Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/A940DF569E6F11EEAFBA344EC4F9AE02.roa
File: A940DF569E6F11EEAFBA344EC4F9AE02.roa (raw, json)
Hash identifier: Gu2FIwxV/wGwAuiWVhuv60sxI9CFKyntlYXiIUupMTw=
Subject key identifier: 7B:B1:88:00:16:95:E3:DC:31:41:69:23:7F:70:C3:6F:5D:94:9A:EE
Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial: 54
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/A940DF569E6F11EEAFBA344EC4F9AE02.roa
Signing time: Tue 19 Dec 2023 13:08:12 +0000
ROA not before: Tue 19 Dec 2023 13:08:12 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 151659
IP address blocks: 103.251.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 11:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Validity
Not Before: Dec 19 13:08:12 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=658195bb-cd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:21:71:6b:7e:dd:1c:66:d4:5f:87:51:f0:
03:ab:47:ea:bd:14:e4:6e:73:cf:fc:27:6e:6b:f6:
13:d3:50:b9:3f:95:27:6b:4f:a4:c4:6d:f8:6b:19:
ef:49:94:fe:db:d4:97:fb:ec:da:0d:19:e2:63:f5:
d8:9b:4a:c6:c4:c4:f5:3a:a7:0e:19:d1:c8:7b:cd:
22:d0:df:34:06:92:2f:41:a8:39:f2:3f:c1:2e:be:
b8:35:77:44:f7:07:1b:58:03:c5:07:db:d0:3c:1f:
4d:23:b2:40:4a:72:5e:e6:43:56:72:89:b9:c3:06:
28:c5:69:39:92:cb:60:dd:d3:78:bf:6b:2b:76:69:
b9:c4:8c:30:8c:db:a6:76:30:61:55:c1:bd:6e:aa:
dd:47:83:ed:3d:4e:84:8b:78:91:f7:11:0f:28:e4:
4a:17:b1:63:e5:c2:37:ef:0e:f0:21:01:41:5d:b9:
3d:8a:57:de:09:c1:9f:af:c1:ee:43:fa:12:e5:a3:
ff:a7:de:1f:b3:01:97:87:18:af:21:c2:44:2d:fc:
2a:1e:6d:84:bf:36:e5:54:7f:5c:51:ca:12:e8:e1:
40:09:c1:8f:0d:dc:f6:51:c5:79:12:1d:a3:5a:6f:
8e:36:6f:c7:04:9c:f1:b4:0d:28:74:e9:15:23:47:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:88:00:16:95:E3:DC:31:41:69:23:7F:70:C3:6F:5D:94:9A:EE
X509v3 Authority Key Identifier:
keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/A940DF569E6F11EEAFBA344EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.254.0/24
Signature Algorithm: sha256WithRSAEncryption
12:35:6b:ad:e5:81:35:33:16:33:73:86:a3:73:ef:69:de:63:
0b:91:c4:ec:02:7b:34:c9:68:86:de:02:82:9a:96:44:86:b2:
3f:f7:8d:60:91:3d:24:9d:cf:04:40:a4:ca:bd:9a:54:53:eb:
67:e3:df:87:cc:15:09:67:80:0f:25:ec:4a:e0:0e:f1:9a:20:
db:05:3f:d6:04:84:b8:80:44:71:3d:ca:8f:57:72:fe:e1:cc:
ef:9e:24:c1:a9:d3:a2:7c:88:f3:79:84:23:4c:d1:ce:b1:14:
fa:47:b6:11:d6:57:63:f5:0e:d4:96:1e:d7:06:90:76:76:20:
ac:c8:8c:f9:14:39:ff:99:c2:19:55:7f:4a:5f:e6:81:4c:4e:
7c:79:50:ea:4a:9c:86:7b:c7:8b:dc:ab:06:1f:21:3f:ce:bf:
2f:b5:a1:c4:b7:df:ef:33:0c:e1:01:8d:aa:5b:61:dc:d5:f9:
50:dc:fa:18:2e:86:64:fc:2e:80:61:2e:72:94:7a:74:ec:a3:
ed:11:25:99:5b:f3:e0:9c:0a:03:21:92:e5:33:4d:a5:4e:04:
f9:a8:ff:40:f0:34:aa:8e:43:25:ff:59:9a:5f:3b:85:06:4e:
95:e3:3e:96:09:63:89:d2:67:19:10:d1:43:a9:c5:41:a6:c7:
7f:da:12:b8
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QkZBQjExMC8GA1UEBRMoMDU4M0E4NUZFMzEzRkMwRDYzNjZFMjJDNDQ2NkIyOTNF
QUQ0NUFFNDAeFw0yMzEyMTkxMzA4MTJaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ODE5NWJiLWNkM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBViFxa37dHGbUX4dR8AOrR+q9FORuc8/8J25r9hPTULk/lSdrT6TEbfhrGe9J
lP7b1Jf77NoNGeJj9dibSsbExPU6pw4Z0ch7zSLQ3zQGki9BqDnyP8Euvrg1d0T3
BxtYA8UH29A8H00jskBKcl7mQ1ZyibnDBijFaTmSy2Dd03i/ayt2abnEjDCM26Z2
MGFVwb1uqt1Hg+09ToSLeJH3EQ8o5EoXsWPlwjfvDvAhAUFduT2KV94JwZ+vwe5D
+hLlo/+n3h+zAZeHGK8hwkQt/CoebYS/NuVUf1xRyhLo4UAJwY8N3PZRxXkSHaNa
b442b8cEnPG0DSh06RUjR+GfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUe7GIABaV
49wxQWkjf3DDb12Umu4wHwYDVR0jBBgwFoAUBYOoX+MT/A1jZuIsRGayk+rUWuQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRkFCLzMzQTlDQzlDMzY4
NDExRUVBOTI3Rjk0OEM0RjlBRTAyL0JZT29YLU1UX0Exalp1SXNSR2F5ay1yVVd1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQllPb1gtTVRfQTFqWnVJc1JHYXlrLXJVV3VRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkZBQi8zM0E5Q0M5QzM2ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9BOTQwREY1NjlF
NkYxMUVFQUZCQTM0NEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf7/jANBgkqhkiG9w0BAQsFAAOCAQEAEjVrreWBNTMWM3OG
o3Pvad5jC5HE7AJ7NMloht4CgpqWRIayP/eNYJE9JJ3PBECkyr2aVFPrZ+Pfh8wV
CWeADyXsSuAO8Zog2wU/1gSEuIBEcT3Kj1dy/uHM754kwanTonyI83mEI0zRzrEU
+ke2EdZXY/UO1JYe1waQdnYgrMiM+RQ5/5nCGVV/Sl/mgUxOfHlQ6kqchnvHi9yr
Bh8hP86/L7WhxLff7zMM4QGNqlth3NX5UNz6GC6GZPwugGEucpR6dOyj7RElmVvz
4JwKAyGS5TNNpU4E+aj/QPA0qo5DJf9Zml87hQZOleM+lgljidJnGRDRQ6nFQabH
f9oSuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org