Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/4ECE685A24B011EFACA7BB36C4F9AE02.roa
File: 4ECE685A24B011EFACA7BB36C4F9AE02.roa (raw, json)
Hash identifier: BLNXUM+ekU2CcEhGIdZo+1q5U7MimuzOpHLXREmyhJs=
Subject key identifier: 61:E0:49:EE:13:E4:EB:50:24:E2:76:94:63:56:1F:9A:65:2B:87:7C
Certificate issuer: /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Certificate serial: 06C5
Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/4ECE685A24B011EFACA7BB36C4F9AE02.roa
Signing time: Fri 07 Jun 2024 09:28:33 +0000
ROA not before: Fri 07 Jun 2024 09:28:33 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 21859
IP address blocks: 103.135.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 03:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Validity
Not Before: Jun 7 09:28:33 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6662d2c0-a821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:73:c7:ef:fd:fc:bf:21:7d:25:6a:97:2f:
7e:7b:3b:00:01:b1:6a:b1:8f:cc:23:5d:d9:29:0e:
e3:14:12:f3:db:ee:c2:1b:c7:da:ff:33:9f:b1:4b:
0c:a4:91:24:70:23:f2:0a:ef:e7:44:d7:f6:c2:48:
b0:ff:f5:67:3d:26:e7:f5:24:4d:c9:ad:ed:7c:47:
b1:6e:25:53:41:20:bb:57:0d:30:93:a6:70:e1:5e:
fb:85:ae:d1:67:e4:25:92:bd:9a:af:eb:ea:9f:d1:
19:bb:40:ae:07:61:65:a0:4e:a5:01:38:20:2b:3d:
5d:a9:a4:35:3d:5a:ff:a7:bf:09:c5:2b:a5:a7:54:
8a:4d:8c:3e:98:e7:f5:e8:25:0e:f4:72:a6:3d:36:
e1:b0:63:46:ce:a3:c7:75:9e:25:26:c1:b2:47:0f:
ca:64:14:63:1f:b1:80:aa:1f:96:08:d6:af:f6:c6:
7b:1a:9c:a1:05:ef:ed:49:b0:60:48:78:79:b9:c1:
41:8b:c1:31:b9:18:44:1e:00:b0:1c:fd:c8:3c:82:
8b:fd:2e:a2:0c:22:fa:27:00:cc:4b:7b:1a:38:3c:
83:78:b5:fc:79:f3:6f:6b:a9:8a:0c:e2:7c:1c:bb:
2f:86:87:48:af:a5:e9:36:9b:d8:ca:64:d2:df:b1:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:49:EE:13:E4:EB:50:24:E2:76:94:63:56:1F:9A:65:2B:87:7C
X509v3 Authority Key Identifier:
keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/4ECE685A24B011EFACA7BB36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b9:c9:66:f5:10:c6:67:34:8b:69:a1:8d:30:2e:85:a5:ec:
a0:d3:2a:2c:6e:8e:63:84:1e:f8:ad:ac:5f:f6:6a:5e:2a:78:
75:31:9d:c2:0e:03:7c:84:55:d3:64:9c:43:4a:80:eb:28:e4:
f5:26:7f:fa:d0:8a:ba:95:c2:44:ee:f6:42:6c:59:9a:4c:c8:
1b:54:67:56:3b:cf:77:97:23:09:38:98:f5:56:6a:a1:cb:af:
ef:1f:54:45:a8:08:54:1e:34:14:79:0e:b8:b9:ed:4f:ff:b4:
e4:2c:25:d7:48:ef:77:33:ac:6c:c8:21:08:e3:8d:80:93:6e:
f8:9b:9b:63:1e:f4:47:78:dd:87:6f:2d:5c:ac:43:ea:b0:a0:
9c:25:8f:9a:0b:e2:53:76:62:d5:e8:eb:93:5b:5f:8a:77:48:
6e:a4:f8:a5:6a:0a:ae:cf:83:36:95:15:90:b2:47:13:40:4b:
c4:b9:e2:95:b8:4a:05:ad:89:65:56:38:a4:49:d3:7e:01:2c:
19:3f:59:82:4b:ac:19:e4:18:7c:77:ee:d1:d4:a7:31:73:b7:
e6:63:cd:d9:a3:4b:4b:0c:99:a6:4d:33:3a:0b:3e:74:0d:08:
e0:0f:48:ad:f7:5b:79:68:93:25:3a:ab:a9:72:33:6d:94:a2:
2b:b7:1b:87
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE5NDYxMTAvBgNVBAUTKDQzMzhDRTNDMDYzMTBBN0E5NEYwOUJCMTM2RkFDQkMy
ODM1NUFGQ0IwHhcNMjQwNjA3MDkyODMzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjYyZDJjMC1hODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1SRzx+/9/L8hfSVqly9+ezsAAbFqsY/MI13ZKQ7jFBLz2+7CG8fa/zOfsUsM
pJEkcCPyCu/nRNf2wkiw//VnPSbn9SRNya3tfEexbiVTQSC7Vw0wk6Zw4V77ha7R
Z+Qlkr2ar+vqn9EZu0CuB2FloE6lATggKz1dqaQ1PVr/p78JxSulp1SKTYw+mOf1
6CUO9HKmPTbhsGNGzqPHdZ4lJsGyRw/KZBRjH7GAqh+WCNav9sZ7GpyhBe/tSbBg
SHh5ucFBi8ExuRhEHgCwHP3IPIKL/S6iDCL6JwDMS3saODyDeLX8efNva6mKDOJ8
HLsvhodIr6XpNpvYymTS37HoiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGHgSe4T
5OtQJOJ2lGNWH5plK4d8MB8GA1UdIwQYMBaAFEM4zjwGMQp6lPCbsTb6y8KDVa/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTk0Ni9DNjdFRDFGRTE3
RUYxMUVCQTU3RjUxMzVDNEY5QUUwMi9RempPUEFZeENucVU4SnV4TnZyTHdvTlZy
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F6ak9QQVl4Q25xVThKdXhOdnJMd29OVnI4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE5NDYvQzY3RUQxRkUxN0VGMTFFQkE1N0Y1MTM1QzRGOUFFMDIvNEVDRTY4NUEy
NEIwMTFFRkFDQTdCQjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnh4AwDQYJKoZIhvcNAQELBQADggEBALK5yWb1EMZnNItp
oY0wLoWl7KDTKixujmOEHvitrF/2al4qeHUxncIOA3yEVdNknENKgOso5PUmf/rQ
irqVwkTu9kJsWZpMyBtUZ1Y7z3eXIwk4mPVWaqHLr+8fVEWoCFQeNBR5Dri57U//
tOQsJddI73czrGzIIQjjjYCTbvibm2Me9Ed43YdvLVysQ+qwoJwlj5oL4lN2YtXo
65NbX4p3SG6k+KVqCq7PgzaVFZCyRxNAS8S54pW4SgWtiWVWOKRJ034BLBk/WYJL
rBnkGHx37tHUpzFzt+ZjzdmjS0sMmaZNMzoLPnQNCOAPSK33W3lokyU6q6lyM22U
oiu3G4c=
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:55:55 2024 by rpki-client on console-ams.rpki-client.org