Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/15F6C9864CBD11EDBCBC1E64C4F9AE02.roa
File: 15F6C9864CBD11EDBCBC1E64C4F9AE02.roa (raw, json)
Hash identifier: JPZvAmUT2qJc7UehDPn2RCH+C6Ex41O5X1Jx+wmKk9o=
Subject key identifier: B0:6A:94:9B:00:51:14:F1:53:A3:BD:F0:3D:37:0C:30:67:D4:43:0B
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 0571
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/15F6C9864CBD11EDBCBC1E64C4F9AE02.roa
Signing time: Tue 25 Jun 2024 00:49:20 +0000
ROA not before: Tue 25 Jun 2024 00:49:20 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 134723
IP address blocks: 103.136.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 01:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Jun 25 00:49:20 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=667a1410-1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5e:3b:f2:28:5b:1a:fe:69:cd:fa:50:e2:0a:
31:14:40:2f:24:fd:4b:78:2f:cc:92:b8:ab:25:7f:
78:84:83:6f:ab:10:19:f8:07:49:d6:8b:d9:41:58:
ba:0b:40:b0:40:e3:92:e8:e1:f4:e7:ff:a7:7c:56:
24:ef:28:5c:17:92:3a:a9:86:7e:99:2d:2b:b2:11:
29:4b:cc:88:5f:09:d0:13:9d:ab:6b:64:38:95:17:
91:6e:77:a9:db:bd:0b:28:f9:93:29:16:f1:6c:06:
72:17:ff:9d:27:c8:2f:b9:63:bc:03:21:b7:1a:2f:
21:e0:f6:e8:f3:23:9a:ef:9a:26:20:7e:5d:e1:62:
65:b3:bc:84:fa:b3:73:6d:36:88:1e:9d:2d:e4:0c:
b5:49:90:84:d4:86:bc:37:5e:6c:e5:a2:70:e4:fd:
22:5b:52:d9:40:d4:23:1f:b5:d0:78:83:71:5c:90:
65:f0:62:d2:99:a3:6f:f2:76:e5:7d:52:4a:c2:20:
14:ec:25:db:91:04:29:1d:4a:86:a1:37:f6:bc:56:
25:c0:10:0d:ea:54:9d:1c:18:93:5e:79:cd:fa:6c:
cc:61:db:63:e0:3b:1b:60:2c:3d:b2:d7:96:da:8a:
48:86:22:a8:6a:98:5a:54:1a:7e:2f:27:9f:23:a2:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6A:94:9B:00:51:14:F1:53:A3:BD:F0:3D:37:0C:30:67:D4:43:0B
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/15F6C9864CBD11EDBCBC1E64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.3.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b8:fb:af:11:76:59:0c:1b:c6:16:5e:e0:e4:aa:68:a2:1e:
11:c5:4e:2c:45:2c:8f:8d:55:0c:a0:aa:a2:eb:72:35:21:8c:
69:14:49:a9:29:48:86:95:fc:63:98:81:93:59:04:58:fa:91:
a5:50:6d:a2:7b:2a:fe:f7:5f:fb:05:95:6d:f2:95:fb:7f:ae:
48:f4:54:f0:4e:f4:07:a7:44:86:5d:69:03:08:16:57:bd:07:
18:0b:a0:ac:44:69:f6:40:46:fa:24:cc:85:2b:2d:f1:b3:ab:
60:fa:d5:70:d8:d0:a2:c0:8e:cc:b0:71:00:b8:0d:6b:27:3e:
d1:ab:21:50:de:21:1a:73:9c:6b:eb:64:d2:a2:a9:1c:0f:b0:
28:28:c4:66:b7:3a:08:6a:39:79:21:48:31:c7:26:85:aa:13:
72:3d:96:6d:ba:0b:bc:c8:d6:68:e2:af:25:1f:7a:62:3f:0e:
2c:32:3c:cf:b9:34:c5:b6:a2:79:42:8c:61:75:65:71:c9:ff:
78:41:b5:c2:3a:3e:b0:2f:f9:e4:2b:9a:b2:77:64:a5:aa:64:
b0:92:78:6b:76:a0:f7:9c:fd:29:86:74:12:2a:28:19:a9:e2:
df:e3:cd:f7:82:a5:23:f5:6c:69:68:f9:3f:70:e4:7f:da:67:
64:07:d6:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1
RDk0MDY1MDAwHhcNMjQwNjI1MDA0OTIwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdhMTQxMC0xMjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+F478ihbGv5pzfpQ4goxFEAvJP1LeC/MkrirJX94hINvqxAZ+AdJ1ovZQVi6
C0CwQOOS6OH05/+nfFYk7yhcF5I6qYZ+mS0rshEpS8yIXwnQE52ra2Q4lReRbnep
270LKPmTKRbxbAZyF/+dJ8gvuWO8AyG3Gi8h4Pbo8yOa75omIH5d4WJls7yE+rNz
bTaIHp0t5Ay1SZCE1Ia8N15s5aJw5P0iW1LZQNQjH7XQeINxXJBl8GLSmaNv8nbl
fVJKwiAU7CXbkQQpHUqGoTf2vFYlwBAN6lSdHBiTXnnN+mzMYdtj4DsbYCw9steW
2opIhiKoaphaVBp+LyefI6KSuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLBqlJsA
URTxU6O98D03DDBn1EMLMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw
MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzUxNTUvMzc0NEIzQzRCMDI4MTFFQjlEMjc4OTFBQzRGOUFFMDIvMTVGNkM5ODY0
Q0JEMTFFREJDQkMxRTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniAMwDQYJKoZIhvcNAQELBQADggEBACC4+68RdlkMG8YW
XuDkqmiiHhHFTixFLI+NVQygqqLrcjUhjGkUSakpSIaV/GOYgZNZBFj6kaVQbaJ7
Kv73X/sFlW3ylft/rkj0VPBO9AenRIZdaQMIFle9BxgLoKxEafZARvokzIUrLfGz
q2D61XDY0KLAjsywcQC4DWsnPtGrIVDeIRpznGvrZNKiqRwPsCgoxGa3OghqOXkh
SDHHJoWqE3I9lm26C7zI1mjiryUfemI/DiwyPM+5NMW2onlCjGF1ZXHJ/3hBtcI6
PrAv+eQrmrJ3ZKWqZLCSeGt2oPec/SmGdBIqKBmp4t/jzfeCpSP1bGlo+T9w5H/a
Z2QH1gc=
-----END CERTIFICATE-----
Generated at Fri Jul 12 03:08:14 2024 by rpki-client on console-fra.rpki-client.org