Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/D8D26A5CDFE611ED8872DE0EC4F9AE02.roa
File: D8D26A5CDFE611ED8872DE0EC4F9AE02.roa (raw, json)
Hash identifier: /1b+tX4TJD8mYgVixzyjdvLG6yhTXilkmVq7YrEknkQ=
Subject key identifier: AE:30:78:E6:91:F9:AC:BD:55:6B:71:61:2B:67:48:F3:98:68:0B:B1
Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial: 336A
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/D8D26A5CDFE611ED8872DE0EC4F9AE02.roa
Signing time: Sat 14 Oct 2023 14:20:09 +0000
ROA not before: Sat 14 Oct 2023 14:20:09 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 9937
IP address blocks: 103.255.148.0/22 maxlen: 22
103.255.148.0/24 maxlen: 24
103.255.149.0/24 maxlen: 24
180.149.208.0/20 maxlen: 20
180.149.208.0/24 maxlen: 24
180.149.209.0/24 maxlen: 24
180.149.210.0/24 maxlen: 24
180.149.211.0/24 maxlen: 24
180.149.212.0/24 maxlen: 24
180.149.213.0/24 maxlen: 24
180.149.220.0/24 maxlen: 24
180.149.221.0/24 maxlen: 24
180.149.222.0/24 maxlen: 24
180.149.223.0/24 maxlen: 24
182.255.50.0/24 maxlen: 24
182.255.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 11:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13162 (0x336a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Validity
Not Before: Oct 14 14:20:09 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=652aa399-19b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:de:8b:e2:e3:79:7e:38:94:87:17:b4:df:
fd:c2:8e:c2:79:c6:92:12:8a:ac:d6:63:82:01:eb:
c2:91:ad:99:20:6c:56:de:9b:27:c9:d0:9d:11:7c:
7e:9c:49:1a:ac:10:cf:23:31:2d:bc:f8:11:b6:8e:
b3:b8:4a:b4:37:49:e3:f6:cb:a3:2b:91:20:f2:62:
ad:77:0e:f8:1a:06:07:b1:a2:06:8d:8d:46:3d:36:
34:10:2e:e6:e0:31:a1:a0:08:84:0b:40:3b:63:51:
30:1d:4e:65:6f:b4:e5:eb:f5:ad:40:61:9c:ad:49:
7a:8d:81:9f:51:ed:03:f3:00:56:85:40:c8:df:cd:
3a:02:17:35:5e:a0:3f:86:ba:f0:ec:d0:3f:69:46:
41:6b:b0:65:8c:29:68:70:a9:ff:e4:2e:15:5b:d6:
76:c8:39:24:e5:8e:fb:4f:1c:19:b6:9e:bd:f0:8a:
9f:71:13:95:f9:9f:3a:d0:de:73:a3:65:3d:7f:39:
78:36:be:ae:c7:9c:09:0e:a0:9a:79:f8:81:02:a6:
19:77:a3:93:5e:9a:7a:66:b3:40:df:68:20:b3:42:
08:52:02:59:d9:8d:bd:91:14:55:67:83:10:da:8f:
a5:d5:8d:bb:79:ae:7f:d0:06:47:ca:3f:2b:3b:ca:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:78:E6:91:F9:AC:BD:55:6B:71:61:2B:67:48:F3:98:68:0B:B1
X509v3 Authority Key Identifier:
keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/D8D26A5CDFE611ED8872DE0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.148.0/22
180.149.208.0/20
182.255.50.0/23
Signature Algorithm: sha256WithRSAEncryption
69:66:18:a9:4b:d0:d1:6c:80:4d:c2:ef:de:f2:e4:d9:74:74:
47:43:3d:91:f6:37:0f:69:e1:40:f0:31:0f:03:2e:14:12:6e:
05:8a:81:a2:cb:3d:da:2a:8e:7d:8f:5a:41:ba:97:56:c0:a2:
ec:c8:83:be:4e:d2:af:fc:80:2c:c1:af:8f:f8:ba:70:df:61:
69:26:19:9d:f8:8c:a6:2e:f4:ce:37:6d:d1:00:17:b4:e2:9d:
90:d5:d2:54:b1:97:1c:eb:b8:e1:68:1c:06:91:f0:08:1f:53:
42:6f:c0:8b:e7:8a:ab:80:b8:57:4c:5d:c3:98:89:8d:63:39:
9e:73:b5:1b:57:e3:d0:05:22:7a:45:f0:88:e4:0c:2f:fb:f0:
97:4d:23:a5:f5:13:12:84:b1:fd:eb:73:5d:ef:0e:fc:2b:28:
49:99:df:89:7a:07:83:76:5f:3b:d9:e0:5c:3a:35:ee:29:cf:
13:cf:dd:45:df:50:a3:7e:7b:34:81:35:09:d7:72:62:87:f0:
f6:5d:a2:ac:c5:7c:c3:ba:13:ff:5e:01:7b:83:fc:74:67:3a:
b0:f5:c5:87:fc:59:76:ec:01:1a:a3:7a:b9:b7:5d:c8:c2:2c:
c3:ae:cf:20:7d:90:1c:33:e8:99:ca:00:7e:7c:4c:8e:14:61:
e4:82:5f:21
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICM2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB
QzJFMjJEMzcwHhcNMjMxMDE0MTQyMDA5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTJhYTM5OS0xOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArrzei+LjeX44lIcXtN/9wo7CecaSEoqs1mOCAevCka2ZIGxW3psnydCdEXx+
nEkarBDPIzEtvPgRto6zuEq0N0nj9sujK5Eg8mKtdw74GgYHsaIGjY1GPTY0EC7m
4DGhoAiEC0A7Y1EwHU5lb7Tl6/WtQGGcrUl6jYGfUe0D8wBWhUDI3806Ahc1XqA/
hrrw7NA/aUZBa7BljClocKn/5C4VW9Z2yDkk5Y77TxwZtp698IqfcROV+Z860N5z
o2U9fzl4Nr6ux5wJDqCaefiBAqYZd6OTXpp6ZrNA32ggs0IIUgJZ2Y29kRRVZ4MQ
2o+l1Y27ea5/0AZHyj8rO8r6CQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFK4weOaR
+ay9VWtxYStnSPOYaAuxMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE
NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvRDhEMjZBNUNE
RkU2MTFFRDg4NzJERTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAJn/5QDBAS0ldADBAG2/zIwDQYJKoZIhvcNAQELBQADggEB
AGlmGKlL0NFsgE3C797y5Nl0dEdDPZH2Nw9p4UDwMQ8DLhQSbgWKgaLLPdoqjn2P
WkG6l1bAouzIg75O0q/8gCzBr4/4unDfYWkmGZ34jKYu9M43bdEAF7TinZDV0lSx
lxzruOFoHAaR8AgfU0JvwIvniquAuFdMXcOYiY1jOZ5ztRtX49AFInpF8IjkDC/7
8JdNI6X1ExKEsf3rc13vDvwrKEmZ34l6B4N2XzvZ4Fw6Ne4pzxPP3UXfUKN+ezSB
NQnXcmKH8PZdoqzFfMO6E/9eAXuD/HRnOrD1xYf8WXbsARqjerm3XcjCLMOuzyB9
kBwz6JnKAH58TI4UYeSCXyE=
-----END CERTIFICATE-----
Generated at Thu Apr 25 13:48:39 2024 by rpki-client on console-fra.rpki-client.org