDIvNEQ0MUNGOTI0MDlFMTFFREIzNTJFRTVFQzRGOUFFMDIvN0EyNjI2RkM0
OEI5MTFFREI4ODNFMjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnD90wDQYJKoZIhvcNAQELBQADggEBAH0schf8hH2KJFd4
EQ2Ean7mDK3q4jl3m7KILuohAuUniKZmPdnA5PnPVX040fZQD4a6KFzMlpEvrwq4
IdF6YjCy88RWj7/4iDOgxyX4aGi9YPmXTsIlYDomj4+agetKq7GQf+jmIcEIKTms
Zdf6s0ic3eBMYHr11eFOI1lJy02jvWzO1M61JmF0S8bE/bB74Jpk3Zf5vM3LX7U6
nUwC7IDYufXJ0AQhCPx2s0yEczNv9xiaOEDkSaTkGPEL+dNJH3tT9doCaI2H2hMk
s6qs6pb2AiNhQVhHRyMKmBb2r5L/uh8b8S2E5xXjJBBEXe1hJyxQu2hFiUyXEVxh
5/blXB8=
-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:56 2024 by rpki-client on console-ams.rpki-client.org