Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/FDF0B5F2242611EF8A0A792BC4F9AE02.roa
File: FDF0B5F2242611EF8A0A792BC4F9AE02.roa (raw, json)
Hash identifier: ikClNHsuH4Xrv5p8gtxw89AwDBkJXYefG+sokuY3Wfk=
Subject key identifier: DC:2D:0B:07:00:94:F9:8F:EF:98:60:10:9D:B8:EA:9F:3E:FA:17:EC
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0385
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/FDF0B5F2242611EF8A0A792BC4F9AE02.roa
Signing time: Thu 06 Jun 2024 17:05:36 +0000
ROA not before: Thu 06 Jun 2024 17:05:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136272
IP address blocks: 116.204.140.0/22 maxlen: 22
116.204.140.0/23 maxlen: 23
116.204.143.0/24 maxlen: 24
2400:c7c0::/32 maxlen: 32
2400:c7c0::/34 maxlen: 34
2400:c7c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Nov 2024 16:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B
Validity
Not Before: Jun 6 17:05:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6661ec60-6d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:a7:b7:43:86:15:b8:54:9e:22:a3:ec:24:
d7:65:3b:33:4f:96:8c:fe:34:85:cc:f3:09:69:74:
21:c1:a8:bc:03:a8:fd:46:90:e8:b8:23:c8:d2:f1:
80:fa:61:97:3a:e9:c1:14:01:d7:c5:16:85:87:5b:
5d:da:1e:1c:78:d7:ea:2d:27:9b:b9:60:d8:65:34:
43:ed:a4:34:03:1e:b2:3f:0b:53:b4:88:04:54:c1:
c5:84:c3:82:b8:64:a4:a7:a6:46:9e:6b:1f:59:ba:
ab:9b:7f:7d:e4:9c:89:30:45:a2:7d:28:00:e9:90:
84:57:5f:72:1d:5a:05:c7:d2:fe:bf:9a:c7:70:7a:
45:78:d6:4d:0f:ef:86:47:a8:9e:f3:b3:8f:c4:e1:
28:78:c7:0c:97:f5:09:1e:1f:cd:fa:9d:63:ba:6c:
c1:1d:ba:6f:22:9f:b9:41:d4:02:5d:0d:1a:2c:62:
4c:05:0e:da:5a:7d:7a:8c:e3:2e:e4:dc:2e:4e:8b:
a7:37:21:9a:d1:9b:73:be:d8:3d:5c:b7:14:7f:b8:
af:2a:fb:dc:1a:48:e2:cf:63:34:b5:a2:38:dd:b2:
85:3f:a4:79:4b:df:de:a4:65:28:7b:4d:fd:2c:23:
1a:07:43:6f:9b:f6:93:81:c4:7d:a6:2b:41:8d:2d:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2D:0B:07:00:94:F9:8F:EF:98:60:10:9D:B8:EA:9F:3E:FA:17:EC
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/FDF0B5F2242611EF8A0A792BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.140.0/22
IPv6:
2400:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
8e:a1:89:c6:7a:da:00:d2:0c:4b:3a:b0:7b:1f:ce:02:4a:e5:
70:4b:c2:7d:93:d7:af:a0:0f:21:23:61:14:7d:0f:4c:19:9d:
69:a2:de:23:3a:ba:fa:59:65:27:7f:fa:7e:58:e3:7d:bf:f3:
41:26:60:c2:a7:f4:7b:ea:d6:f3:fc:42:12:c6:96:76:f9:ef:
20:d3:fe:24:ce:81:d7:20:65:ee:2a:d9:c5:0f:23:d0:81:75:
6f:51:61:ba:c2:ef:5a:6e:c7:78:12:3f:cb:20:be:05:a9:6a:
b9:3b:94:a9:59:42:28:cd:77:30:74:67:08:52:5a:bc:e0:30:
a7:dd:b0:af:cd:e3:0b:61:75:27:07:b4:51:29:8d:38:1e:94:
24:1a:76:ef:7d:3d:30:78:cc:39:5d:53:c1:9a:d7:29:76:56:
d1:61:68:fe:04:de:11:dc:fb:56:c8:75:9b:a0:06:af:03:4a:
a0:f0:f4:b1:a2:03:40:5c:6f:4b:b9:d0:ba:b9:9f:7d:71:f9:
4d:0a:3c:e0:18:a2:23:58:81:a6:70:27:51:d8:58:ba:ed:e6:
c2:61:63:cd:d2:62:16:52:30:33:a7:10:25:0d:3b:da:77:94:
e0:4b:8c:8e:6a:65:90:7d:c3:4b:0f:2e:32:fa:dd:33:dc:ca:
04:87:36:e4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3
ODNFODJDN0YwHhcNMjQwNjA2MTcwNTM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjYxZWM2MC02ZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnint0OGFbhUniKj7CTXZTszT5aM/jSFzPMJaXQhwai8A6j9RpDouCPI0vGA
+mGXOunBFAHXxRaFh1td2h4ceNfqLSebuWDYZTRD7aQ0Ax6yPwtTtIgEVMHFhMOC
uGSkp6ZGnmsfWbqrm3995JyJMEWifSgA6ZCEV19yHVoFx9L+v5rHcHpFeNZND++G
R6ie87OPxOEoeMcMl/UJHh/N+p1jumzBHbpvIp+5QdQCXQ0aLGJMBQ7aWn16jOMu
5NwuTounNyGa0Ztzvtg9XLcUf7ivKvvcGkjiz2M0taI43bKFP6R5S9/epGUoe039
LCMaB0Nvm/aTgcR9pitBjS1Y6QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNwtCwcA
lPmP75hgEJ246p8++hfsMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy
NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM2MUIvNTFFRkZBMzA4MjY5MTFFQ0FEMkU5NTI0QzRGOUFFMDIvRkRGMEI1RjIy
NDI2MTFFRjhBMEE3OTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJ0zIwwDQQCAAIwBwMFACQAx8AwDQYJKoZIhvcNAQELBQAD
ggEBAI6hicZ62gDSDEs6sHsfzgJK5XBLwn2T16+gDyEjYRR9D0wZnWmi3iM6uvpZ
ZSd/+n5Y432/80EmYMKn9Hvq1vP8QhLGlnb57yDT/iTOgdcgZe4q2cUPI9CBdW9R
YbrC71pux3gSP8sgvgWpark7lKlZQijNdzB0ZwhSWrzgMKfdsK/N4wthdScHtFEp
jTgelCQadu99PTB4zDldU8Ga1yl2VtFhaP4E3hHc+1bIdZugBq8DSqDw9LGiA0Bc
b0u50Lq5n31x+U0KPOAYoiNYgaZwJ1HYWLrt5sJhY83SYhZSMDOnECUNO9p3lOBL
jI5qZZB9w0sPLjL63TPcygSHNuQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:41 2025 by rpki-client