Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/B2E951D6A01011ED93890E2BC4F9AE02.roa
File: B2E951D6A01011ED93890E2BC4F9AE02.roa (raw, json)
Hash identifier: ybDGQEgYtBcBiVAXAtRBR6BTQJZtff15Gq4raZDZiMA=
Subject key identifier: A8:88:C5:1C:5D:CB:55:B4:CF:D7:AE:08:B7:DC:89:8A:5D:D4:5C:69
Certificate issuer: /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Certificate serial: 07CD
Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/B2E951D6A01011ED93890E2BC4F9AE02.roa
Signing time: Sun 29 Jan 2023 20:08:30 +0000
ROA not before: Sun 29 Jan 2023 20:08:30 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 38198
IP address blocks: 103.101.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997 (0x7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Validity
Not Before: Jan 29 20:08:30 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63d6d23e-30a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:71:df:85:cc:4d:fe:f8:63:20:9d:6a:e2:
a9:b3:e1:88:33:b1:8b:da:93:14:57:30:86:3e:29:
fe:ca:3d:03:f4:3e:1f:e8:e6:17:94:db:35:8c:0d:
27:64:94:95:55:5f:44:9d:fe:84:7f:4f:15:a5:6b:
ba:bc:71:b9:98:bc:eb:9c:52:30:81:37:54:1a:f1:
90:da:36:54:d3:62:d8:20:b9:4f:a7:47:49:11:10:
f9:e2:e9:b8:79:07:f7:ae:92:fc:7b:09:68:58:a5:
c7:9f:fd:22:ff:97:79:f1:0a:79:37:4e:39:c5:14:
bf:20:56:6f:fb:53:cc:31:04:eb:30:53:46:f8:70:
6c:38:dd:95:ec:b5:6b:53:3a:09:c5:43:4e:a6:0c:
dc:99:70:bf:e7:f0:c0:38:aa:e9:43:27:78:c3:a8:
54:d8:47:cb:18:09:74:7f:47:9a:13:4c:45:d9:43:
95:66:6e:b7:b8:16:75:77:b2:1c:fe:3d:a2:f8:11:
c1:ab:43:3b:49:b9:c4:7a:49:9f:44:56:fc:90:98:
0d:6c:5e:3e:7a:dd:d6:2b:8e:e2:1a:de:2e:0c:51:
af:e5:b3:71:b2:7e:be:a6:a7:eb:28:d4:45:7d:08:
52:fe:b5:2c:c5:62:c4:ff:40:f0:28:75:86:30:8d:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:C5:1C:5D:CB:55:B4:CF:D7:AE:08:B7:DC:89:8A:5D:D4:5C:69
X509v3 Authority Key Identifier:
keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/B2E951D6A01011ED93890E2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.243.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f6:fa:d6:1e:1a:29:37:74:81:e5:41:db:e3:72:d1:bc:3e:
98:07:39:57:29:2d:1d:71:83:2f:aa:e0:8d:03:ce:93:c4:53:
14:42:07:f3:82:d6:0e:70:a7:b4:2f:47:d9:15:82:12:12:8a:
be:3c:c0:b7:c7:28:af:7c:e8:84:b2:6c:fb:e3:42:92:55:7f:
b9:d8:10:d7:19:49:20:2e:e5:17:b9:9a:93:9b:3d:dc:74:1c:
cb:a9:88:9c:00:87:e4:5d:a8:76:05:09:9d:3e:c8:be:5a:c2:
42:5a:4a:6f:a2:16:71:d9:02:45:70:af:ae:6a:90:3c:66:05:
8e:39:aa:f0:6f:57:30:27:ca:5c:94:03:23:cb:a8:86:a7:c8:
8a:01:f1:7f:a8:71:ec:53:cd:42:17:02:96:b1:94:38:41:8c:
97:ff:9c:cb:fe:cd:8b:03:33:b7:cf:09:13:98:2f:17:cd:20:
e3:ef:e5:13:a0:56:47:02:5e:42:89:73:4d:df:44:95:64:99:
5e:99:ef:c4:1d:5c:6a:a7:61:02:94:8d:31:52:be:50:4f:3a:
c8:f8:c7:71:73:02:67:9a:0a:66:a9:ce:04:92:e0:42:6c:98:
19:bb:ec:98:74:11:a3:17:f6:b6:ee:0a:7e:7d:1d:f2:78:ab:
8c:4a:d9:f2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMwMTYxMTAvBgNVBAUTKEI1QUU0N0RBRDA0QTQ2NTkzQTNBRDA4MjUyMDZFMTBC
Q0Y5NkY4Q0EwHhcNMjMwMTI5MjAwODMwWhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Q2ZDIzZS0zMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcJx34XMTf74YyCdauKps+GIM7GL2pMUVzCGPin+yj0D9D4f6OYXlNs1jA0n
ZJSVVV9Enf6Ef08VpWu6vHG5mLzrnFIwgTdUGvGQ2jZU02LYILlPp0dJERD54um4
eQf3rpL8ewloWKXHn/0i/5d58Qp5N045xRS/IFZv+1PMMQTrMFNG+HBsON2V7LVr
UzoJxUNOpgzcmXC/5/DAOKrpQyd4w6hU2EfLGAl0f0eaE0xF2UOVZm63uBZ1d7Ic
/j2i+BHBq0M7SbnEekmfRFb8kJgNbF4+et3WK47iGt4uDFGv5bNxsn6+pqfrKNRF
fQhS/rUsxWLE/0DwKHWGMI02DwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKiIxRxd
y1W0z9euCLfciYpd1FxpMB8GA1UdIwQYMBaAFLWuR9rQSkZZOjrQglIG4QvPlvjK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzAxNi9DRjVGMjlDQThG
MzkxMUVBQjNDMzE3NEFDNEY5QUUwMi90YTVIMnRCS1JsazZPdENDVWdiaEM4LVct
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RhNUgydEJLUmxrNk90Q0NVZ2JoQzgtVy1Nby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkMwMTYvQ0Y1RjI5Q0E4RjM5MTFFQUIzQzMxNzRBQzRGOUFFMDIvQjJFOTUxRDZB
MDEwMTFFRDkzODkwRTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZfMwDQYJKoZIhvcNAQELBQADggEBAAb2+tYeGik3dIHl
QdvjctG8PpgHOVcpLR1xgy+q4I0DzpPEUxRCB/OC1g5wp7QvR9kVghISir48wLfH
KK986ISybPvjQpJVf7nYENcZSSAu5Re5mpObPdx0HMupiJwAh+RdqHYFCZ0+yL5a
wkJaSm+iFnHZAkVwr65qkDxmBY45qvBvVzAnylyUAyPLqIanyIoB8X+ocexTzUIX
ApaxlDhBjJf/nMv+zYsDM7fPCROYLxfNIOPv5ROgVkcCXkKJc03fRJVkmV6Z78Qd
XGqnYQKUjTFSvlBPOsj4x3FzAmeaCmapzgSS4EJsmBm77Jh0EaMX9rbuCn59HfJ4
q4xK2fI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org