Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF8DF36C244E11EE8861C354C4F9AE02.roa
File: FF8DF36C244E11EE8861C354C4F9AE02.roa (raw, json)
Hash identifier: fp1/gXejFSmkQ1TYJPeu/fnw9lzKgfrg73Z/adqCp7M=
Subject key identifier: AB:03:79:DF:4F:47:1E:F9:1A:45:02:19:F1:78:44:8C:EC:27:50:CB
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4262
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF8DF36C244E11EE8861C354C4F9AE02.roa
Signing time: Sat 30 Mar 2024 15:03:29 +0000
ROA not before: Sat 30 Mar 2024 15:03:29 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 24086
IP address blocks: 103.84.77.0/24 maxlen: 24
103.84.78.0/23 maxlen: 24
116.101.65.0/24 maxlen: 24
125.214.32.0/23 maxlen: 24
125.214.34.0/24 maxlen: 24
125.214.36.0/22 maxlen: 24
125.214.40.0/23 maxlen: 24
125.214.42.0/24 maxlen: 24
125.214.44.0/23 maxlen: 24
125.214.46.0/24 maxlen: 24
203.190.166.0/23 maxlen: 24
203.190.168.0/23 maxlen: 24
203.190.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 15:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16994 (0x4262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Mar 30 15:03:29 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=660829c1-1165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:c9:4d:0e:27:07:3c:9d:e9:54:19:33:f5:
52:03:a0:99:a1:6d:8e:c5:9e:53:d6:3f:83:18:a5:
b3:28:17:7e:67:ae:e7:1d:c0:4b:97:9a:da:d0:58:
c1:b1:0b:d6:6c:2d:c2:9a:cb:9f:cb:3a:f8:b3:b7:
4e:fe:03:e6:b3:ee:44:db:ce:5d:f4:c1:29:cc:86:
c2:33:9b:8e:49:e1:21:56:22:36:94:b5:1a:93:bd:
a1:6e:6f:27:8d:34:e5:94:22:ce:95:20:9c:52:4d:
01:d9:68:18:d1:88:65:37:3e:6b:1c:c2:94:2c:24:
f4:44:fa:97:d6:48:f5:51:5b:f7:e0:5a:89:a7:12:
bf:63:65:3d:7e:f8:fb:83:0b:c8:0c:2f:e5:22:6f:
42:10:e3:a6:97:a7:64:83:35:cc:0d:78:91:f2:d7:
cb:ca:26:3c:4f:ca:03:6a:97:53:30:ec:96:91:22:
d6:19:5b:e0:5a:6c:6c:f3:c5:c8:0b:a8:52:be:6f:
5c:88:d2:14:00:1e:30:ea:f3:77:45:14:99:6e:11:
8e:04:60:5a:2e:8c:a6:36:70:4c:42:b4:1c:9a:23:
e4:e3:db:92:a2:41:f7:f7:f1:36:f6:6d:f8:91:07:
71:70:ba:fb:59:71:51:96:77:3b:11:ee:51:1b:06:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:79:DF:4F:47:1E:F9:1A:45:02:19:F1:78:44:8C:EC:27:50:CB
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF8DF36C244E11EE8861C354C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.77.0-103.84.79.255
116.101.65.0/24
125.214.32.0-125.214.34.255
125.214.36.0-125.214.42.255
125.214.44.0-125.214.46.255
203.190.166.0-203.190.169.255
203.190.174.0/24
Signature Algorithm: sha256WithRSAEncryption
51:56:de:5d:51:79:f2:ce:51:45:bf:16:fe:97:96:45:63:64:
67:61:31:b2:45:fc:10:ce:6d:64:de:4c:df:cd:34:e6:63:bb:
56:cf:90:a0:bf:4e:e0:38:aa:31:df:71:89:27:72:49:d1:ef:
f1:53:b3:f8:80:83:f1:18:c8:ca:c0:d9:d7:e4:05:9a:bb:8d:
a9:03:d6:68:37:54:56:16:05:e1:25:19:1d:a2:d3:f2:ef:2a:
aa:46:f9:75:4c:dd:a9:01:40:fe:30:be:f0:24:a1:5c:b4:b1:
0e:e3:fa:32:de:26:45:1a:c5:b0:d8:f4:11:9e:6e:0a:a3:df:
8a:73:5d:f3:ee:24:e6:2a:2c:1d:83:40:33:d8:22:8a:bb:73:
a9:c4:23:23:00:fd:87:a5:90:d3:78:cd:04:07:a8:3e:1e:60:
cb:31:31:15:7d:b6:0a:5f:1f:93:56:ee:8b:a0:61:5e:3f:0b:
fc:49:ad:d5:b0:9e:79:05:f3:b7:cd:37:72:73:d0:18:58:c2:
aa:4e:36:a8:87:71:19:f5:9f:7b:14:71:14:5a:ef:8d:22:29:
ee:76:a7:55:35:85:11:26:b8:6d:98:08:11:fd:0e:3e:dc:38:
1d:d0:b3:37:15:ac:07:f2:96:7d:ff:bb:27:bf:ba:d7:22:8c:
fd:22:8b:c1
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgICQmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwMzMwMTUwMzI5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjA4MjljMS0xMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBnJTQ4nBzyd6VQZM/VSA6CZoW2OxZ5T1j+DGKWzKBd+Z67nHcBLl5ra0FjB
sQvWbC3Cmsufyzr4s7dO/gPms+5E285d9MEpzIbCM5uOSeEhViI2lLUak72hbm8n
jTTllCLOlSCcUk0B2WgY0YhlNz5rHMKULCT0RPqX1kj1UVv34FqJpxK/Y2U9fvj7
gwvIDC/lIm9CEOOml6dkgzXMDXiR8tfLyiY8T8oDapdTMOyWkSLWGVvgWmxs88XI
C6hSvm9ciNIUAB4w6vN3RRSZbhGOBGBaLoymNnBMQrQcmiPk49uSokH39/E29m34
kQdxcLr7WXFRlnc7Ee5RGwa+BQIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFKsDed9P
Rx75GkUCGfF4RIzsJ1DLMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkY4REYzNkMy
NDRFMTFFRTg4NjFDMzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwawYIKwYBBQUHAQcBAf8E
XDBaMFgEAgABMFIwDAMEAGdUTQMEBGdUQAMEAHRlQTAMAwQFfdYgAwQAfdYiMAwD
BAJ91iQDBAB91iowDAMEAn3WLAMEAH3WLjAMAwQBy76mAwQBy76oAwQAy76uMA0G
CSqGSIb3DQEBCwUAA4IBAQBRVt5dUXnyzlFFvxb+l5ZFY2RnYTGyRfwQzm1k3kzf
zTTmY7tWz5Cgv07gOKox33GJJ3JJ0e/xU7P4gIPxGMjKwNnX5AWau42pA9ZoN1RW
FgXhJRkdotPy7yqqRvl1TN2pAUD+ML7wJKFctLEO4/oy3iZFGsWw2PQRnm4Ko9+K
c13z7iTmKiwdg0Az2CKKu3OpxCMjAP2HpZDTeM0EB6g+HmDLMTEVfbYKXx+TVu6L
oGFePwv8Sa3VsJ55BfO3zTdyc9AYWMKqTjaoh3EZ9Z97FHEUWu+NIinudqdVNYUR
JrhtmAgR/Q4+3Dgd0LM3FawH8pZ9/7snv7rXIoz9IovB
-----END CERTIFICATE-----
Generated at Fri Apr 5 18:53:25 2024 by rpki-client on console-ams.rpki-client.org