Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/8A64B42A1EF011EF931F7D1EC4F9AE02.roa
File: 8A64B42A1EF011EF931F7D1EC4F9AE02.roa (raw, json)
Hash identifier: Wooh7FvDYdt99w77gOXN77/Icv7UouUDSNLaH1EZvtI=
Subject key identifier: 40:F1:97:6B:C9:6B:21:EE:8D:66:EE:4D:C0:04:00:7A:72:1D:61:54
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 093D
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/8A64B42A1EF011EF931F7D1EC4F9AE02.roa
Signing time: Fri 31 May 2024 01:53:13 +0000
ROA not before: Fri 31 May 2024 01:53:13 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 24093
IP address blocks: 125.63.12.0/24 maxlen: 24
125.63.15.0/24 maxlen: 24
125.63.19.0/24 maxlen: 24
125.253.0.0/18 maxlen: 18
125.253.8.0/24 maxlen: 24
125.253.11.0/24 maxlen: 24
125.253.16.0/24 maxlen: 24
125.253.25.0/24 maxlen: 24
125.253.28.0/23 maxlen: 23
125.253.28.0/24 maxlen: 24
125.253.29.0/24 maxlen: 24
125.253.32.0/24 maxlen: 24
125.253.33.0/24 maxlen: 24
125.253.34.0/24 maxlen: 24
125.253.35.0/24 maxlen: 24
125.253.41.0/24 maxlen: 24
125.253.44.0/24 maxlen: 24
125.253.45.0/24 maxlen: 24
125.253.46.0/24 maxlen: 24
125.253.47.0/24 maxlen: 24
125.253.48.0/24 maxlen: 24
125.253.50.0/23 maxlen: 23
125.253.50.0/24 maxlen: 24
125.253.51.0/24 maxlen: 24
125.253.60.0/24 maxlen: 24
125.253.61.0/24 maxlen: 24
125.253.96.0/20 maxlen: 20
125.253.97.0/24 maxlen: 24
125.253.98.0/24 maxlen: 24
125.253.99.0/24 maxlen: 24
125.253.101.0/24 maxlen: 24
125.253.102.0/24 maxlen: 24
125.253.103.0/24 maxlen: 24
125.253.106.0/24 maxlen: 24
125.253.107.0/24 maxlen: 24
125.253.109.0/24 maxlen: 24
125.253.110.0/24 maxlen: 24
202.171.160.0/19 maxlen: 19
202.171.160.0/24 maxlen: 24
202.171.164.0/24 maxlen: 24
202.171.165.0/24 maxlen: 24
202.171.169.0/24 maxlen: 24
202.171.170.0/24 maxlen: 24
202.171.175.0/24 maxlen: 24
202.171.177.0/24 maxlen: 24
202.171.178.0/24 maxlen: 24
202.171.179.0/24 maxlen: 24
202.171.184.0/23 maxlen: 23
202.171.186.0/23 maxlen: 23
202.171.189.0/24 maxlen: 24
202.171.190.0/24 maxlen: 24
202.171.191.0/24 maxlen: 24
203.25.102.0/24 maxlen: 24
223.27.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 16 Jul 2024 05:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365 (0x93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: May 31 01:53:13 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66592d89-c65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:cf:4f:62:dd:43:13:af:b8:c8:84:8b:71:
54:51:91:6d:61:7e:2c:ea:50:66:9c:a0:d4:5c:46:
c6:89:aa:2f:4d:b7:4c:2d:5d:18:9c:07:a1:b8:5a:
ef:87:b5:57:b7:86:1e:2c:31:e3:70:40:76:5e:6c:
62:45:a7:01:7c:fa:85:e7:f5:39:e8:fb:52:98:d7:
e9:9a:1e:31:76:c2:91:59:f9:2b:bb:c8:34:ff:1d:
81:ab:5a:58:58:b2:fb:7a:bd:0b:a3:d1:49:87:7f:
c0:48:ff:a0:34:81:e5:c6:d2:4b:97:8f:ac:af:44:
24:1f:0d:d2:8b:e6:97:60:5b:dd:82:8e:52:5c:51:
c5:e8:0d:10:ae:7d:46:e3:2a:e3:b8:3d:98:5b:e5:
