Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/877899941BE011ED9044765AC4F9AE02.roa
File: 877899941BE011ED9044765AC4F9AE02.roa (raw, json)
Hash identifier: I7Z4WyCRjMjT9fS9AtTrZiDxHbyW7zgLXGiNJNr1E8o=
Subject key identifier: C1:FC:E4:B0:D6:B6:A4:A8:E4:72:1E:74:6F:37:00:D5:58:6C:38:2E
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 0573
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/877899941BE011ED9044765AC4F9AE02.roa
Signing time: Tue 25 Jun 2024 00:49:22 +0000
ROA not before: Tue 25 Jun 2024 00:49:22 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 139901
IP address blocks: 103.136.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 01:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Jun 25 00:49:22 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=667a1412-89e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:36:c6:40:a9:65:d0:d8:1d:d1:8c:29:bb:
57:d0:a2:45:d6:a3:f9:d0:38:c8:e9:94:56:f4:d7:
e9:93:2e:db:1e:81:7b:95:93:7b:ea:46:15:51:2b:
ed:1b:95:44:93:56:cf:07:1b:4e:40:10:6f:58:7a:
c5:99:e7:3e:04:03:0f:21:5d:4d:4f:01:38:65:d9:
4b:1c:80:8a:8b:24:69:bf:0f:03:ae:aa:8a:10:60:
b4:24:9a:7b:ac:ed:b7:c3:86:1b:60:7b:b7:9b:4a:
99:02:09:6c:1c:72:0e:4b:7f:ed:25:34:47:49:6f:
52:6c:de:83:21:d3:74:6f:28:c8:91:0a:34:df:19:
dd:cc:63:f6:84:be:d5:6f:48:c2:87:a0:45:b1:3d:
cb:4b:e2:a6:4c:ea:58:dc:77:eb:e8:a4:e6:9f:4d:
3d:df:4c:17:c6:0c:23:92:cf:44:3b:06:2f:79:26:
2b:49:3a:40:ab:d7:d3:5e:d8:c2:92:36:ea:2f:8f:
ad:f6:37:4d:3f:ce:ec:57:20:cc:20:85:b5:b6:3c:
a1:e1:1a:5e:f4:8c:55:84:d9:20:10:c4:63:4f:f0:
2c:1f:04:fa:5d:cb:08:d0:12:f6:d5:be:b1:91:15:
3e:72:0d:89:c4:fa:96:46:eb:f4:3e:14:0f:00:1a:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FC:E4:B0:D6:B6:A4:A8:E4:72:1E:74:6F:37:00:D5:58:6C:38:2E
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/877899941BE011ED9044765AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2a:6d:c1:c3:4d:4f:e6:0f:a7:3f:d5:9f:41:67:ca:bb:b5:
6a:c1:76:fb:7c:bd:7c:e2:01:3b:57:6a:62:4a:74:93:dc:1b:
aa:fc:85:3d:50:c7:90:7e:cb:57:15:c5:21:a2:ce:67:78:e1:
7f:4f:22:22:21:52:b4:16:16:13:1b:af:d1:90:a1:af:48:e4:
b9:b5:09:fc:83:ad:43:65:f5:9e:a7:60:e5:58:91:78:24:48:
21:43:a9:04:60:49:81:6e:ff:12:90:56:d7:7c:6c:47:87:ab:
8f:29:82:78:cb:ee:55:08:a0:5c:af:69:7c:d8:60:27:b0:ce:
38:dd:fc:bd:18:28:17:9a:a6:52:79:32:44:b4:ca:15:4f:bc:
4f:b6:7b:66:df:24:6e:cd:1d:6e:a5:a7:bd:a6:3c:59:00:77:
5d:c0:97:55:15:a3:d9:bc:1f:c9:6a:ae:fb:20:28:43:c9:95:
14:df:40:9c:ad:8f:04:6f:37:47:77:1e:d0:c3:a1:20:be:77:
f6:76:79:cb:4b:6f:c0:43:a0:02:9e:c9:fb:f4:28:a0:eb:f3:
c6:dc:bd:78:71:00:d5:b1:a6:9a:7b:94:cd:a7:f2:e6:2a:a8:
b8:69:1b:45:9f:04:43:f0:92:be:18:21:43:47:71:86:9a:7b:
b2:9e:3f:82
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1
RDk0MDY1MDAwHhcNMjQwNjI1MDA0OTIyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdhMTQxMi04OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xA2xkCpZdDYHdGMKbtX0KJF1qP50DjI6ZRW9Nfpky7bHoF7lZN76kYVUSvt
G5VEk1bPBxtOQBBvWHrFmec+BAMPIV1NTwE4ZdlLHICKiyRpvw8DrqqKEGC0JJp7
rO23w4YbYHu3m0qZAglsHHIOS3/tJTRHSW9SbN6DIdN0byjIkQo03xndzGP2hL7V
b0jCh6BFsT3LS+KmTOpY3Hfr6KTmn00930wXxgwjks9EOwYveSYrSTpAq9fTXtjC
kjbqL4+t9jdNP87sVyDMIIW1tjyh4Rpe9IxVhNkgEMRjT/AsHwT6XcsI0BL21b6x
kRU+cg2JxPqWRuv0PhQPABqTUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMH85LDW
tqSo5HIedG83ANVYbDguMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw
MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzUxNTUvMzc0NEIzQzRCMDI4MTFFQjlEMjc4OTFBQzRGOUFFMDIvODc3ODk5OTQx
QkUwMTFFRDkwNDQ3NjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniAMwDQYJKoZIhvcNAQELBQADggEBAF4qbcHDTU/mD6c/
1Z9BZ8q7tWrBdvt8vXziATtXamJKdJPcG6r8hT1Qx5B+y1cVxSGizmd44X9PIiIh
UrQWFhMbr9GQoa9I5Lm1CfyDrUNl9Z6nYOVYkXgkSCFDqQRgSYFu/xKQVtd8bEeH
q48pgnjL7lUIoFyvaXzYYCewzjjd/L0YKBeaplJ5MkS0yhVPvE+2e2bfJG7NHW6l
p72mPFkAd13Al1UVo9m8H8lqrvsgKEPJlRTfQJytjwRvN0d3HtDDoSC+d/Z2ectL
b8BDoAKeyfv0KKDr88bcvXhxANWxppp7lM2n8uYqqLhpG0WfBEPwkr4YIUNHcYaa
e7KeP4I=
-----END CERTIFICATE-----
Generated at Fri Jul 12 03:32:56 2024 by rpki-client on console-ams.rpki-client.org