Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/11E51A6E35E811ED97AD625AC4F9AE02.roa
File: 11E51A6E35E811ED97AD625AC4F9AE02.roa (raw, json)
Hash identifier: 3K33/hJP/RdvOrnJKcSBuZoneoGcZ6DA0bPVzqDdfME=
Subject key identifier: B9:E7:09:CC:09:66:CD:90:19:9C:B8:6C:F1:C9:97:AD:8D:4F:F0:30
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3FE2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/11E51A6E35E811ED97AD625AC4F9AE02.roa
Signing time: Fri 20 Oct 2023 02:21:22 +0000
ROA not before: Fri 20 Oct 2023 02:21:22 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 45903
IP address blocks: 42.96.38.0/23 maxlen: 24
42.96.40.0/21 maxlen: 24
42.96.48.0/21 maxlen: 24
42.96.56.0/22 maxlen: 24
42.96.60.0/24 maxlen: 24
42.96.61.0/24 maxlen: 24
42.96.62.0/24 maxlen: 24
45.122.232.0/22 maxlen: 24
45.122.236.0/22 maxlen: 24
45.122.240.0/22 maxlen: 24
45.122.244.0/22 maxlen: 24
45.122.248.0/22 maxlen: 24
45.122.252.0/24 maxlen: 24
45.122.254.0/23 maxlen: 24
101.99.0.0/23 maxlen: 24
101.99.2.0/24 maxlen: 24
101.99.4.0/22 maxlen: 24
101.99.8.0/21 maxlen: 24
101.99.16.0/20 maxlen: 24
101.99.32.0/19 maxlen: 24
103.9.196.0/22 maxlen: 24
103.63.104.0/22 maxlen: 24
103.63.110.0/23 maxlen: 24
103.63.112.0/22 maxlen: 24
103.63.116.0/22 maxlen: 24
103.63.120.0/22 maxlen: 24
103.224.168.0/22 maxlen: 24
103.229.40.0/22 maxlen: 24
103.246.220.0/22 maxlen: 24
113.20.96.0/19 maxlen: 24
115.165.160.0/24 maxlen: 24
115.165.166.0/24 maxlen: 24
119.82.128.0/20 maxlen: 24
144.48.24.0/22 maxlen: 24
183.91.0.0/21 maxlen: 24
183.91.8.0/22 maxlen: 24
183.91.12.0/23 maxlen: 24
183.91.15.0/24 maxlen: 24
183.91.16.0/20 maxlen: 24
202.134.16.0/21 maxlen: 24
203.171.16.0/20 maxlen: 24
203.205.0.0/21 maxlen: 24
203.205.9.0/24 maxlen: 24
203.205.10.0/23 maxlen: 24
203.205.12.0/22 maxlen: 24
203.205.16.0/20 maxlen: 24
203.205.32.0/19 maxlen: 24
2402:5300::/40 maxlen: 48
2402:5300:400::/46 maxlen: 48
2402:5300:404::/48 maxlen: 48
2402:5300:405::/48 maxlen: 48
2402:5300:406::/48 maxlen: 48
2402:5300:408::/46 maxlen: 48
2402:5300:40c::/46 maxlen: 48
2402:5300:410::/44 maxlen: 48
2402:5300:420::/44 maxlen: 48
2402:5300:430::/44 maxlen: 48
2402:5300:440::/42 maxlen: 48
2402:5300:480::/42 maxlen: 48
2402:5300:4c0::/42 maxlen: 48
2402:5300:500::/40 maxlen: 48
2402:5300:600::/40 maxlen: 48
2402:5300:700::/40 maxlen: 48
2402:5300:800::/40 maxlen: 48
2402:5300:900::/40 maxlen: 48
2402:5300:1000::/36 maxlen: 48
2402:5300:2000::/36 maxlen: 48
2402:5300:4000::/44 maxlen: 48
2402:5300:4010::/44 maxlen: 48
2402:5300:4022::/48 maxlen: 48
2402:5300:4023::/48 maxlen: 48
2402:5300:4024::/46 maxlen: 48
2402:5300:4028::/46 maxlen: 48
2402:5300:402c::/46 maxlen: 48
2402:5300:4030::/44 maxlen: 48
2402:5300:4040::/42 maxlen: 48
2402:5300:4080::/42 maxlen: 48
2402:5300:40c0::/42 maxlen: 48
2402:5300:4100::/40 maxlen: 48
2402:5300:4200::/40 maxlen: 48
2402:5300:4300::/40 maxlen: 48
2402:5300:4400::/40 maxlen: 48
2402:5300:4500::/40 maxlen: 48