2d:08:8d:26:a1:ec:94:3c:11:1a:00:20:ef:ee:37:
03:d5:f7:a1:88:14:c9:24:33:1a:70:ca:63:06:81:
27:4c:88:fc:fd:e9:16:54:69:0e:8d:37:c3:48:0b:
7f:07:7e:4f:b4:df:fd:74:34:16:56:09:ac:ad:77:
95:ec:1e:e9:15:83:e9:31:25:72:e6:14:8f:88:bd:
95:07:ff:40:02:ec:e6:c4:d1:4d:0e:55:4f:42:cd:
11:36:06:ce:40:29:fb:b7:37:7d:b9:d3:fa:f7:08:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:97:6B:C9:6B:21:EE:8D:66:EE:4D:C0:04:00:7A:72:1D:61:54
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/8A64B42A1EF011EF931F7D1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.63.12.0/24
125.63.15.0/24
125.63.19.0/24
125.253.0.0/18
125.253.96.0/20
202.171.160.0/19
203.25.102.0/24
223.27.66.0/23
Signature Algorithm: sha256WithRSAEncryption
88:6c:57:72:21:b1:c6:ed:10:d6:7b:44:29:50:14:3b:de:e5:
10:e3:1a:db:41:25:d5:0f:bb:cc:63:1e:b9:13:39:04:06:fb:
c9:89:3c:c3:16:40:a6:78:d2:eb:70:7b:85:89:d3:0f:50:3c:
44:c5:85:c5:b7:34:22:63:41:ab:a2:bc:5b:54:dd:44:ca:6a:
8b:cd:56:ad:6c:97:aa:3e:c5:b5:db:84:90:24:5f:d9:7f:2e:
cb:6b:7a:18:c6:f4:39:c0:9b:f6:b1:79:4b:cd:1a:76:77:f7:
87:d1:f0:6a:03:24:46:4f:c9:31:46:8c:aa:ca:9a:c4:3c:5b:
e3:d6:4a:84:ba:c8:0f:37:de:e2:66:6f:b0:51:72:f8:46:db:
a9:75:b8:50:32:3d:1a:19:09:e6:ff:9a:84:ec:84:41:c1:71:
98:bb:4b:64:60:3d:70:ec:16:db:79:30:d3:8a:a6:56:99:69:
dd:80:2c:05:eb:f9:6a:8f:a0:27:38:a0:f0:bc:13:31:48:72:
13:17:a3:53:01:96:33:88:51:e9:cb:4c:c1:05:18:ec:77:17:
08:6b:63:a6:4c:f1:81:9a:21:a2:87:2c:56:31:f6:e4:ce:d3:
68:5e:69:61:40:5f:20:18:ea:71:65:79:26:23:8e:9a:99:e1:
15:72:d3:9d
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0
QkM3OTczQjEwHhcNMjQwNTMxMDE1MzEzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU5MmQ4OS1jNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1nPT2LdQxOvuMiEi3FUUZFtYX4s6lBmnKDUXEbGiaovTbdMLV0YnAehuFrv
h7VXt4YeLDHjcEB2XmxiRacBfPqF5/U56PtSmNfpmh4xdsKRWfkru8g0/x2Bq1pY
WLL7er0Lo9FJh3/ASP+gNIHlxtJLl4+sr0QkHw3Si+aXYFvdgo5SXFHF6A0Qrn1G
4yrjuD2YW+UtCI0moeyUPBEaACDv7jcD1fehiBTJJDMacMpjBoEnTIj8/ekWVGkO
jTfDSAt/B35PtN/9dDQWVgmsrXeV7B7pFYPpMSVy5hSPiL2VB/9AAuzmxNFNDlVP
Qs0RNgbOQCn7tzd9udP69whGXQIDAQABo4ICvzCCArswHQYDVR0OBBYEFEDxl2vJ
ayHujWbuTcAEAHpyHWFUMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB
MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvOEE2NEI0MkEx
RUYwMTFFRjkzMUY3RDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E
OjA4MDYEAgABMDADBAB9PwwDBAB9Pw8DBAB9PxMDBAZ9/QADBAR9/WADBAXKq6AD
BADLGWYDBAHfG0IwDQYJKoZIhvcNAQELBQADggEBAIhsV3IhscbtENZ7RClQFDve
5RDjGttBJdUPu8xjHrkTOQQG+8mJPMMWQKZ40utwe4WJ0w9QPETFhcW3NCJjQaui
vFtU3UTKaovNVq1sl6o+xbXbhJAkX9l/LstrehjG9DnAm/axeUvNGnZ394fR8GoD
JEZPyTFGjKrKmsQ8W+PWSoS6yA833uJmb7BRcvhG26l1uFAyPRoZCeb/moTshEHB
cZi7S2RgPXDsFtt5MNOKplaZad2ALAXr+WqPoCc4oPC8EzFIchMXo1MBljOIUenL
TMEFGOx3FwhrY6ZM8YGaIaKHLFYx9uTO02heaWFAXyAY6nFleSYjjpqZ4RVy050=
-----END CERTIFICATE-----
Generated at Tue Jul 16 07:31:34 2024 by rpki-client on console-ams.rpki-client.org