Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/9CA3BB506A9E11EFB364AE50C4F9AE02.roa
File: 9CA3BB506A9E11EFB364AE50C4F9AE02.roa (raw, json)
Hash identifier: P4vOCDOs4K6worrPWqSn2R/GU2V0FZHtvp1TfOClcXQ=
Subject key identifier: 81:09:1F:0C:52:4D:A5:D9:58:3B:E5:61:F4:8F:2F:0B:2F:C7:E0:B3
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 048D
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/9CA3BB506A9E11EFB364AE50C4F9AE02.roa
Signing time: Wed 04 Sep 2024 09:18:14 +0000
ROA not before: Wed 04 Sep 2024 09:18:14 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 150774
IP address blocks: 103.172.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 03:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: Sep 4 09:18:14 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66d825d5-88de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:6b:2b:15:d9:8a:79:53:af:23:0e:9a:bd:
95:16:00:c9:88:f7:6e:85:e0:63:27:26:c5:85:24:
50:2d:f2:66:c6:6c:c4:c8:60:4c:f4:33:52:fc:e1:
a4:72:6a:76:1f:72:8c:89:51:4e:d8:c8:c5:00:d4:
24:95:ef:ac:b9:05:86:df:51:9a:b3:c6:a1:00:f6:
32:6e:ba:b8:23:7e:15:ff:83:77:b1:b9:80:01:b6:
07:de:01:8a:9a:02:76:da:11:22:b3:c6:f7:e5:0c:
5a:0b:52:c8:3f:09:67:89:1b:ba:3e:47:4e:84:05:
ca:f7:91:0f:fd:af:dc:eb:71:6b:c1:50:4b:a4:d4:
8c:0c:6f:f2:fe:93:7a:54:ca:11:e9:7c:97:50:5d:
3b:a3:a9:c3:ac:dc:8e:4c:a7:93:47:fc:fd:c7:67:
12:69:42:40:80:b0:29:5c:2f:ec:e2:ef:8e:7d:b8:
64:06:cc:77:16:c7:64:53:67:63:44:33:e4:d2:a5:
a6:07:8a:18:23:ad:7c:c7:c8:c1:f6:d9:92:23:ab:
47:2a:d4:8a:f3:59:a1:de:01:fb:4f:48:17:57:50:
25:49:cb:e1:ef:2e:01:4f:08:5e:0a:99:3d:91:54:
2b:eb:fa:5d:02:d7:ac:a2:63:e4:85:52:42:85:ff:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:1F:0C:52:4D:A5:D9:58:3B:E5:61:F4:8F:2F:0B:2F:C7:E0:B3
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/9CA3BB506A9E11EFB364AE50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.115.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1d:b6:1f:45:4e:ac:4b:fe:2b:35:07:f2:c0:40:84:e6:fd:
eb:56:b5:ed:17:71:fa:6c:ee:d2:85:1e:50:28:e4:aa:24:63:
a8:9a:e7:d8:5c:ae:ce:ef:5c:20:a4:75:71:3a:0a:2d:90:16:
ce:23:af:dc:18:57:28:40:fd:6e:d3:7b:dc:89:94:0f:bc:98:
45:a0:17:b6:10:d7:df:d5:e4:14:b7:e0:ef:a0:50:21:a7:20:
9c:ec:bb:02:2d:2c:03:41:32:23:e4:77:a3:74:de:85:0e:36:
3a:f5:c5:cf:cf:74:0c:ae:c6:44:89:20:01:ff:52:3b:ca:9b:
ce:07:e1:2a:00:a6:75:d2:41:05:08:1f:04:69:c5:53:74:4e:
c1:9b:c6:d8:68:35:ca:21:d6:33:7b:96:45:2e:62:6f:83:5a:
9d:e6:9d:ec:3c:d5:63:45:92:e3:9c:1b:bb:42:2b:5e:3a:87:
30:cb:4f:dd:c7:67:06:43:f9:81:ee:c2:da:ef:4b:7f:21:90:
dc:93:ff:c2:6e:af:6a:86:5c:76:de:be:29:4c:c2:3c:8e:8f:
4d:7b:b5:6e:2b:41:84:3c:58:dc:88:ad:42:9a:eb:7d:63:c6:
4c:a6:2e:59:f3:f4:b5:82:1f:82:7c:ee:6b:ac:0b:dd:f9:9b:
32:32:ca:b6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw
MUQwREJBMkEwHhcNMjQwOTA0MDkxODE0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ4MjVkNS04OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLhrKxXZinlTryMOmr2VFgDJiPduheBjJybFhSRQLfJmxmzEyGBM9DNS/OGk
cmp2H3KMiVFO2MjFANQkle+suQWG31Gas8ahAPYybrq4I34V/4N3sbmAAbYH3gGK
mgJ22hEis8b35QxaC1LIPwlniRu6PkdOhAXK95EP/a/c63FrwVBLpNSMDG/y/pN6
VMoR6XyXUF07o6nDrNyOTKeTR/z9x2cSaUJAgLApXC/s4u+OfbhkBsx3FsdkU2dj
RDPk0qWmB4oYI618x8jB9tmSI6tHKtSK81mh3gH7T0gXV1AlScvh7y4BTwheCpk9
kVQr6/pdAtesomPkhVJChf/FvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIEJHwxS
TaXZWDvlYfSPLwsvx+CzMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB
NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkVEM0MvMzA2RUUyNjAwQTcxMTFFQzlBMTYzQzFGQzRGOUFFMDIvOUNBM0JCNTA2
QTlFMTFFRkIzNjRBRTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrHMwDQYJKoZIhvcNAQELBQADggEBAHUdth9FTqxL/is1
B/LAQITm/etWte0Xcfps7tKFHlAo5KokY6ia59hcrs7vXCCkdXE6Ci2QFs4jr9wY
VyhA/W7Te9yJlA+8mEWgF7YQ19/V5BS34O+gUCGnIJzsuwItLANBMiPkd6N03oUO
Njr1xc/PdAyuxkSJIAH/UjvKm84H4SoApnXSQQUIHwRpxVN0TsGbxthoNcoh1jN7
lkUuYm+DWp3mnew81WNFkuOcG7tCK146hzDLT93HZwZD+YHuwtrvS38hkNyT/8Ju
r2qGXHbevilMwjyOj017tW4rQYQ8WNyIrUKa631jxkymLlnz9LWCH4J87musC935
mzIyyrY=
-----END CERTIFICATE-----
Generated at Fri Sep 6 05:25:58 2024 by rpki-client on console-fra.rpki-client.org