Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/B8ACD7A01E7211EF8F74965BC4F9AE02.roa
File: B8ACD7A01E7211EF8F74965BC4F9AE02.roa (raw, json)
Hash identifier: F3B+rj9UAbEGdedfEdd7/pngIHlQJooxwxAp1KwSwI8=
Subject key identifier: 51:1B:26:FB:4F:F2:E5:FE:96:4C:86:46:48:D4:7D:A3:67:B0:05:96
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 042C
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/B8ACD7A01E7211EF8F74965BC4F9AE02.roa
Signing time: Mon 15 Jul 2024 07:35:52 +0000
ROA not before: Mon 15 Jul 2024 07:35:52 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 46997
IP address blocks: 103.175.98.0/23 maxlen: 23
103.175.98.0/24 maxlen: 24
103.175.99.0/24 maxlen: 24
2400:a6a0:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 16 Oct 2024 01:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Validity
Not Before: Jul 15 07:35:52 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6694d157-3b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:ad:4d:72:1e:32:69:16:60:96:82:f8:dc:
f9:99:ee:9d:ef:d4:b9:69:73:fc:59:c0:d0:6e:80:
21:6b:90:b4:d0:ae:27:99:ff:dc:8b:0d:86:ac:62:
43:35:d1:be:4d:6c:d8:c5:4b:85:68:b1:ff:60:08:
58:75:f6:a9:ec:0f:3a:59:48:a7:25:2b:a4:f8:ac:
d4:10:ed:9f:2b:2c:ef:b5:3b:7f:66:4e:fb:4b:15:
aa:4e:3e:2a:14:7d:9f:ad:c2:8f:e3:c6:15:c4:5e:
6e:89:0c:f5:0e:b3:57:c3:aa:61:79:99:13:72:96:
6f:d5:6e:f1:88:c5:54:de:89:ea:07:c2:7c:63:5b:
36:be:2d:e7:f2:90:65:2c:55:ca:7d:00:2b:eb:81:
06:b4:95:0a:7f:d6:64:76:0a:63:f2:73:2c:c7:ae:
a4:f1:b6:6a:0a:0a:77:fe:72:b6:b3:2c:24:eb:a9:
2e:6e:1f:55:57:c3:b6:99:8e:1e:5a:b2:a1:a4:ec:
7d:7f:02:8b:4f:9d:7e:cd:60:39:fc:7a:54:e1:5f:
91:e2:86:8e:f2:25:7b:22:f9:52:99:9d:79:89:5c:
2b:a6:31:cb:8d:2e:d3:7f:ab:8a:92:62:3b:f9:e4:
96:bf:02:5e:28:8a:85:d9:8c:8e:52:85:4c:9a:47:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:26:FB:4F:F2:E5:FE:96:4C:86:46:48:D4:7D:A3:67:B0:05:96
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/B8ACD7A01E7211EF8F74965BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.98.0/23
IPv6:
2400:a6a0:200::/40
Signature Algorithm: sha256WithRSAEncryption
37:2c:16:bb:b5:5e:f7:dd:5f:2b:1a:14:ae:90:62:bd:97:30:
7f:b7:a7:2d:ff:ec:f8:d8:19:1a:66:31:69:cc:89:89:01:34:
e2:cf:7b:88:ea:68:b3:4b:99:d1:8b:38:54:0c:0f:ba:04:3b:
b3:6a:bc:75:e0:e0:41:2a:2c:09:c9:44:14:d4:2d:a2:11:0b:
82:7b:ac:99:f8:d0:d3:02:50:e8:2d:dd:18:fe:89:6b:14:e4:
74:98:8a:3e:19:36:e9:36:46:3c:96:f2:52:0a:69:0f:1d:12:
ab:f3:5c:c7:d6:95:a5:92:34:ae:66:99:7e:35:fe:b8:7c:f2:
fa:d8:78:c4:79:da:3a:86:25:c0:40:d0:39:5c:c9:57:c0:95:
64:46:f3:a5:e6:df:4c:0c:8a:1d:bc:83:d9:35:c3:b1:ed:45:
c5:f6:0c:4a:f1:51:48:0e:d0:48:90:3e:a7:5f:0e:d9:fd:af:
31:59:4d:78:b7:be:81:9f:3f:0f:d5:4a:6b:47:bc:bf:48:47:
21:88:d2:16:7d:1c:b2:b0:35:bc:3b:ed:5b:6d:42:1c:3f:69:
e3:c9:4e:62:bd:c3:c8:09:d6:bd:61:93:17:c3:20:b5:ae:bf:
07:cd:1c:fe:23:99:44:68:96:d2:36:63:02:b7:0b:af:42:27:
27:69:c6:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhEM0FDQ0M2REFB
NEM1MThDQjQwHhcNMjQwNzE1MDczNTUyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk0ZDE1Ny0zYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDWtTXIeMmkWYJaC+Nz5me6d79S5aXP8WcDQboAha5C00K4nmf/ciw2GrGJD
NdG+TWzYxUuFaLH/YAhYdfap7A86WUinJSuk+KzUEO2fKyzvtTt/Zk77SxWqTj4q
FH2frcKP48YVxF5uiQz1DrNXw6pheZkTcpZv1W7xiMVU3onqB8J8Y1s2vi3n8pBl
LFXKfQAr64EGtJUKf9Zkdgpj8nMsx66k8bZqCgp3/nK2sywk66kubh9VV8O2mY4e
WrKhpOx9fwKLT51+zWA5/HpU4V+R4oaO8iV7IvlSmZ15iVwrpjHLjS7Tf6uKkmI7
+eSWvwJeKIqF2YyOUoVMmkc+uQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFEbJvtP
8uX+lkyGRkjUfaNnsAWWMB8GA1UdIwQYMBaAFGfzfFDKM89PUIV406zMbapMUYy0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE3Ri83NjBFMjI4RTM3
REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venowOVFoWGpUck14dHFreFJq
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfTjhVTW96ejA5UWhYalRyTXh0cWt4UmpMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJBN0YvNzYwRTIyOEUzN0RDMTFFQ0I1NzIwQTI4QzRGOUFFMDIvQjhBQ0Q3QTAx
RTcyMTFFRjhGNzQ5NjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E
IDAeMAwEAgABMAYDBAFnr2IwDgQCAAIwCAMGACQApqACMA0GCSqGSIb3DQEBCwUA
A4IBAQA3LBa7tV733V8rGhSukGK9lzB/t6ct/+z42BkaZjFpzImJATTiz3uI6miz
S5nRizhUDA+6BDuzarx14OBBKiwJyUQU1C2iEQuCe6yZ+NDTAlDoLd0Y/olrFOR0
mIo+GTbpNkY8lvJSCmkPHRKr81zH1pWlkjSuZpl+Nf64fPL62HjEedo6hiXAQNA5
XMlXwJVkRvOl5t9MDIodvIPZNcOx7UXF9gxK8VFIDtBIkD6nXw7Z/a8xWU14t76B
nz8P1UprR7y/SEchiNIWfRyysDW8O+1bbUIcP2njyU5ivcPICda9YZMXwyC1rr8H
zRz+I5lEaJbSNmMCtwuvQicnacY1
-----END CERTIFICATE-----
Generated at Wed Oct 16 04:05:52 2024 by rpki-client on console-fra.rpki-client.org