Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/F9CF62A6D9DC11EDA4083A71C4F9AE02.roa
File: F9CF62A6D9DC11EDA4083A71C4F9AE02.roa (raw, json)
Hash identifier: UHCr8TmRZ401GMs1Xsc1YZVYJU3OCsPbaT51P3pVgNU=
Subject key identifier: BB:0E:F6:EA:14:88:D3:37:DC:E1:59:2F:89:BA:18:AE:C1:8D:07:49
Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial: 02B5
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/F9CF62A6D9DC11EDA4083A71C4F9AE02.roa
Signing time: Tue 05 Mar 2024 03:25:02 +0000
ROA not before: Tue 05 Mar 2024 03:25:02 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 9930
IP address blocks: 103.162.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 09:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Validity
Not Before: Mar 5 03:25:02 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e6908d-447c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:0f:14:92:5f:7f:83:17:c6:8d:c8:3d:9d:
91:51:01:d8:a5:34:f5:76:bf:80:9f:51:29:22:3c:
2b:d3:40:d4:74:7d:ec:a5:46:ac:08:57:e3:e2:d0:
fe:9f:3c:8e:08:69:bc:77:04:ea:27:f3:36:a9:2d:
c6:9c:dc:d8:2b:ac:ae:b7:98:a4:c5:c5:0c:a0:53:
73:0e:e5:9a:40:d9:00:0c:42:87:c3:56:23:38:62:
43:c3:43:63:0f:13:55:b1:4a:1f:62:4a:dd:17:26:
81:84:2d:6c:f1:00:c5:1b:60:16:ce:0b:1d:79:54:
96:94:a7:a6:52:14:42:2c:04:e1:7e:73:0c:f6:8b:
25:62:85:24:0e:d7:69:67:f8:67:6d:9a:fc:36:5d:
e3:11:d8:45:01:a8:49:38:cb:6a:39:21:52:b6:2c:
01:99:81:dc:d5:29:77:ac:1d:4d:ca:28:71:5c:c3:
10:38:4f:99:aa:dd:6f:4b:39:d3:fa:c3:44:6d:49:
7e:81:37:84:1f:8a:f7:5b:31:42:5c:a0:ab:ff:3f:
7a:e5:d1:f2:81:73:68:e3:92:47:17:fb:02:4c:84:
e5:f6:a1:4e:8e:ab:60:92:14:7b:46:9c:29:83:ef:
82:aa:8f:eb:51:dc:8f:05:8f:9b:b2:e5:6b:0f:18:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0E:F6:EA:14:88:D3:37:DC:E1:59:2F:89:BA:18:AE:C1:8D:07:49
X509v3 Authority Key Identifier:
keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/F9CF62A6D9DC11EDA4083A71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ce:f6:10:2e:87:3e:36:0b:c5:90:3d:2e:41:93:58:3f:fe:
60:95:77:d8:00:00:8d:1e:b8:ac:97:62:10:b0:70:91:77:ae:
ee:d5:20:2f:54:32:e3:87:56:d7:35:48:9c:d2:88:73:79:3f:
52:b0:a8:0b:03:b7:db:9a:da:83:3d:5a:ad:2f:0b:3f:11:00:
ad:40:06:00:9f:2f:ce:05:ab:ed:51:4d:5a:31:64:77:5f:53:
08:8f:9e:4a:7b:e7:69:33:22:2d:be:ac:11:9a:d7:5d:55:ed:
c7:60:49:15:8b:fa:31:36:3e:41:6b:b9:56:4a:3d:15:e9:65:
19:c0:bf:cc:83:37:73:b8:04:7b:95:c1:d3:47:a8:eb:23:1c:
5c:29:0f:06:b4:8b:74:99:d7:1e:02:48:45:47:4b:c4:f6:00:
a8:7f:ba:ea:e6:a0:0a:11:47:3e:8e:b1:a9:3b:8d:80:76:30:
ac:ca:87:db:4f:3a:2b:16:78:ef:28:54:14:46:7c:64:b6:08:
bf:8c:6a:ed:ca:f9:2d:e9:71:f9:25:d8:30:a3:ef:16:08:c0:
9d:6e:f5:38:31:04:31:32:c2:7c:ba:3b:95:96:d9:4e:28:ee:
83:f5:90:20:4c:16:a4:62:62:ae:16:ca:fc:fe:a0:5a:e4:9d:
51:e8:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org