Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/983A05F84EA311EB934EF05CC4F9AE02.roa
File: 983A05F84EA311EB934EF05CC4F9AE02.roa (raw, json)
Hash identifier: P2K/A9S9BbQJJ5jpe6Nsy6vhhPAP+7WyRVkP1cTLDko=
Subject key identifier: 43:1F:FA:22:E7:02:98:DB:20:A5:88:0E:31:FF:CD:FF:B6:4A:C8:D4
Certificate issuer: /CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF
Certificate serial: 0E88
Authority key identifier: F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/983A05F84EA311EB934EF05CC4F9AE02.roa
Signing time: Fri 06 Oct 2023 18:15:44 +0000
ROA not before: Fri 06 Oct 2023 18:15:44 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 38047
IP address blocks: 103.123.100.0/22 maxlen: 23
103.123.100.0/24 maxlen: 24
103.123.101.0/24 maxlen: 24
103.123.102.0/24 maxlen: 24
103.123.103.0/24 maxlen: 24
2403:a040::/32 maxlen: 32
2403:a040:1::/48 maxlen: 48
2403:a040:852::/48 maxlen: 48
2403:a040:886::/48 maxlen: 48
2403:a040:1688::/48 maxlen: 48
2403:a040:3368::/48 maxlen: 48
2403:a040:6611::/48 maxlen: 48
2403:a040:8001::/48 maxlen: 48
2403:a040:8002::/48 maxlen: 48
2403:a040:8003::/48 maxlen: 48
2403:a040:8004::/48 maxlen: 48
2403:a040:8188::/48 maxlen: 48
2403:a040:a001::/48 maxlen: 48
2403:a040:b001::/48 maxlen: 48
2403:a040:cdef::/48 maxlen: 48
2403:a040:ce01::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Aug 2024 06:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF
Validity
Not Before: Oct 6 18:15:44 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65204ecf-c305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:6d:79:d8:b2:98:b3:c5:a2:e3:fc:ef:c8:
07:b9:67:71:6a:b5:13:6e:53:45:6c:83:ea:c3:fd:
ca:3b:ce:15:d5:e3:f9:a2:1a:c1:82:5c:ad:97:c7:
85:e0:de:51:1e:d4:be:59:79:58:29:13:69:a2:08:
88:3a:6c:e5:01:c1:da:24:0c:24:04:9d:02:47:98:
44:1f:94:64:e0:8c:5c:a7:39:d1:51:56:7f:7c:4f:
92:19:ea:3d:c7:61:b5:51:5f:68:fc:1d:c2:3f:c1:
ff:b4:49:31:aa:30:d5:70:0d:81:da:dc:2b:26:d1:
ac:fb:8c:3e:ee:56:6a:dc:8b:00:37:56:9f:4c:7e:
23:89:81:f6:fb:38:c2:83:7c:7f:39:d9:2b:a0:52:
ba:7e:3c:ce:bd:79:36:33:44:24:d5:ec:4d:d3:61:
ca:11:47:4d:b9:34:fb:21:fa:d2:0b:97:95:b2:e8:
a2:b5:97:0e:e2:9c:80:db:9d:03:a0:a0:65:89:b0:
d4:6d:6a:81:45:dc:a7:37:cc:c7:8a:3f:d1:76:57:
d1:17:94:0c:71:93:7d:16:75:36:cd:a1:3f:ad:c3:
28:8e:0e:bf:8c:f2:21:1b:ed:74:6f:e2:85:6e:3e:
24:34:81:97:a6:d6:ce:f2:7a:f8:b0:45:37:7c:f0:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:FA:22:E7:02:98:DB:20:A5:88:0E:31:FF:CD:FF:B6:4A:C8:D4
X509v3 Authority Key Identifier:
keyid:F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/983A05F84EA311EB934EF05CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.100.0/22
