Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/1968CF48727111EFAF02DD45C4F9AE02.roa
File: 1968CF48727111EFAF02DD45C4F9AE02.roa (raw, json)
Hash identifier: Ovq92Hn06KdysZPTx8hwwrk7HXXPyiYGegln5cNtcrE=
Subject key identifier: 9F:2D:45:F2:9C:B1:76:C3:AA:C5:32:63:58:EA:8C:E2:8E:08:1B:C7
Certificate issuer: /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Certificate serial: 06F9
Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/1968CF48727111EFAF02DD45C4F9AE02.roa
Signing time: Sat 14 Sep 2024 08:12:36 +0000
ROA not before: Sat 14 Sep 2024 08:12:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 214766
IP address blocks: 103.135.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 03:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Validity
Not Before: Sep 14 08:12:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66e54573-3363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:14:c4:ad:d5:88:97:1c:4b:78:63:59:2b:
5c:7c:a9:83:d1:10:eb:48:79:93:3d:d3:44:9c:e4:
9b:af:3b:20:37:52:96:14:bf:b9:55:74:ba:56:ae:
81:d6:1f:60:ca:25:10:ba:dd:27:d9:49:3c:06:59:
e6:7b:43:99:a0:7c:de:26:8c:35:59:ff:4b:7b:cf:
58:53:58:92:49:65:1a:c7:1c:af:68:16:12:ec:d5:
7d:9e:fa:06:67:8d:ab:df:b5:a9:32:22:67:a8:d6:
86:b7:7b:39:61:4b:4b:af:11:e8:7c:67:8e:45:99:
b0:64:b9:f1:42:2e:68:35:9e:7b:74:63:8f:8e:e0:
83:dd:fd:ef:dd:d5:85:fe:91:ec:4a:b1:a0:4a:69:
fa:e2:ed:04:fa:fe:89:da:a5:d2:c4:79:17:07:ee:
14:a9:cc:5e:fc:ed:05:b5:b7:8a:fb:3c:c0:c5:a1:
2f:d6:38:5a:0a:0f:d7:ab:f5:4c:14:dc:b7:c6:75:
a6:4c:57:f0:2b:f1:98:9a:0a:4f:a4:2a:3c:be:58:
20:1a:35:33:cf:87:5d:0d:32:72:30:01:aa:89:b7:
61:32:83:6e:27:a9:63:ee:9d:6c:52:94:27:8d:67:
9d:66:81:d0:77:36:fb:85:00:77:44:e4:eb:ed:de:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2D:45:F2:9C:B1:76:C3:AA:C5:32:63:58:EA:8C:E2:8E:08:1B:C7
X509v3 Authority Key Identifier:
keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/1968CF48727111EFAF02DD45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ba:c8:f2:bb:d6:12:06:8d:6a:66:14:2a:83:79:0d:b5:92:
43:f9:98:21:62:5b:50:10:6f:b8:55:64:fe:71:c8:f3:c9:f3:
7c:b2:55:98:5c:06:66:7b:12:f3:df:6a:76:5f:99:99:4a:b6:
bb:35:a9:c4:d8:8d:d5:1b:1f:6b:f1:96:2c:0d:71:f9:db:79:
d5:36:36:64:58:5e:86:ea:5c:fa:d3:63:30:d7:34:54:32:ad:
4f:7e:73:46:2c:a7:f7:e3:d7:9e:8c:ca:c6:cb:68:16:2d:ba:
7c:63:5e:9b:13:07:c8:10:bc:60:f4:1f:36:c5:f2:69:b4:6e:
5b:86:21:ec:9a:9a:e6:79:c4:e1:a5:72:36:8c:9f:e3:50:1b:
51:4f:cc:04:2e:48:70:04:5c:2d:8d:b8:5e:70:26:15:99:28:
84:db:3f:09:97:0c:27:70:c7:48:84:af:bc:f6:8f:5d:57:6d:
68:e7:31:b6:93:d9:34:4d:03:0a:4f:c9:80:52:ce:7d:ea:08:
0c:f5:5a:37:22:a5:13:a4:12:45:fd:78:2c:49:28:3e:df:26:
41:b7:b2:d6:e5:55:09:35:df:31:8f:f7:28:44:83:a2:0d:12:
0d:07:b5:75:0c:e3:32:be:92:1a:7a:65:b8:b8:19:9e:78:ca:
93:7f:a9:85
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE5NDYxMTAvBgNVBAUTKDQzMzhDRTNDMDYzMTBBN0E5NEYwOUJCMTM2RkFDQkMy
ODM1NUFGQ0IwHhcNMjQwOTE0MDgxMjM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmU1NDU3My0zMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5UUxK3ViJccS3hjWStcfKmD0RDrSHmTPdNEnOSbrzsgN1KWFL+5VXS6Vq6B
1h9gyiUQut0n2Uk8Blnme0OZoHzeJow1Wf9Le89YU1iSSWUaxxyvaBYS7NV9nvoG
Z42r37WpMiJnqNaGt3s5YUtLrxHofGeORZmwZLnxQi5oNZ57dGOPjuCD3f3v3dWF
/pHsSrGgSmn64u0E+v6J2qXSxHkXB+4Uqcxe/O0FtbeK+zzAxaEv1jhaCg/Xq/VM
FNy3xnWmTFfwK/GYmgpPpCo8vlggGjUzz4ddDTJyMAGqibdhMoNuJ6lj7p1sUpQn
jWedZoHQdzb7hQB3ROTr7d5q9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ8tRfKc
sXbDqsUyY1jqjOKOCBvHMB8GA1UdIwQYMBaAFEM4zjwGMQp6lPCbsTb6y8KDVa/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTk0Ni9DNjdFRDFGRTE3
RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENucVU4SnV4TnZyTHdvTlZy
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F6ak9QQVl4Q25xVThKdXhOdnJMd29OVnI4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE5NDYvQzY3RUQxRkUxN0VGMTFFQkE1N0Y1MTM1QzRGOUFFMDIvMTk2OENGNDg3
MjcxMTFFRkFGMDJERDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnh4EwDQYJKoZIhvcNAQELBQADggEBAFq6yPK71hIGjWpm
FCqDeQ21kkP5mCFiW1AQb7hVZP5xyPPJ83yyVZhcBmZ7EvPfanZfmZlKtrs1qcTY
jdUbH2vxliwNcfnbedU2NmRYXobqXPrTYzDXNFQyrU9+c0Ysp/fj156MysbLaBYt
unxjXpsTB8gQvGD0HzbF8mm0bluGIeyamuZ5xOGlcjaMn+NQG1FPzAQuSHAEXC2N
uF5wJhWZKITbPwmXDCdwx0iEr7z2j11XbWjnMbaT2TRNAwpPyYBSzn3qCAz1Wjci
pROkEkX9eCxJKD7fJkG3stblVQk13zGP9yhEg6INEg0HtXUM4zK+khp6Zbi4GZ54
ypN/qYU=
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:55:55 2024 by rpki-client on console-ams.rpki-client.org