Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/623BE4F4D4FA11EE85EC7540C4F9AE02.roa
File: 623BE4F4D4FA11EE85EC7540C4F9AE02.roa (raw, json)
Hash identifier: kLzv9RqY5b76Q3hJGNFFhRXROZ5aigmpD2WLEArcsGM=
Subject key identifier: F3:E5:19:EC:87:83:DD:95:3C:D1:5E:F7:75:70:0A:82:DC:F4:37:CB
Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Certificate serial: 23
Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/623BE4F4D4FA11EE85EC7540C4F9AE02.roa
Signing time: Mon 26 Feb 2024 22:58:11 +0000
ROA not before: Mon 26 Feb 2024 22:58:11 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 24334
IP address blocks: 103.11.88.0/22 maxlen: 24
202.83.240.0/21 maxlen: 21
202.83.240.0/24 maxlen: 24
202.83.241.0/24 maxlen: 24
202.83.242.0/24 maxlen: 24
202.83.243.0/24 maxlen: 24
202.83.244.0/24 maxlen: 24
202.83.245.0/24 maxlen: 24
202.83.246.0/24 maxlen: 24
202.83.247.0/24 maxlen: 24
202.171.208.0/21 maxlen: 21
202.171.208.0/24 maxlen: 24
202.171.209.0/24 maxlen: 24
202.171.210.0/24 maxlen: 24
202.171.211.0/24 maxlen: 24
202.171.212.0/24 maxlen: 24
202.171.213.0/24 maxlen: 24
202.171.214.0/24 maxlen: 24
202.171.215.0/24 maxlen: 24
203.142.88.0/21 maxlen: 21
203.142.88.0/24 maxlen: 24
203.142.89.0/24 maxlen: 24
203.142.90.0/24 maxlen: 24
203.142.91.0/24 maxlen: 24
203.142.92.0/24 maxlen: 24
203.142.93.0/24 maxlen: 24
203.142.94.0/24 maxlen: 24
203.142.95.0/24 maxlen: 24
2404:1a0::/30 maxlen: 32
Validation: Failed, certificate revoked on Wed 28 Feb 2024 02:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Validity
Not Before: Feb 26 22:58:11 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65dd1783-5b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:27:4e:52:af:b2:b1:93:31:94:16:5b:2c:
4c:fc:f7:d3:3b:10:bd:e8:b6:c4:0a:2b:63:a2:e2:
8b:54:6a:ac:b7:1d:5b:78:15:b3:f0:b2:11:cf:ca:
6b:f8:ec:b7:ed:c4:f6:0b:5a:63:c8:ec:60:6a:e5:
21:d0:a6:1c:bd:39:e9:7f:f9:45:34:f5:7d:4e:62:
45:a9:65:7f:3a:6f:4a:a1:6d:3f:c8:d9:af:fc:3c:
b5:40:f5:8d:a0:08:90:4c:f4:2e:16:dc:e1:a4:67:
9a:ef:87:c7:c1:8a:1b:12:92:a5:34:85:65:8f:f4:
93:6a:89:6c:bb:28:7f:33:f2:a4:07:10:30:05:18:
0d:3b:d7:09:fd:63:f0:62:68:15:cc:7d:69:90:1c:
f2:10:e6:17:5d:b8:6c:58:31:67:d0:e9:fc:7e:9f:
1c:23:9a:16:21:47:cf:03:35:2b:8d:a9:c4:c4:25:
47:d8:af:1a:1e:53:ca:1c:ae:04:8c:7b:4b:f9:fe:
06:52:38:52:d1:a2:3b:d3:d3:cf:51:0b:d8:37:4c:
fe:29:d3:29:20:38:65:84:e5:98:e4:0d:37:df:21:
dd:69:a0:a6:9a:e2:31:1b:9d:cf:ab:dc:19:3b:97:
44:2d:4b:5b:ea:05:08:f7:d2:0c:d1:b7:6d:91:79:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:19:EC:87:83:DD:95:3C:D1:5E:F7:75:70:0A:82:DC:F4:37:CB
X509v3 Authority Key Identifier:
keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/623BE4F4D4FA11EE85EC7540C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.88.0/22
202.83.240.0/21
202.171.208.0/21
203.142.88.0/21
IPv6:
2404:1a0::/30
Signature Algorithm: sha256WithRSAEncryption
9e:c7:8c:b6:8c:49:e8:b2:c8:7c:c0:69:70:65:d6:ee:4b:95:
03:20:14:fa:3b:b6:d2:f6:91:40:06:b5:c1:55:a6:41:f8:57:
19:4b:6e:2c:1d:22:62:36:07:4c:bd:06:55:10:17:6d:0a:b9:
72:f6:55:c2:15:e3:b2:da:fc:75:ba:60:81:32:78:d5:54:9f:
6c:43:de:c7:a4:07:29:db:b6:5c:13:f4:78:1f:86:5d:29:9d:
88:d4:44:45:04:25:27:89:e9:17:0a:0a:57:18:5b:b0:17:af:
5b:78:5a:06:bd:1b:bf:b6:12:c1:d8:7e:3f:5b:78:96:9f:c2:
07:d6:25:24:c1:b3:97:70:e7:84:37:29:70:3e:d0:34:32:55:
3b:b8:79:e9:69:46:4e:eb:62:8f:c2:c9:48:94:7f:27:be:88:
88:2b:4d:a1:85:64:ed:4f:32:63:13:56:6d:a5:ca:49:f0:f6:
b1:c3:65:16:2a:32:05:22:dc:5b:a0:53:70:ea:ed:37:56:9b:
52:59:b2:bd:7d:bb:ec:b2:14:b8:ac:cc:5c:25:3c:2e:7e:7a:
fe:23:b9:00:7c:84:d1:29:46:d1:b2:bc:f4:9d:9d:00:20:75:
9e:e4:f8:d6:8b:67:86:44:f4:41:e7:dd:51:2f:b9:e6:fa:83:
92:0b:94:16
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MDM2QTExMC8GA1UEBRMoMEYxN0YzN0RCQzk0ODREOTZFMUEwQUJDNzhBNEY5Q0FD
RDVFREE4QTAeFw0yNDAyMjYyMjU4MTFaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZGQxNzgzLTViNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpACdOUq+ysZMxlBZbLEz899M7EL3otsQKK2Oi4otUaqy3HVt4FbPwshHPymv4
7LftxPYLWmPI7GBq5SHQphy9Oel/+UU09X1OYkWpZX86b0qhbT/I2a/8PLVA9Y2g
CJBM9C4W3OGkZ5rvh8fBihsSkqU0hWWP9JNqiWy7KH8z8qQHEDAFGA071wn9Y/Bi
aBXMfWmQHPIQ5hdduGxYMWfQ6fx+nxwjmhYhR88DNSuNqcTEJUfYrxoeU8ocrgSM
e0v5/gZSOFLRojvT089RC9g3TP4p0ykgOGWE5ZjkDTffId1poKaa4jEbnc+r3Bk7
l0QtS1vqBQj30gzRt22ReWtrAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQU8+UZ7IeD
3ZU80V73dXAKgtz0N8swHwYDVR0jBBgwFoAUDxfzfbyUhNluGgq8eKT5ys1e2oow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMzZBL0JCQzJGNzc2RDFG
MTExRUU4NjA1MUE2MUM0RjlBRTAyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJv
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRHhmemZieVVoTmx1R2dxOGVLVDV5czFlMm9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi82MjNCRTRGNEQ0
RkExMUVFODVFQzc1NDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEAmcLWAMEA8pT8AMEA8qr0AMEA8uOWDANBAIAAjAHAwUCJAQB
oDANBgkqhkiG9w0BAQsFAAOCAQEAnseMtoxJ6LLIfMBpcGXW7kuVAyAU+ju20vaR
QAa1wVWmQfhXGUtuLB0iYjYHTL0GVRAXbQq5cvZVwhXjstr8dbpggTJ41VSfbEPe
x6QHKdu2XBP0eB+GXSmdiNRERQQlJ4npFwoKVxhbsBevW3haBr0bv7YSwdh+P1t4
lp/CB9YlJMGzl3DnhDcpcD7QNDJVO7h56WlGTutij8LJSJR/J76IiCtNoYVk7U8y
YxNWbaXKSfD2scNlFioyBSLcW6BTcOrtN1abUlmyvX277LIUuKzMXCU8Ln56/iO5
AHyE0SlG0bK89J2dACB1nuT41otnhkT0QefdUS+55vqDkguUFg==
-----END CERTIFICATE-----
Generated at Wed Feb 28 03:59:26 2024 by rpki-client on console-fra.rpki-client.org