Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/0AC20CE6846211EEBA443743C4F9AE02.roa
File: 0AC20CE6846211EEBA443743C4F9AE02.roa (raw, json)
Hash identifier: rv72Trp1M9sOMYFTdfdO3GhHKXPmNakVFilLusve43o=
Subject key identifier: 13:7C:A8:A1:0A:9C:5C:4F:E2:3D:22:23:4D:6F:08:85:D6:24:0D:F1
Certificate issuer: /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8
Certificate serial: 0482
Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/0AC20CE6846211EEBA443743C4F9AE02.roa
Signing time: Wed 31 Jul 2024 01:03:01 +0000
ROA not before: Wed 31 Jul 2024 01:03:01 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133448
IP address blocks: 103.140.150.0/23 maxlen: 23
103.140.150.0/24 maxlen: 24
103.140.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Oct 2024 03:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8
Validity
Not Before: Jul 31 01:03:01 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a98d45-2567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:0d:84:75:ed:a5:64:e5:2c:35:56:36:45:
46:2b:dd:35:22:8d:62:8a:3d:40:d5:d6:ee:d4:9d:
8f:a3:fb:db:7b:9f:69:80:0b:03:4a:2d:a4:bb:40:
ae:1e:2f:b0:dd:ae:25:0e:a6:82:22:8f:2b:63:79:
c0:bf:38:d2:ed:29:04:99:06:8a:86:30:b1:69:ab:
33:22:87:ec:9e:81:d9:ef:a5:d3:80:c1:72:72:9a:
57:28:a0:b2:c9:18:10:63:24:c5:64:78:19:db:bf:
1c:6e:f3:39:76:e6:c7:6e:b1:8e:28:14:26:9e:b2:
19:56:36:3f:7c:1a:ab:95:87:f7:d1:eb:38:2a:88:
0c:48:44:7f:55:66:f4:99:30:50:9a:dc:db:57:41:
28:fc:10:dd:e5:ba:b0:9d:ff:85:cf:d6:99:9a:43:
f7:bb:82:09:94:54:e7:6e:22:28:eb:30:ed:f7:4e:
6f:22:c3:eb:3f:6c:5e:31:58:34:eb:2e:8f:71:b1:
e7:05:18:70:01:9c:f3:20:f8:11:ef:5f:f4:f1:a4:
53:cc:e9:bb:84:35:5b:0f:8b:d2:27:7c:37:9e:6e:
1d:42:61:9b:c2:19:1a:3c:89:f4:c0:a1:0f:ec:e1:
95:0f:9f:3f:15:20:6a:8a:b7:58:c0:99:b6:f8:8a:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7C:A8:A1:0A:9C:5C:4F:E2:3D:22:23:4D:6F:08:85:D6:24:0D:F1
X509v3 Authority Key Identifier:
keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/0AC20CE6846211EEBA443743C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.150.0/23
Signature Algorithm: sha256WithRSAEncryption
69:a9:fd:92:61:68:13:67:ee:c8:c6:80:b3:76:2f:e5:96:ca:
58:b0:d4:c1:6e:cf:92:16:4d:ee:bf:76:31:b6:66:50:c9:cf:
38:50:87:88:5f:8d:b1:76:83:f7:38:06:7e:f0:e5:f3:30:75:
dd:6d:f9:de:d3:6a:cb:e5:98:5a:38:c8:e2:5a:6f:8b:0e:2c:
10:ad:6b:7b:6f:b4:80:c4:90:76:b6:79:d3:75:2c:ce:52:96:
88:c8:f2:73:16:3b:66:7f:cd:c8:06:f5:71:53:c0:e4:8f:14:
da:88:54:5a:d5:c9:0b:3b:db:e2:71:f7:1d:18:46:a4:ff:72:
8f:1e:86:44:66:84:0a:66:3f:6e:b3:21:72:0a:c2:4a:dc:c7:
77:6a:01:8b:f7:b8:7f:ef:12:f8:77:e9:fb:12:af:17:9a:0f:
f3:9a:e8:7c:26:c9:25:9f:c8:ce:d5:88:52:25:b0:02:fb:37:
27:08:4c:fe:48:ec:fb:f8:19:04:18:9b:cf:94:3b:31:6b:db:
d3:3b:e3:9d:33:49:f5:1d:99:49:96:c5:4e:47:e3:4a:e9:55:
5e:c1:4a:36:8e:f6:25:ca:31:43:93:86:eb:36:f4:17:e0:36:
c8:5a:16:e4:d1:57:36:10:b7:c4:89:1e:d2:ff:ae:24:c0:19:
fb:60:21:83
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI0NkExMTAvBgNVBAUTKDFDMkU5OUZFNjFBNEZCNkZBMjg2NzM1RjhFMDY5MTk4
MzZBNDBGRjgwHhcNMjQwNzMxMDEwMzAxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5OGQ0NS0yNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IwNhHXtpWTlLDVWNkVGK901Io1iij1A1dbu1J2Po/vbe59pgAsDSi2ku0Cu
Hi+w3a4lDqaCIo8rY3nAvzjS7SkEmQaKhjCxaaszIofsnoHZ76XTgMFycppXKKCy
yRgQYyTFZHgZ278cbvM5dubHbrGOKBQmnrIZVjY/fBqrlYf30es4KogMSER/VWb0
mTBQmtzbV0Eo/BDd5bqwnf+Fz9aZmkP3u4IJlFTnbiIo6zDt905vIsPrP2xeMVg0
6y6PcbHnBRhwAZzzIPgR71/08aRTzOm7hDVbD4vSJ3w3nm4dQmGbwhkaPIn0wKEP
7OGVD58/FSBqirdYwJm2+Ipo2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBN8qKEK
nFxP4j0iI01vCIXWJA3xMB8GA1UdIwQYMBaAFBwumf5hpPtvooZzX44GkZg2pA/4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQ2QS82OUMyRDM1MDA1
NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0yLWlobk5mamdhUm1EYWtE
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hDNlpfbUdrLTItaWhuTmZqZ2FSbURha0RfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI0NkEvNjlDMkQzNTAwNTcxMTFFQzk0QTJFQzJDQzRGOUFFMDIvMEFDMjBDRTY4
NDYyMTFFRUJBNDQzNzQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjJYwDQYJKoZIhvcNAQELBQADggEBAGmp/ZJhaBNn7sjG
gLN2L+WWyliw1MFuz5IWTe6/djG2ZlDJzzhQh4hfjbF2g/c4Bn7w5fMwdd1t+d7T
asvlmFo4yOJab4sOLBCta3tvtIDEkHa2edN1LM5SlojI8nMWO2Z/zcgG9XFTwOSP
FNqIVFrVyQs72+Jx9x0YRqT/co8ehkRmhApmP26zIXIKwkrcx3dqAYv3uH/vEvh3
6fsSrxeaD/Oa6HwmySWfyM7ViFIlsAL7NycITP5I7Pv4GQQYm8+UOzFr29M7450z
SfUdmUmWxU5H40rpVV7BSjaO9iXKMUOThus29BfgNshaFuTRVzYQt8SJHtL/riTA
GftgIYM=
-----END CERTIFICATE-----
Generated at Sun Oct 13 06:52:57 2024 by rpki-client on console-ams.rpki-client.org