Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/B96FB7001E3F11ED946B8D34C4F9AE02.roa
File: B96FB7001E3F11ED946B8D34C4F9AE02.roa (raw, json)
Hash identifier: saBBgb28uQ7WPrnjL3F7+yBXrvWlivtT8H6QZZMUBOI=
Subject key identifier: 82:03:CF:97:47:8B:3B:3F:10:B0:EB:75:02:19:75:27:67:11:48:7D
Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial: 08B5
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/B96FB7001E3F11ED946B8D34C4F9AE02.roa
Signing time: Tue 02 May 2023 22:18:55 +0000
ROA not before: Tue 02 May 2023 22:18:54 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 149010
IP address blocks: 103.148.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Validity
Not Before: May 2 22:18:54 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64518c4e-fa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:2f:bb:39:47:2c:59:6a:be:87:54:5d:87:
a7:ff:8b:6d:47:68:ac:8d:bb:fd:09:8e:82:e4:62:
c1:0e:d4:9f:62:5a:fb:40:98:0a:eb:7f:28:fb:b9:
0b:37:6b:1c:23:42:e2:cc:24:a8:a2:75:07:e4:e9:
e7:c5:5c:60:12:a4:2f:69:50:8a:23:f0:55:97:79:
3f:18:eb:ce:45:b6:c6:3e:8b:4e:e6:3b:16:b0:2a:
fe:45:de:95:cc:67:4c:f2:43:0f:58:fb:33:86:4f:
95:6c:0f:05:d6:cf:f2:d6:a3:4f:aa:55:a2:1f:b7:
ba:aa:21:33:6a:1a:b4:b7:9e:69:05:1e:7d:e9:ee:
25:dd:c7:3d:25:62:81:dc:71:90:45:cd:c2:93:c3:
1f:ef:3c:93:13:07:c5:42:c2:c8:3c:e2:a1:7b:2e:
b6:1b:54:74:40:d9:29:2f:6d:65:b6:e0:e7:ad:84:
28:a1:f4:03:c1:5d:f7:da:c0:ac:c7:74:47:fb:e2:
a9:c7:5c:9f:3c:ff:9f:91:de:91:a7:0e:01:d9:85:
a0:d0:95:ab:75:80:26:e7:d2:f7:29:48:fc:c5:d0:
03:7a:12:bd:40:b7:8d:af:13:14:4e:94:32:67:92:
ed:3d:35:51:d5:0b:35:a3:da:65:ee:6d:72:21:3d:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:CF:97:47:8B:3B:3F:10:B0:EB:75:02:19:75:27:67:11:48:7D
X509v3 Authority Key Identifier:
keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/B96FB7001E3F11ED946B8D34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:39:ba:04:63:e9:63:c8:a6:bb:97:89:00:37:70:c0:be:7e:
46:c3:0c:40:ff:23:f5:3a:c0:71:72:5c:06:16:2b:22:52:aa:
a0:e4:f7:b5:8e:38:05:82:9e:b2:f6:6e:89:7f:26:ce:0f:59:
68:cb:44:5e:6c:ef:fd:62:17:ec:82:80:80:61:30:dc:1b:46:
db:41:1d:25:2d:93:56:14:b4:ca:8d:e5:43:48:ad:ff:d5:06:
83:95:0c:88:7b:5b:3b:9a:4a:e3:10:14:16:e5:38:1b:55:27:
8a:09:8d:33:fb:85:e6:66:6c:48:ec:ad:bb:24:61:f0:ef:2f:
ef:c1:60:6d:57:47:67:5b:27:dd:6c:34:b2:59:5f:0d:f6:be:
4f:83:2c:3a:34:64:53:cc:ae:3f:5e:94:f7:d0:12:c4:0b:ac:
b1:44:d2:70:83:54:ec:3b:39:92:5f:df:39:71:fc:67:5b:7e:
a2:82:d6:4c:b1:64:ce:60:ab:92:04:2d:22:a5:4d:60:b9:d9:
74:32:8b:4e:5d:43:34:7f:64:cd:1b:d2:41:40:5a:6e:c4:ea:
38:ea:c0:b8:ba:d2:2e:69:dc:48:48:d9:41:5a:58:a8:8f:f9:
36:93:43:1d:5f:ec:a0:d3:24:07:69:57:cf:de:f4:4a:a4:af:
b4:b8:2f:89
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD
NkI2NzkzNUEwHhcNMjMwNTAyMjIxODU0WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxOGM0ZS1mYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/AvuzlHLFlqvodUXYen/4ttR2isjbv9CY6C5GLBDtSfYlr7QJgK638o+7kL
N2scI0LizCSoonUH5OnnxVxgEqQvaVCKI/BVl3k/GOvORbbGPotO5jsWsCr+Rd6V
zGdM8kMPWPszhk+VbA8F1s/y1qNPqlWiH7e6qiEzahq0t55pBR596e4l3cc9JWKB
3HGQRc3Ck8Mf7zyTEwfFQsLIPOKhey62G1R0QNkpL21ltuDnrYQoofQDwV332sCs
x3RH++Kpx1yfPP+fkd6Rpw4B2YWg0JWrdYAm59L3KUj8xdADehK9QLeNrxMUTpQy
Z5LtPTVR1Qs1o9pl7m1yIT2FaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIIDz5dH
izs/ELDrdQIZdSdnEUh9MB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF
NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDFBQzcvODFBNEM0RDY2RTQzMTFFQTk0OUQ5OTIyQzRGOUFFMDIvQjk2RkI3MDAx
RTNGMTFFRDk0NkI4RDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlPMwDQYJKoZIhvcNAQELBQADggEBAKg5ugRj6WPIpruX
iQA3cMC+fkbDDED/I/U6wHFyXAYWKyJSqqDk97WOOAWCnrL2bol/Js4PWWjLRF5s
7/1iF+yCgIBhMNwbRttBHSUtk1YUtMqN5UNIrf/VBoOVDIh7WzuaSuMQFBblOBtV
J4oJjTP7heZmbEjsrbskYfDvL+/BYG1XR2dbJ91sNLJZXw32vk+DLDo0ZFPMrj9e
lPfQEsQLrLFE0nCDVOw7OZJf3zlx/GdbfqKC1kyxZM5gq5IELSKlTWC52XQyi05d
QzR/ZM0b0kFAWm7E6jjqwLi60i5p3EhI2UFaWKiP+TaTQx1f7KDTJAdpV8/e9Eqk
r7S4L4k=
-----END CERTIFICATE-----
Generated at Thu Oct 12 02:36:37 2023 by rpki-client on console-ams.rpki-client.org