Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/917FD7F8999311EA9369A12CC4F9AE02.roa
File: 917FD7F8999311EA9369A12CC4F9AE02.roa (raw, json)
Hash identifier: 2nCU6LUjdvZuTdvU9/25bSUbcsKjzsJ9oimbtYXkC+Y=
Subject key identifier: 18:1E:42:19:CB:47:D1:F2:1E:9C:FA:17:8A:6B:78:19:2A:6A:6E:CE
Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Certificate serial: 0F1E
Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/917FD7F8999311EA9369A12CC4F9AE02.roa
Signing time: Mon 02 Sep 2024 18:26:01 +0000
ROA not before: Mon 02 Sep 2024 18:26:01 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 132168
IP address blocks: 45.114.236.0/22 maxlen: 24
103.71.24.0/24 maxlen: 24
103.90.51.0/24 maxlen: 24
103.90.56.0/23 maxlen: 24
2401:d640::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Nov 2024 02:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3870 (0xf1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Validity
Not Before: Sep 2 18:26:01 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d60339-3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:24:ca:c8:73:89:da:c2:95:36:68:74:f7:
3c:8b:f4:ef:3f:ba:30:35:4c:23:19:f2:47:6d:bd:
6c:a5:d5:19:0b:f9:29:1f:0a:f7:6c:33:32:73:e7:
04:9b:b2:29:c0:b5:e4:9f:2d:c2:d1:7d:21:d2:f2:
f4:c8:17:d3:2e:6d:83:45:ad:10:3d:ac:01:9a:1c:
de:85:31:bd:97:c7:ab:70:a5:21:0b:f1:cd:73:d0:
9d:10:04:8d:22:08:86:02:e6:9a:23:b0:24:c1:33:
b5:48:a7:07:ac:19:c7:a3:3e:25:83:bc:73:e4:21:
35:a5:ac:7a:d2:2d:e1:a7:5c:ae:f5:07:87:81:44:
c4:88:00:70:0c:26:f8:89:bf:85:c0:40:3e:4e:52:
55:49:d1:55:bb:86:b9:30:24:0d:d9:81:65:84:7a:
ac:91:08:aa:12:e9:25:7e:70:d5:eb:85:3a:5b:fc:
d8:dd:21:4a:f3:e2:a0:26:c9:b3:66:86:dd:b7:f6:
a0:04:c4:92:2b:d3:07:85:d6:87:f8:25:27:b7:a7:
57:da:dd:76:cb:fd:8d:63:ea:f5:84:ad:b1:6c:23:
b9:51:2d:61:e9:d6:18:da:be:38:40:a2:3b:91:98:
54:da:de:4d:a1:c0:0e:90:0f:4d:67:ab:b6:04:1d:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:42:19:CB:47:D1:F2:1E:9C:FA:17:8A:6B:78:19:2A:6A:6E:CE
X509v3 Authority Key Identifier:
keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/917FD7F8999311EA9369A12CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.236.0/22
103.71.24.0/24
103.90.51.0/24
103.90.56.0/23
IPv6:
2401:d640::/32
Signature Algorithm: sha256WithRSAEncryption
05:69:49:b0:16:2a:8f:04:a6:d0:97:bf:1b:b2:d5:60:ab:fc:
7d:f5:85:74:f4:a3:ff:5c:84:14:08:e3:24:ce:fe:77:43:d2:
17:c5:b9:91:06:87:e8:42:d9:43:37:ce:aa:1c:81:b9:99:91:
4e:15:b0:66:fe:37:f4:ef:51:4f:a1:06:01:08:05:f9:14:eb:
6b:9e:6d:68:d6:9b:cc:be:c7:c3:9a:21:7d:67:8d:07:64:1e:
cd:92:20:64:1b:11:10:29:02:fb:48:4c:cf:b6:b7:6b:34:b6:
6c:67:09:7f:18:45:e9:62:bc:16:82:ab:ab:a4:b7:0c:3b:49:
2f:ba:a2:2e:60:3f:58:1f:7c:f3:d6:45:ae:43:9b:58:e6:bf:
cb:20:6b:de:74:be:e9:f8:dc:1c:d4:e5:e3:b3:30:8c:2d:49:
60:73:98:7d:75:9c:9a:0f:5c:e1:53:f8:ff:59:58:03:a2:fa:
55:0f:96:2e:20:df:53:f9:71:9f:85:ef:a1:03:c1:29:dc:37:
b8:05:d6:87:3c:0f:89:4d:d0:f4:0b:30:05:e2:c5:01:7e:42:
fa:da:94:3a:55:73:62:90:c6:88:e1:96:3b:52:4f:18:fc:d6:
16:21:7b:c1:ba:51:93:9b:7b:b9:7f:c9:30:99:b9:8e:d1:2e:
a6:43:95:4e
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICDx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0
MDQ5MzgwMEYwHhcNMjQwOTAyMTgyNjAxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2MDMzOS0zYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9wkyshzidrClTZodPc8i/TvP7owNUwjGfJHbb1spdUZC/kpHwr3bDMyc+cE
m7IpwLXkny3C0X0h0vL0yBfTLm2DRa0QPawBmhzehTG9l8ercKUhC/HNc9CdEASN
IgiGAuaaI7AkwTO1SKcHrBnHoz4lg7xz5CE1pax60i3hp1yu9QeHgUTEiABwDCb4
ib+FwEA+TlJVSdFVu4a5MCQN2YFlhHqskQiqEuklfnDV64U6W/zY3SFK8+KgJsmz
Zobdt/agBMSSK9MHhdaH+CUnt6dX2t12y/2NY+r1hK2xbCO5US1h6dYY2r44QKI7
kZhU2t5NocAOkA9NZ6u2BB2I6wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBgeQhnL
R9HyHpz6F4preBkqam7OMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx
MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY3RDEvNkNCQzlCNDA2MTFEMTFFOUIwMTJEQjM3QzRGOUFFMDIvOTE3RkQ3Rjg5
OTkzMTFFQTkzNjlBMTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAItcuwDBABnRxgDBABnWjMDBAFnWjgwDQQCAAIwBwMFACQB
1kAwDQYJKoZIhvcNAQELBQADggEBAAVpSbAWKo8EptCXvxuy1WCr/H31hXT0o/9c
hBQI4yTO/ndD0hfFuZEGh+hC2UM3zqocgbmZkU4VsGb+N/TvUU+hBgEIBfkU62ue
bWjWm8y+x8OaIX1njQdkHs2SIGQbERApAvtITM+2t2s0tmxnCX8YRelivBaCq6uk
tww7SS+6oi5gP1gffPPWRa5Dm1jmv8sga950vun43BzU5eOzMIwtSWBzmH11nJoP
XOFT+P9ZWAOi+lUPli4g31P5cZ+F76EDwSncN7gF1oc8D4lN0PQLMAXixQF+Qvra
lDpVc2KQxojhljtSTxj81hYhe8G6UZObe7l/yTCZuY7RLqZDlU4=
-----END CERTIFICATE-----
Generated at Wed Nov 6 06:42:29 2024 by rpki-client on console-fra.rpki-client.org