Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3C9FF554699A11ED98B1CA19C4F9AE02.roa
File: 3C9FF554699A11ED98B1CA19C4F9AE02.roa (raw, json)
Hash identifier: ZP86rUBWgzrIgO0cilkymwrDFjEJ4ziEfLcPwlVBZ7o=
Subject key identifier: E8:BD:DE:FC:1C:13:43:0D:C7:D5:5C:36:B2:38:EA:DE:98:7B:49:4B
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 12B4
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3C9FF554699A11ED98B1CA19C4F9AE02.roa
Signing time: Thu 04 Jul 2024 17:35:00 +0000
ROA not before: Thu 04 Jul 2024 17:35:00 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.120.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 17:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4788 (0x12b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Validity
Not Before: Jul 4 17:35:00 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6686dd44-e9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:8c:59:a4:e9:a9:7f:b2:69:84:6b:47:99:
1a:6c:a1:07:65:21:4c:2a:74:c2:08:f3:de:86:7d:
e1:98:e7:cd:0d:05:14:0b:eb:32:25:3c:d5:d4:af:
de:0d:13:ca:98:d9:3e:83:39:e1:ca:57:07:46:3e:
07:3e:07:8e:16:36:8e:62:92:43:8b:a9:60:e0:c8:
97:58:e2:2b:30:69:46:5e:67:9c:fe:f9:79:52:05:
7c:8d:b7:a9:77:b9:4d:45:9b:53:f5:fa:06:e2:cc:
d8:93:76:2a:8e:37:8c:45:b0:f3:08:a8:dc:c0:fe:
32:6f:9f:b2:a7:1c:d3:dd:c5:60:68:4f:eb:8e:27:
50:e2:70:10:5c:bf:db:35:9e:52:31:22:fd:ab:8b:
68:e8:bc:6f:9f:f9:9c:c6:c5:73:9d:a0:29:7a:06:
b6:ab:a6:65:e3:90:a4:3d:01:f5:69:40:f1:19:a0:
32:6c:de:37:fc:52:76:f9:8a:0a:4a:71:db:64:47:
05:6f:c0:2b:29:52:bf:98:6b:59:d6:38:7e:6b:d4:
12:de:02:57:7f:bc:fb:d3:bf:b8:f5:1b:42:c9:74:
58:fe:13:24:c3:4c:81:42:bc:87:d5:51:55:06:8a:
69:28:75:b4:c4:71:87:81:32:56:cf:b8:55:75:34:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:DE:FC:1C:13:43:0D:C7:D5:5C:36:B2:38:EA:DE:98:7B:49:4B
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3C9FF554699A11ED98B1CA19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.117.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f3:b8:e5:fd:87:c2:15:b1:6a:05:fd:6d:ce:fb:7f:cd:d5:
9e:6d:0b:13:fa:02:a0:bd:bf:15:cc:0a:bb:3d:44:12:ed:85:
01:2a:00:35:b4:fc:9a:66:a8:63:54:5a:1e:a9:dc:8c:94:f2:
e6:09:e1:14:ac:05:76:54:b9:09:5a:6b:ff:7f:09:b1:a7:3a:
a1:0f:ef:22:d5:e5:ef:aa:8e:65:9a:77:32:8a:c5:57:4d:14:
52:b9:50:00:d9:52:17:18:09:49:80:41:58:c7:5a:3f:1c:29:
61:6c:27:67:67:0e:d2:60:b7:c4:00:54:00:26:7b:c9:71:73:
88:aa:08:b6:fd:17:ac:34:be:98:a6:6f:ac:98:c9:31:fd:18:
40:66:da:5e:1e:45:b6:6e:6d:18:43:ec:67:f7:0e:b6:b4:67:
e0:f3:8e:de:23:c5:d4:c3:69:f9:04:02:ee:16:34:f2:eb:fe:
97:1b:14:84:79:29:c4:cb:13:bc:cd:cd:7c:6b:1c:ff:51:42:
73:f1:d3:cc:02:e7:ef:43:08:d1:53:86:70:8c:a2:91:cd:a3:
89:2e:62:82:50:16:6e:5a:a8:b1:d8:55:7d:ec:31:cf:67:27:
d9:b1:b8:be:96:9c:a8:1b:2b:63:a9:4b:f6:d7:66:ec:b4:3c:
8a:35:0b:84
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICErQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG
MDNBNjA1QzMwHhcNMjQwNzA0MTczNTAwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg2ZGQ0NC1lOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1sWMWaTpqX+yaYRrR5kabKEHZSFMKnTCCPPehn3hmOfNDQUUC+syJTzV1K/e
DRPKmNk+gznhylcHRj4HPgeOFjaOYpJDi6lg4MiXWOIrMGlGXmec/vl5UgV8jbep
d7lNRZtT9foG4szYk3YqjjeMRbDzCKjcwP4yb5+ypxzT3cVgaE/rjidQ4nAQXL/b
NZ5SMSL9q4to6Lxvn/mcxsVznaApega2q6Zl45CkPQH1aUDxGaAybN43/FJ2+YoK
SnHbZEcFb8ArKVK/mGtZ1jh+a9QS3gJXf7z707+49RtCyXRY/hMkw0yBQryH1VFV
BoppKHW0xHGHgTJWz7hVdTQ+IQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOi93vwc
E0MNx9VcNrI46t6Ye0lLMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3
NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA5QUQvNjU2REQyNkFBNzY4MTFFODkzMzNDNzI1QzRGOUFFMDIvM0M5RkY1NTQ2
OTlBMTFFRDk4QjFDQTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABneHUwDQYJKoZIhvcNAQELBQADggEBABjzuOX9h8IVsWoF
/W3O+3/N1Z5tCxP6AqC9vxXMCrs9RBLthQEqADW0/JpmqGNUWh6p3IyU8uYJ4RSs
BXZUuQlaa/9/CbGnOqEP7yLV5e+qjmWadzKKxVdNFFK5UADZUhcYCUmAQVjHWj8c
KWFsJ2dnDtJgt8QAVAAme8lxc4iqCLb9F6w0vpimb6yYyTH9GEBm2l4eRbZubRhD
7Gf3Dra0Z+Dzjt4jxdTDafkEAu4WNPLr/pcbFIR5KcTLE7zNzXxrHP9RQnPx08wC
5+9DCNFThnCMopHNo4kuYoJQFm5aqLHYVX3sMc9nJ9mxuL6WnKgbK2OpS/bXZuy0
PIo1C4Q=
-----END CERTIFICATE-----
Generated at Tue Sep 10 18:33:30 2024 by rpki-client on console-fra.rpki-client.org