Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/F1C735FC368411EEB8DB764AC4F9AE02.roa
File: F1C735FC368411EEB8DB764AC4F9AE02.roa (raw, json)
Hash identifier: BJzbeb9SsEBvsYIS6fCDkwsUDFoNaeyP6eZKa5jjP4U=
Subject key identifier: 6E:65:52:AC:E5:3B:BC:10:3D:FC:0C:C4:D2:4B:B8:1B:DA:5C:A8:DA
Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial: 04
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/F1C735FC368411EEB8DB764AC4F9AE02.roa
Signing time: Wed 09 Aug 2023 07:18:31 +0000
ROA not before: Wed 09 Aug 2023 07:18:31 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 151659
IP address blocks: 103.251.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 10:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Validity
Not Before: Aug 9 07:18:31 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64d33dc7-87e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:92:79:0a:7a:05:ee:04:19:3b:b1:65:cc:
8a:d3:e4:34:b7:6d:17:88:10:13:30:e1:ed:c6:c6:
e3:9e:24:94:09:7d:1f:05:fa:7c:26:42:85:c8:30:
41:78:1d:67:a7:72:4c:76:86:0e:54:ae:76:d3:4a:
49:53:4e:c8:dc:9d:03:86:27:a6:e0:23:0c:2a:22:
c8:19:69:6b:8e:15:ef:1f:5b:a2:cb:a2:e2:cd:58:
0b:bc:d4:a4:16:ee:6c:ac:84:f2:b5:51:ec:a3:26:
5e:26:25:9b:16:a3:a1:56:2c:6a:52:3e:7a:21:70:
21:03:8c:ef:91:7d:47:bd:66:58:87:68:0e:73:67:
f8:33:8a:43:dc:5d:8d:0a:06:31:20:6c:f8:9f:d8:
5e:b9:0c:41:21:44:9b:26:0e:46:a8:39:4b:30:05:
95:37:1d:c3:3e:2f:74:77:f0:2c:ce:c3:74:52:7b:
75:2e:93:95:42:73:14:e9:35:0e:00:d2:a4:9e:a0:
e3:31:db:ea:30:a7:15:e4:99:58:d0:dd:8a:eb:45:
0f:96:a3:d9:7a:20:1b:51:ef:53:4f:22:94:2a:62:
36:53:8a:9d:d5:57:39:49:bf:34:86:dd:66:a9:0e:
20:88:e9:ad:aa:4a:8d:97:a3:11:3d:75:f0:30:3c:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:65:52:AC:E5:3B:BC:10:3D:FC:0C:C4:D2:4B:B8:1B:DA:5C:A8:DA
X509v3 Authority Key Identifier:
keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/F1C735FC368411EEB8DB764AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:97:07:37:1a:87:35:0a:d9:b6:13:17:43:a4:19:68:13:48:
85:de:10:a2:5a:c7:08:7e:29:e2:2a:d7:b1:c6:c2:62:28:8b:
b7:29:aa:61:75:56:0a:82:62:e3:cc:9a:76:50:28:d7:2e:f1:
4a:47:96:50:1c:b2:47:93:96:a2:f4:af:58:61:3d:f0:e6:14:
d6:c8:51:75:6e:98:11:51:4f:e7:d4:51:4b:ec:a1:74:f0:98:
c0:d3:f1:05:7a:18:ac:28:44:2b:e3:44:8f:b7:98:e8:2d:1c:
b0:7c:fe:66:64:70:83:15:c8:9b:ec:81:a6:25:05:11:54:be:
6d:8b:7a:e2:50:62:cc:d0:80:cd:3d:00:b1:36:67:b2:f8:ca:
c7:d6:86:46:2d:2c:89:fa:e5:d1:e7:52:c2:e7:20:0e:28:64:
55:07:fa:95:42:d3:ad:44:5b:bf:d8:5b:d1:fe:0e:dc:97:3c:
aa:72:a3:a0:6c:75:e0:75:fd:35:d0:ee:5d:4d:db:a3:a6:22:
a8:8d:62:21:52:d7:c3:97:52:fb:98:f8:70:e0:07:0a:aa:c8:
02:8a:b3:9c:17:d1:b7:07:aa:03:9e:43:03:e1:83:15:e4:71:
00:c3:47:c3:e5:1b:28:bb:0a:47:a6:86:65:e9:61:8c:d4:88:
e7:6d:2d:37
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QkZBQjExMC8GA1UEBRMoMDU4M0E4NUZFMzEzRkMwRDYzNjZFMjJDNDQ2NkIyOTNF
QUQ0NUFFNDAeFw0yMzA4MDkwNzE4MzFaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZDMzZGM3LTg3ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYoJJ5CnoF7gQZO7FlzIrT5DS3bReIEBMw4e3GxuOeJJQJfR8F+nwmQoXIMEF4
HWenckx2hg5UrnbTSklTTsjcnQOGJ6bgIwwqIsgZaWuOFe8fW6LLouLNWAu81KQW
7myshPK1UeyjJl4mJZsWo6FWLGpSPnohcCEDjO+RfUe9ZliHaA5zZ/gzikPcXY0K
BjEgbPif2F65DEEhRJsmDkaoOUswBZU3HcM+L3R38CzOw3RSe3Uuk5VCcxTpNQ4A
0qSeoOMx2+owpxXkmVjQ3YrrRQ+Wo9l6IBtR71NPIpQqYjZTip3VVzlJvzSG3Wap
DiCI6a2qSo2XoxE9dfAwPKG7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbmVSrOU7
vBA9/AzE0ku4G9pcqNowHwYDVR0jBBgwFoAUBYOoX+MT/A1jZuIsRGayk+rUWuQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRkFCLzMzQTlDQzlDMzY4
NDExRUVBOTI3Rjk0OEM0RjlBRTAyL0JZT29YLU1UX0Exalp1SXNSR2F5ay1yVVd1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQllPb1gtTVRfQTFqWnVJc1JHYXlrLXJVV3VRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkZBQi8zM0E5Q0M5QzM2ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9GMUM3MzVGQzM2
ODQxMUVFQjhEQjc2NEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf7/zANBgkqhkiG9w0BAQsFAAOCAQEAqJcHNxqHNQrZthMX
Q6QZaBNIhd4QolrHCH4p4irXscbCYiiLtymqYXVWCoJi48yadlAo1y7xSkeWUByy
R5OWovSvWGE98OYU1shRdW6YEVFP59RRS+yhdPCYwNPxBXoYrChEK+NEj7eY6C0c
sHz+ZmRwgxXIm+yBpiUFEVS+bYt64lBizNCAzT0AsTZnsvjKx9aGRi0sifrl0edS
wucgDihkVQf6lULTrURbv9hb0f4O3Jc8qnKjoGx14HX9NdDuXU3bo6YiqI1iIVLX
w5dS+5j4cOAHCqrIAoqznBfRtweqA55DA+GDFeRxAMNHw+UbKLsKR6aGZelhjNSI
520tNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org