Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/B3D0859CC44E11EF8C8F1721C4F9AE02.roa
File: B3D0859CC44E11EF8C8F1721C4F9AE02.roa (raw, json)
Hash identifier: cOvOyIdIIR6Z7jkiEXW94NvBaLR2umzsIhdQTJYjATM=
Subject key identifier: 9E:4D:EB:B7:BF:DA:11:12:E5:67:3F:AA:D5:B1:D7:F9:73:34:CB:5B
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 02BA
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/B3D0859CC44E11EF8C8F1721C4F9AE02.roa
Signing time: Fri 27 Dec 2024 12:32:57 +0000
ROA not before: Fri 27 Dec 2024 12:32:57 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 21086
IP address blocks: 103.189.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B
Validity
Not Before: Dec 27 12:32:57 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=676e9e79-ede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:19:cc:14:00:89:9b:07:39:e3:d6:2f:3a:
d4:39:1e:da:35:95:b9:b2:40:c1:dc:ef:bf:ad:d2:
33:54:46:2a:c8:7d:0e:47:cf:87:59:d5:94:73:2a:
52:d4:b6:71:22:2d:b5:86:31:b2:bb:a8:37:66:64:
35:b2:ec:ed:00:ba:5e:ed:5b:70:c2:a2:66:fb:4d:
d1:2d:62:cd:e1:5a:cf:24:10:8e:ae:e3:35:e0:fa:
92:7f:91:f1:f0:58:44:cd:2b:61:04:ec:23:d1:9c:
d1:ac:22:02:4d:49:24:a5:8f:47:d7:87:09:e5:66:
29:59:bb:1e:81:8d:ff:7c:7d:aa:94:cd:4f:a0:05:
56:31:fe:32:28:3b:43:b0:bc:c8:5f:ee:80:83:da:
8e:6d:e2:1d:a3:a3:c1:9d:3b:89:0f:29:f2:92:cb:
02:ff:69:1d:60:d3:22:87:83:95:19:db:cb:c0:72:
ab:c7:84:5f:ad:7e:65:45:5d:6d:b9:76:f3:6b:2a:
4b:2b:ab:02:45:86:e5:77:55:d9:4a:89:66:47:f7:
15:2f:3c:40:6e:cb:48:f3:1b:f6:c6:97:cd:07:d7:
cf:20:43:09:3f:47:b5:01:66:9b:96:c6:83:7d:24:
87:64:57:dd:4a:a0:e4:a7:18:34:cc:cc:23:65:0e:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:EB:B7:BF:DA:11:12:E5:67:3F:AA:D5:B1:D7:F9:73:34:CB:5B
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/B3D0859CC44E11EF8C8F1721C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.191.0/24
Signature Algorithm: sha256WithRSAEncryption
46:08:dd:b0:f6:51:81:39:bb:5d:46:2f:6a:9a:ad:dd:3e:31:
7d:b5:dc:fb:ae:b7:97:37:79:2b:b0:b8:7c:86:fa:3b:94:7d:
9f:f0:cb:e4:3f:3a:13:09:0c:a1:8d:1c:df:7d:8b:cd:04:10:
b7:9b:ad:50:34:3d:de:2f:ea:65:b3:5e:bd:4f:e9:86:93:9b:
a4:2f:c4:1a:71:f8:e0:3b:71:5d:94:93:6d:78:66:ff:f4:1d:
91:dd:cf:a7:64:19:05:d4:2b:f7:2b:a4:48:55:e0:73:a0:e7:
02:74:d3:12:18:05:ea:52:a4:6b:74:a9:66:86:c4:6e:e3:49:
35:3f:8e:d2:90:30:97:46:42:2c:07:f7:77:8a:2e:6c:94:59:
0b:d8:e9:0b:ba:1a:76:68:b5:be:f8:8b:6f:1c:5b:4f:51:f5:
b5:24:6d:ae:95:0b:59:ab:52:02:1c:31:6f:ac:ef:b4:1a:7f:
b9:46:ad:59:42:0f:36:62:70:77:b5:5c:67:7e:8b:a5:0a:91:
c9:a5:ba:58:82:b4:e6:ad:44:4c:f6:52:29:0e:64:89:59:a9:
f7:fb:1d:e7:2c:c5:12:4b:a5:fc:b3:97:a0:d5:33:14:6f:7f:
e7:cd:4c:82:47:df:50:1c:2d:0e:db:40:7d:9c:a6:db:4c:98:
b8:67:c7:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw
QTc0NUMyRTAwHhcNMjQxMjI3MTIzMjU3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzZlOWU3OS1lZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsh8ZzBQAiZsHOePWLzrUOR7aNZW5skDB3O+/rdIzVEYqyH0OR8+HWdWUcypS
1LZxIi21hjGyu6g3ZmQ1suztALpe7VtwwqJm+03RLWLN4VrPJBCOruM14PqSf5Hx
8FhEzSthBOwj0ZzRrCICTUkkpY9H14cJ5WYpWbsegY3/fH2qlM1PoAVWMf4yKDtD
sLzIX+6Ag9qObeIdo6PBnTuJDynykssC/2kdYNMih4OVGdvLwHKrx4RfrX5lRV1t
uXbzaypLK6sCRYbld1XZSolmR/cVLzxAbstI8xv2xpfNB9fPIEMJP0e1AWablsaD
fSSHZFfdSqDkpxg0zMwjZQ4OpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ5N67e/
2hES5Wc/qtWx1/lzNMtbMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE
NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzMxNUIvRDczNUEzQjRFRDRCMTFFQ0E5NTUzNzc4QzRGOUFFMDIvQjNEMDg1OUND
NDRFMTFFRjhDOEYxNzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnvb8wDQYJKoZIhvcNAQELBQADggEBAEYI3bD2UYE5u11G
L2qard0+MX213Puut5c3eSuwuHyG+juUfZ/wy+Q/OhMJDKGNHN99i80EELebrVA0
Pd4v6mWzXr1P6YaTm6QvxBpx+OA7cV2Uk214Zv/0HZHdz6dkGQXUK/crpEhV4HOg
5wJ00xIYBepSpGt0qWaGxG7jSTU/jtKQMJdGQiwH93eKLmyUWQvY6Qu6GnZotb74
i28cW09R9bUkba6VC1mrUgIcMW+s77Qaf7lGrVlCDzZicHe1XGd+i6UKkcmluliC
tOatREz2UikOZIlZqff7HecsxRJLpfyzl6DVMxRvf+fNTIJH31AcLQ7bQH2cpttM
mLhnx7o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:08:58 2025 by rpki-client