IPv6:
2403:a040::/32
Signature Algorithm: sha256WithRSAEncryption
32:d4:f6:38:22:b0:9f:96:2c:3f:c4:b6:2c:df:82:9a:d7:b4:
eb:c3:a8:ed:50:70:89:8e:92:f3:11:3d:a9:75:e5:38:b2:50:
ff:92:f0:61:82:54:6c:cf:15:14:b2:5a:72:78:9b:3d:7a:39:
b9:f7:3f:f2:94:28:c7:42:a0:15:d5:e7:d8:d3:ce:33:a6:55:
04:97:13:62:84:32:21:d4:8d:9f:c3:2a:b6:e5:51:22:02:b2:
00:b6:c3:c4:76:52:a8:40:09:97:e5:f2:84:fd:95:15:96:c7:
4b:f7:52:21:7d:45:04:aa:c2:28:89:9a:36:d9:a0:88:0d:88:
34:7c:14:ce:1d:29:f5:36:f8:32:8e:30:23:cb:eb:75:c5:01:
7f:af:c6:1b:e9:d8:e8:f3:d8:a6:ae:96:f2:6e:97:3e:ce:e3:
f0:ea:f0:55:10:49:ed:2e:85:74:6e:87:ce:03:75:89:54:09:
05:31:ec:db:1e:6c:be:14:2d:da:00:e4:1e:6a:1c:c7:d9:2b:
d2:c6:a0:66:e0:da:31:70:cd:5a:b9:0c:e3:56:ec:b9:12:49:
a7:49:71:71:2f:31:3d:05:00:78:d5:d0:e1:3a:8c:93:3b:ac:
7a:59:c3:ef:88:68:16:53:53:e8:72:a8:e2:1a:38:55:06:34:
ee:05:64:60
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI4QjMxMTAvBgNVBAUTKEYyQzA1MkUwQzU3M0FCMDU4MEVCMDZGM0Y5MDAyNTY0
NkU2RjMyQ0YwHhcNMjMxMDA2MTgxNTQ0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTIwNGVjZi1jMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHJtediymLPFouP878gHuWdxarUTblNFbIPqw/3KO84V1eP5ohrBglytl8eF
4N5RHtS+WXlYKRNpogiIOmzlAcHaJAwkBJ0CR5hEH5Rk4IxcpznRUVZ/fE+SGeo9
x2G1UV9o/B3CP8H/tEkxqjDVcA2B2twrJtGs+4w+7lZq3IsAN1afTH4jiYH2+zjC
g3x/OdkroFK6fjzOvXk2M0Qk1exN02HKEUdNuTT7IfrSC5eVsuiitZcO4pyA250D
oKBlibDUbWqBRdynN8zHij/RdlfRF5QMcZN9FnU2zaE/rcMojg6/jPIhG+10b+KF
bj4kNIGXptbO8nr4sEU3fPAHKQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEMf+iLn
ApjbIKWIDjH/zf+2SsjUMB8GA1UdIwQYMBaAFPLAUuDFc6sFgOsG8/kAJWRubzLP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjhCMy9BMTEzMUQ2QzY2
NjYxMUU5ODc1M0U0N0FDNEY5QUUwMi84c0JTNE1WenF3V0E2d2J6LVFBbFpHNXZN
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhzQlM0TVZ6cXdXQTZ3YnotUUFsWkc1dk1zOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI4QjMvQTExMzFENkM2NjY2MTFFOTg3NTNFNDdBQzRGOUFFMDIvOTgzQTA1Rjg0
RUEzMTFFQjkzNEVGMDVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJne2QwDQQCAAIwBwMFACQDoEAwDQYJKoZIhvcNAQELBQAD
ggEBADLU9jgisJ+WLD/EtizfgprXtOvDqO1QcImOkvMRPal15TiyUP+S8GGCVGzP
FRSyWnJ4mz16Obn3P/KUKMdCoBXV59jTzjOmVQSXE2KEMiHUjZ/DKrblUSICsgC2
w8R2UqhACZfl8oT9lRWWx0v3UiF9RQSqwiiJmjbZoIgNiDR8FM4dKfU2+DKOMCPL
63XFAX+vxhvp2Ojz2KaulvJulz7O4/Dq8FUQSe0uhXRuh84DdYlUCQUx7NsebL4U
LdoA5B5qHMfZK9LGoGbg2jFwzVq5DONW7LkSSadJcXEvMT0FAHjV0OE6jJM7rHpZ
w++IaBZTU+hyqOIaOFUGNO4FZGA=
-----END CERTIFICATE-----
Generated at Thu Aug 22 08:35:26 2024 by rpki-client on console-fra.rpki-client.org