Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/95739D2EB35F11EE9F1AE83EC4F9AE02.roa
File: 95739D2EB35F11EE9F1AE83EC4F9AE02.roa (raw, json)
Hash identifier: 6zLGN36NBQQNLuIDmbtI228vtnkr7oIStcx8yaPuYEc=
Subject key identifier: FF:29:AC:B7:F0:7F:17:45:AD:B3:C4:8D:BB:88:2F:B3:89:B0:BB:C6
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 05D1
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/95739D2EB35F11EE9F1AE83EC4F9AE02.roa
Signing time: Mon 15 Jan 2024 04:36:01 +0000
ROA not before: Mon 15 Jan 2024 04:36:01 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 21859
IP address blocks: 43.251.116.0/24 maxlen: 24
43.251.117.0/24 maxlen: 24
103.42.180.0/24 maxlen: 24
103.42.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 02:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Jan 15 04:36:01 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65a4b630-33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:e9:15:f0:28:06:d0:76:07:50:47:61:36:
8b:9f:e0:fa:f9:78:61:27:ca:f2:eb:f7:2e:d1:57:
14:ec:80:4e:71:b7:2d:9c:f7:75:b0:bd:d2:73:e5:
6c:02:49:5a:06:13:34:bc:cc:a7:33:c1:62:d6:6e:
0d:48:60:2c:02:71:19:50:8b:54:cf:73:59:83:a7:
a3:7f:95:33:62:72:e8:00:64:5d:49:6b:b7:f9:ef:
cd:75:d3:c9:69:77:ff:af:15:3a:62:f3:66:28:2b:
39:0b:74:b5:03:b6:56:0c:61:57:4c:f9:ba:ca:61:
57:f8:19:ff:0e:3a:e9:c2:0b:7a:40:bf:ae:b3:c1:
9f:ff:2f:10:b5:fa:5d:92:63:b1:47:06:25:8f:5d:
60:7e:a3:43:48:85:90:da:86:e1:e2:2d:ea:1d:a2:
65:4b:b7:2d:6f:39:7f:a0:b8:57:07:63:2d:81:5c:
ba:ed:e8:4e:51:08:79:f4:59:85:f2:cf:89:15:53:
9a:a5:84:38:8f:43:d9:69:93:72:bb:5a:f1:1c:e8:
92:cf:c8:1b:ba:51:7c:fa:df:ba:a8:9a:b3:09:92:
f4:dd:7e:fd:98:e5:c3:e6:7c:44:80:58:80:91:60:
d7:6a:76:b8:55:61:dc:3f:9e:c0:ec:b2:9d:7b:99:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:AC:B7:F0:7F:17:45:AD:B3:C4:8D:BB:88:2F:B3:89:B0:BB:C6
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/95739D2EB35F11EE9F1AE83EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.116.0/23
103.42.180.0/23
Signature Algorithm: sha256WithRSAEncryption
03:5f:9f:9a:9a:f5:94:0a:ec:c6:22:70:37:3d:52:94:f8:96:
56:1c:73:74:1a:25:c4:1c:73:ed:55:af:15:35:90:b3:a8:d7:
54:21:73:1a:5e:d1:fb:49:f0:ab:a7:52:f4:cc:e4:28:e1:fd:
02:bb:f9:88:fd:b9:41:dc:f2:58:16:fd:cb:28:92:cf:82:a9:
8f:12:82:1f:5b:e2:4b:cf:c5:42:17:66:6f:82:b8:7e:95:20:
ca:07:d8:0d:d6:ab:41:b9:bf:b2:15:2c:6d:eb:66:a9:4b:5d:
53:e6:71:f6:32:3c:a1:ec:29:69:54:6e:a7:14:96:ef:ff:01:
3b:a6:2f:21:1e:f6:74:3e:55:b5:21:56:9f:c0:27:a7:f4:71:
c4:c4:94:7e:5d:4d:ab:48:9c:d1:67:42:f2:05:9b:42:4b:c7:
97:8e:52:a1:89:9a:a2:84:2c:04:26:66:88:e2:05:4c:b7:bc:
2c:1a:49:15:ef:7d:37:d7:5a:78:3e:f0:f6:ce:ac:f8:c6:dd:
e0:39:57:e9:0d:c5:5a:4c:57:d7:c4:2a:69:95:9c:23:8d:45:
1c:0f:98:dc:c2:5a:d8:c9:0e:2c:d4:c0:9c:f1:ec:85:13:71:
d9:18:13:43:fb:3e:78:28:6b:17:06:5f:54:aa:93:f2:94:1e:
2e:90:3a:c9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz
MzJEQTQzQ0IwHhcNMjQwMTE1MDQzNjAxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWE0YjYzMC0zM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoTbpFfAoBtB2B1BHYTaLn+D6+XhhJ8ry6/cu0VcU7IBOcbctnPd1sL3Sc+Vs
AklaBhM0vMynM8Fi1m4NSGAsAnEZUItUz3NZg6ejf5UzYnLoAGRdSWu3+e/NddPJ
aXf/rxU6YvNmKCs5C3S1A7ZWDGFXTPm6ymFX+Bn/Djrpwgt6QL+us8Gf/y8Qtfpd
kmOxRwYlj11gfqNDSIWQ2obh4i3qHaJlS7ctbzl/oLhXB2MtgVy67ehOUQh59FmF
8s+JFVOapYQ4j0PZaZNyu1rxHOiSz8gbulF8+t+6qJqzCZL03X79mOXD5nxEgFiA
kWDXana4VWHcP57A7LKde5kQ3wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP8prLfw
fxdFrbPEjbuIL7OJsLvGMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG
QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvOTU3MzlEMkVC
MzVGMTFFRTlGMUFFODNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAEr+3QDBAFnKrQwDQYJKoZIhvcNAQELBQADggEBAANfn5qa
9ZQK7MYicDc9UpT4llYcc3QaJcQcc+1VrxU1kLOo11Qhcxpe0ftJ8KunUvTM5Cjh
/QK7+Yj9uUHc8lgW/csoks+CqY8Sgh9b4kvPxUIXZm+CuH6VIMoH2A3Wq0G5v7IV
LG3rZqlLXVPmcfYyPKHsKWlUbqcUlu//ATumLyEe9nQ+VbUhVp/AJ6f0ccTElH5d
TatInNFnQvIFm0JLx5eOUqGJmqKELAQmZojiBUy3vCwaSRXvfTfXWng+8PbOrPjG
3eA5V+kNxVpMV9fEKmmVnCONRRwPmNzCWtjJDizUwJzx7IUTcdkYE0P7PngoaxcG
X1Sqk/KUHi6QOsk=
-----END CERTIFICATE-----
Generated at Fri Sep 27 03:59:55 2024 by rpki-client on console-fra.rpki-client.org