Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/53406FE8E29611EE8EF08352C4F9AE02.roa
File: 53406FE8E29611EE8EF08352C4F9AE02.roa (raw, json)
Hash identifier: +hzo0W2FKYj3XMrQMFZefdqvamrnWcJ6dHsXyD7rXUc=
Subject key identifier: D1:A0:CF:B1:E2:72:0A:86:15:A4:F4:AD:31:04:C9:83:89:41:C2:3D
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 34B0
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/53406FE8E29611EE8EF08352C4F9AE02.roa
Signing time: Fri 15 Mar 2024 06:37:53 +0000
ROA not before: Fri 15 Mar 2024 06:37:53 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 140045
IP address blocks: 116.90.116.0/24 maxlen: 24
116.90.117.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 10:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13488 (0x34b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Mar 15 06:37:53 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65f3ecc1-1723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:1c:48:29:97:8d:f3:85:44:e6:8a:ce:90:
98:37:3f:0e:4d:85:08:ad:91:00:3a:ad:c3:04:19:
89:c7:e4:24:c4:46:36:96:e9:8b:65:34:29:ea:09:
8e:94:e0:3a:dd:10:41:a5:c7:8e:99:a9:ed:20:1b:
30:5e:3a:72:1c:d5:f7:a9:dd:7d:7d:67:a6:d3:33:
48:4b:45:4f:fb:64:e5:f9:78:d1:1f:ee:fa:c4:5f:
2e:e3:8a:95:68:e4:65:c2:77:e6:4d:c2:be:06:98:
b8:5c:4e:ca:0e:4b:24:0d:86:50:7f:59:5d:df:4e:
24:88:41:1e:52:43:5a:c0:4e:98:4c:15:5a:7a:20:
cc:8e:92:11:67:67:7a:66:53:25:ee:d8:66:ed:e8:
24:c8:aa:a8:fe:92:98:e6:7e:70:69:2a:26:c8:5f:
da:fa:ed:a9:c6:88:ba:85:4d:d4:8c:2b:03:c1:49:
88:3a:04:94:f9:10:01:78:5a:b5:38:d5:b0:d9:7e:
46:21:12:4a:08:9c:f5:6e:6c:17:fd:39:02:23:b2:
67:48:89:17:a4:82:84:ba:91:12:af:23:2e:eb:f7:
fe:4c:b8:93:5f:8f:09:a4:f8:7b:2e:88:fb:9b:2e:
70:8c:7c:34:bd:f5:46:82:a5:90:d9:bb:d8:12:f5:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A0:CF:B1:E2:72:0A:86:15:A4:F4:AD:31:04:C9:83:89:41:C2:3D
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/53406FE8E29611EE8EF08352C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.116.0/23
121.46.66.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ad:8e:0d:6a:95:cc:16:5c:bc:6b:bb:75:3d:f2:d7:ca:44:
62:f1:1e:ba:50:89:fe:65:14:e0:46:78:d0:57:c0:06:c4:d1:
9f:92:2e:1d:09:5e:56:9b:2e:84:43:cf:da:03:81:17:5e:a6:
52:2f:b7:b9:39:ab:42:83:98:44:00:9a:95:9a:97:25:47:dc:
80:ef:0e:ef:e7:9f:f5:a3:a7:eb:aa:d5:1d:63:f7:0a:be:03:
38:12:3b:52:a3:10:c7:27:4d:b9:69:bd:53:54:3e:95:07:8d:
00:ef:28:d8:13:a0:07:10:d1:3b:b7:24:23:f1:18:da:55:02:
24:66:bd:33:d0:2f:5f:09:2b:2d:d0:32:80:23:2f:8d:45:ad:
13:2a:36:4c:9b:a3:e1:be:29:34:ba:e8:b1:53:49:68:95:c4:
67:66:fd:eb:11:8f:73:eb:17:94:e7:e8:bd:fc:32:f2:2b:15:
03:77:9f:9b:ac:17:02:7c:8c:7c:94:11:d5:ba:5a:34:84:46:
9c:c8:3e:12:cc:f7:41:67:51:9f:9d:a1:5d:08:41:df:a4:93:
7d:ce:85:09:77:b6:d0:37:0d:d8:e1:b5:53:53:27:e1:36:8f:
fa:6c:da:df:08:8e:59:92:4f:ba:a8:31:fa:20:ba:90:77:00:
cf:40:bd:50
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjQwMzE1MDYzNzUzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWYzZWNjMS0xNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplYcSCmXjfOFROaKzpCYNz8OTYUIrZEAOq3DBBmJx+QkxEY2lumLZTQp6gmO
lOA63RBBpceOmantIBswXjpyHNX3qd19fWem0zNIS0VP+2Tl+XjRH+76xF8u44qV
aORlwnfmTcK+Bpi4XE7KDkskDYZQf1ld304kiEEeUkNawE6YTBVaeiDMjpIRZ2d6
ZlMl7thm7egkyKqo/pKY5n5waSomyF/a+u2pxoi6hU3UjCsDwUmIOgSU+RABeFq1
ONWw2X5GIRJKCJz1bmwX/TkCI7JnSIkXpIKEupESryMu6/f+TLiTX48JpPh7Loj7
my5wjHw0vfVGgqWQ2bvYEvWznwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNGgz7Hi
cgqGFaT0rTEEyYOJQcI9MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNTM0MDZGRThF
Mjk2MTFFRThFRjA4MzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAF0WnQDBAB5LkIwDQYJKoZIhvcNAQELBQADggEBAHCtjg1q
lcwWXLxru3U98tfKRGLxHrpQif5lFOBGeNBXwAbE0Z+SLh0JXlabLoRDz9oDgRde
plIvt7k5q0KDmEQAmpWalyVH3IDvDu/nn/Wjp+uq1R1j9wq+AzgSO1KjEMcnTblp
vVNUPpUHjQDvKNgToAcQ0Tu3JCPxGNpVAiRmvTPQL18JKy3QMoAjL41FrRMqNkyb
o+G+KTS66LFTSWiVxGdm/esRj3PrF5Tn6L38MvIrFQN3n5usFwJ8jHyUEdW6WjSE
RpzIPhLM90FnUZ+doV0IQd+kk33OhQl3ttA3DdjhtVNTJ+E2j/ps2t8IjlmST7qo
MfogupB3AM9AvVA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org