Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/07398E3A8DBF11EE8BCAEC6AC4F9AE02.roa
File: 07398E3A8DBF11EE8BCAEC6AC4F9AE02.roa (raw, json)
Hash identifier: q4nj3T/IJ0R9dlS5X3s3s+4HgUWtl2p4I8ylViE1QH0=
Subject key identifier: 16:D3:07:45:DD:EE:79:AA:72:57:AD:B9:20:26:DC:9B:06:F4:5E:1E
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 07CE
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/07398E3A8DBF11EE8BCAEC6AC4F9AE02.roa
Signing time: Tue 28 Nov 2023 07:30:42 +0000
ROA not before: Tue 28 Nov 2023 07:30:42 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 13:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Nov 28 07:30:42 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65659721-d31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:c9:36:2b:6f:4e:7c:a1:fa:b9:8a:81:66:
1b:ea:bd:df:ce:7c:19:d5:50:9e:89:a1:16:c9:6f:
64:03:6a:d2:56:23:a8:13:b5:47:44:a5:d9:70:62:
32:e5:ec:68:1b:68:3d:fe:9e:56:a4:35:d9:98:5b:
81:52:ec:ec:86:41:13:1f:96:d5:4f:93:13:c5:a7:
1c:75:e8:9f:8d:c2:20:c3:3a:3c:d6:40:69:07:0f:
c7:d7:f7:2a:40:ca:d0:62:13:53:a8:bc:3a:3b:f5:
70:bb:fd:5f:06:d2:39:94:74:cc:82:7c:1e:f7:2a:
96:09:b4:ab:2c:f6:dc:22:8a:ce:ee:08:ee:18:44:
76:33:5f:6e:11:ba:b0:49:e8:23:7e:9c:f1:7a:8c:
89:ef:26:85:dd:36:1b:ac:8a:91:2e:bc:b0:90:5a:
b2:70:35:68:81:48:fe:a0:f4:94:af:84:d9:74:fd:
dc:fc:5c:96:c5:1f:d1:27:e6:78:c2:a8:62:f7:98:
fc:c9:65:5f:c4:29:8f:42:89:83:d6:7b:19:fa:39:
c9:30:0a:75:95:34:38:59:2c:dc:d8:bf:52:3d:ba:
08:c9:ef:bd:dd:8b:a7:51:53:58:13:0c:66:58:78:
30:8d:ea:1b:ba:9b:a6:84:bb:14:05:89:13:92:2d:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:07:45:DD:EE:79:AA:72:57:AD:B9:20:26:DC:9B:06:F4:5E:1E
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/07398E3A8DBF11EE8BCAEC6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
6a:2b:fd:5d:bc:80:fa:81:66:b9:b9:bc:95:fc:b1:47:38:0a:
5d:17:55:ac:15:eb:eb:77:a9:31:d8:8e:13:e2:60:31:3c:32:
78:7c:75:1d:5d:06:02:84:02:bb:63:0a:33:ad:5b:d2:cf:63:
73:bd:a6:f4:4d:12:5d:81:ff:5f:11:cc:b7:d6:3a:a6:09:82:
b0:15:95:7c:13:26:ea:9c:92:4e:8a:7b:f8:f8:70:b7:9b:a0:
e4:78:2c:30:4b:ad:cf:26:12:5d:2b:1c:e0:a2:48:7b:8f:28:
5a:71:ea:f7:10:09:9e:ba:d3:63:50:5d:73:6f:83:3d:cf:f8:
e7:40:64:26:e6:51:06:09:fc:fd:ef:8a:94:7f:7e:4d:d1:95:
8f:39:6c:db:d8:92:9c:81:32:b7:bd:56:85:0f:1b:ba:f5:68:
07:7c:1c:09:84:4b:c5:30:aa:e5:cb:cc:bb:0b:71:8e:0f:96:
f7:66:69:ba:55:31:d0:cb:15:f9:45:9f:9c:cb:8a:c4:ff:fc:
ec:3e:93:b2:52:56:47:35:e9:c8:10:81:36:91:1e:d4:4c:77:
ab:f6:d9:5f:de:72:89:c5:9e:8f:85:3c:d4:ac:9e:d5:da:fd:
6b:09:9b:01:f0:40:2d:1a:f2:08:74:bc:ca:72:e2:70:ca:58:
ba:50:33:90
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjMxMTI4MDczMDQyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY1OTcyMS1kMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEfJNitvTnyh+rmKgWYb6r3fznwZ1VCeiaEWyW9kA2rSViOoE7VHRKXZcGIy
5exoG2g9/p5WpDXZmFuBUuzshkETH5bVT5MTxaccdeifjcIgwzo81kBpBw/H1/cq
QMrQYhNTqLw6O/Vwu/1fBtI5lHTMgnwe9yqWCbSrLPbcIorO7gjuGER2M19uEbqw
SegjfpzxeoyJ7yaF3TYbrIqRLrywkFqycDVogUj+oPSUr4TZdP3c/FyWxR/RJ+Z4
wqhi95j8yWVfxCmPQomD1nsZ+jnJMAp1lTQ4WSzc2L9SPboIye+93YunUVNYEwxm
WHgwjeobupumhLsUBYkTki0QCwIDAQABo4IDWTCCA1UwHQYDVR0OBBYEFBbTB0Xd
7nmqcletuSAm3JsG9F4eMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvMDczOThFM0E4
REJGMTFFRThCQ0FFQzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgeIGCCsGAQUFBwEHAQH/
BIHSMIHPMIGpBAIAATCBogMEAy11yAMEAi1+oAMEAmcYvDAMAwQCZznsAwQDZznw
AwQCZ0bQAwQCZ+GwAwQCZ/QEAwQBlmsKAwQCloF8AwQEyo5AAwQAyo5RAwQAyo5T
MAwDBADKjlUDBAPKjlAwDAMEAMqOWQMEAcqOXDAMAwQAyo5fAwQCyo5oAwQAyo5u
AwQCyo5wMAwDBAHKjnYDBADKjngwDAMEAMqOewMEB8qOADAhBAIAAjAbMBADBQck
BjyAAwcAJAY8gAAIAwcCJAY8gAQAMA0GCSqGSIb3DQEBCwUAA4IBAQBqK/1dvID6
gWa5ubyV/LFHOApdF1WsFevrd6kx2I4T4mAxPDJ4fHUdXQYChAK7YwozrVvSz2Nz
vab0TRJdgf9fEcy31jqmCYKwFZV8EybqnJJOinv4+HC3m6DkeCwwS63PJhJdKxzg
okh7jyhacer3EAmeutNjUF1zb4M9z/jnQGQm5lEGCfz974qUf35N0ZWPOWzb2JKc
gTK3vVaFDxu69WgHfBwJhEvFMKrly8y7C3GOD5b3Zmm6VTHQyxX5RZ+cy4rE//zs
PpOyUlZHNenIEIE2kR7UTHer9tlf3nKJxZ6PhTzUrJ7V2v1rCZsB8EAtGvIIdLzK
cuJwyli6UDOQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org