2402:5300:4600::/40 maxlen: 48
2402:5300:5000::/36 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16354 (0x3fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 20 02:21:22 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6531e422-cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:db:54:eb:c8:a2:86:8f:b7:e7:9f:9d:78:
bc:84:76:d3:e4:84:73:c8:e8:af:df:ad:23:d0:fc:
f7:25:49:f4:c3:d7:53:40:08:54:c8:ca:aa:0d:1d:
85:90:87:3a:89:d9:c3:c4:11:29:9a:3a:e9:09:58:
30:3f:f8:f1:2d:5c:7c:68:4b:2f:55:5a:e3:c8:c1:
ee:6e:ea:f7:d6:43:44:b3:9d:50:65:3b:49:72:19:
64:f1:96:cf:d7:9d:f2:5f:c0:74:a0:79:39:62:ac:
9c:e2:03:35:c3:4e:53:d3:95:8d:94:be:00:3f:f0:
8b:77:7b:5f:99:ba:ca:7a:b9:41:60:f9:4e:18:27:
f9:71:6d:77:f4:7a:b2:46:c3:68:77:fa:f9:3f:2a:
9e:48:fd:b1:43:34:0a:dd:22:af:ef:1a:b5:31:f2:
01:30:45:5b:96:1e:0b:c2:2c:56:39:37:96:8c:a7:
44:b3:e4:72:f1:dd:91:f6:c9:a9:d4:50:0f:ed:5f:
ca:1c:97:8e:86:08:ec:ea:f9:bf:97:11:2f:39:4a:
a0:79:fd:02:3a:bf:74:98:61:fe:99:2f:f0:17:73:
b4:68:39:3f:dc:96:36:65:6d:37:e5:27:8c:42:8b:
a6:4f:07:59:e9:88:40:4b:ff:a0:c1:2f:57:0a:f5:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E7:09:CC:09:66:CD:90:19:9C:B8:6C:F1:C9:97:AD:8D:4F:F0:30
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/11E51A6E35E811ED97AD625AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.38.0-42.96.62.255
45.122.232.0-45.122.252.255
45.122.254.0/23
101.99.0.0-101.99.2.255
101.99.4.0-101.99.63.255
103.9.196.0/22
103.63.104.0/22
103.63.110.0-103.63.123.255
103.224.168.0/22
103.229.40.0/22
103.246.220.0/22
113.20.96.0/19
115.165.160.0/24
115.165.166.0/24
119.82.128.0/20
144.48.24.0/22
183.91.0.0-183.91.13.255
183.91.15.0-183.91.31.255
202.134.16.0/21
203.171.16.0/20
203.205.0.0/21
203.205.9.0-203.205.63.255
IPv6:
2402:5300::/40
2402:5300:400::-2402:5300:406:ffff:ffff:ffff:ffff:ffff
2402:5300:408::-2402:5300:9ff:ffff:ffff:ffff:ffff:ffff
2402:5300:1000::-2402:5300:2fff:ffff:ffff:ffff:ffff:ffff
2402:5300:4000::/43
2402:5300:4022::-2402:5300:46ff:ffff:ffff:ffff:ffff:ffff
2402:5300:5000::/36
Signature Algorithm: sha256WithRSAEncryption
65:77:d0:5f:58:8f:6e:bb:3e:ef:f9:07:ce:4e:e0:0d:f0:87:
e8:d1:9b:2d:7c:85:e0:69:62:fa:5a:40:20:5a:de:be:8a:53:
c3:b1:49:17:54:04:6c:6b:d2:19:8c:bf:39:d8:2f:6c:01:74:
e5:69:c8:40:0e:f0:7a:50:34:15:68:19:e6:4b:97:b6:a8:b2:
ff:12:c7:86:0e:a7:2c:a0:ab:8f:83:54:89:63:c4:d5:6b:c2:
29:0e:32:ed:a6:72:2c:44:53:0e:55:dc:91:75:d8:c4:77:92:
e0:47:07:40:3d:a0:b2:cf:9d:f7:08:39:98:46:20:fd:76:fd:
88:43:de:7f:8f:3d:d8:94:60:8a:a2:51:0a:c7:a3:c3:8a:3d:
9e:55:a7:80:83:1a:ef:61:33:46:4d:68:6e:72:52:ef:4c:3c:
65:20:b5:c5:ad:f2:94:29:11:f8:7f:69:54:8f:f1:f0:21:5f:
74:fa:a2:4a:b1:39:e7:f2:6f:5c:2d:e0:fe:19:e9:6f:91:79:
dd:26:e0:c2:91:e2:95:6b:9f:15:43:8b:70:26:72:ea:ec:50:
1c:69:1f:ba:c5:92:a5:b1:7b:67:68:33:6a:cf:24:bb:9e:3a:
b5:bf:0d:c4:35:71:28:69:15:65:cd:57:0d:7b:cf:a1:56:bd:
b4:43:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 29 15:09:04 2023 by rpki-client on console-ams.rpki-client.org