Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/436C2FB8EF1B11ED9D942431C4F9AE02.roa
File: 436C2FB8EF1B11ED9D942431C4F9AE02.roa (raw, json)
Hash identifier: ikCCNgu/8QBO2Z5euwin6BCV7+BM8WBcNoKA+fP4pL0=
Subject key identifier: F3:69:87:3C:05:96:BB:4D:2F:56:D5:FD:E5:1D:CC:5D:4A:41:4E:CA
Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial: 20E2
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/436C2FB8EF1B11ED9D942431C4F9AE02.roa
Signing time: Fri 22 Mar 2024 04:19:30 +0000
ROA not before: Fri 22 Mar 2024 04:19:30 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 55915
IP address blocks: 43.231.208.0/22 maxlen: 24
45.64.160.0/22 maxlen: 24
45.123.220.0/22 maxlen: 24
49.236.212.0/22 maxlen: 24
103.1.92.0/22 maxlen: 24
103.51.16.0/22 maxlen: 24
103.192.76.0/22 maxlen: 24
202.94.66.0/24 maxlen: 24
2407:5200::/32 maxlen: 32
2407:5200:1::/48 maxlen: 48
2407:5200:32::/48 maxlen: 48
2407:5200:48::/48 maxlen: 48
2407:5200:49::/48 maxlen: 48
2407:5200:4c::/46 maxlen: 48
2407:5200:50::/46 maxlen: 48
2407:5200:200::/46 maxlen: 48
2407:5200:204::/46 maxlen: 48
2407:5200:300::/46 maxlen: 48
2407:5200:400::/46 maxlen: 48
2407:5200:600::/46 maxlen: 48
2407:5200:1000::/40 maxlen: 48
2407:5200:1200::/40 maxlen: 48
2407:5200:1300::/40 maxlen: 48
2407:5200:1500::/40 maxlen: 40
2407:5200:4920::/46 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Mar 2024 10:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8418 (0x20e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Validity
Not Before: Mar 22 04:19:30 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65fd06d2-928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:24:29:f0:c7:43:6e:20:ff:4e:67:9c:9f:
e4:bc:4b:82:54:f5:0c:24:76:4d:5c:7b:f8:15:8d:
38:58:12:01:de:ad:1a:80:6b:7e:a4:b1:09:a6:04:
ff:e5:d3:29:ba:7c:0e:74:23:f5:f6:56:e0:86:21:
f4:2b:56:6a:f4:ee:60:cf:a8:d3:1c:1d:49:0d:2b:
47:e0:d9:b1:e5:83:b7:14:e5:6e:87:b2:1f:9f:49:
5f:45:0c:20:b8:1b:e9:1f:5d:71:0e:10:62:98:19:
bc:64:79:34:1d:c4:6b:b8:64:80:33:6a:a4:e2:04:
04:4f:4b:db:67:96:03:db:8f:61:38:27:a4:75:09:
73:95:8c:c1:56:61:dc:67:8d:6b:11:5c:3b:3b:38:
b5:41:c2:24:eb:6d:1f:18:23:b6:34:ab:8f:23:10:
a4:fb:c5:a1:98:b9:d8:72:76:bf:33:18:ce:0b:f4:
b7:77:9d:a0:5c:ed:1a:fb:ac:cd:cf:56:34:7d:0e:
fa:91:90:1a:53:a8:1a:ab:2d:7a:ed:c5:44:0f:72:
7a:94:69:21:c1:bd:77:e5:e4:77:9b:dc:08:f6:d3:
e0:d0:09:89:fc:a4:c7:0e:44:b4:20:05:c3:29:cb:
1d:f6:53:ca:0d:4d:89:4f:01:ad:a1:95:bc:76:5e:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:87:3C:05:96:BB:4D:2F:56:D5:FD:E5:1D:CC:5D:4A:41:4E:CA
X509v3 Authority Key Identifier:
keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/436C2FB8EF1B11ED9D942431C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.208.0/22
45.64.160.0/22
45.123.220.0/22
49.236.212.0/22
103.1.92.0/22
103.51.16.0/22
103.192.76.0/22
202.94.66.0/24
IPv6:
2407:5200::/32
Signature Algorithm: sha256WithRSAEncryption
34:3b:83:af:81:3e:cf:23:25:fb:56:00:15:2a:90:78:d6:7b:
72:6d:63:94:59:16:54:ec:91:0b:34:9a:61:e5:47:9d:56:20:
83:4d:2c:36:85:ec:21:29:49:b3:33:7c:fc:d0:5a:66:e8:11:
b8:1f:93:58:c8:2a:c2:e1:87:fa:30:f9:d0:f9:49:b0:8e:37:
43:35:59:eb:ff:eb:09:8e:fb:ae:6c:8c:98:30:60:ca:35:cd:
fb:4a:45:ec:bc:ba:95:58:79:20:80:09:f2:19:3c:ed:cb:ed:
4c:a0:35:1d:d3:52:1a:62:16:1d:5b:c7:66:12:a4:c4:71:c2:
36:9f:9e:31:76:31:02:09:ac:ec:fd:25:6d:f4:c0:a1:47:be:
2d:59:45:8f:e1:2f:22:07:00:d8:27:01:8e:a2:d7:a6:4d:25:
5c:f0:e9:26:91:68:44:e4:3c:35:d5:57:dc:67:f9:47:e0:22:
29:cb:0f:1d:79:78:46:78:9f:27:41:2b:59:47:45:a2:42:d8:
6f:3b:9a:39:91:d6:86:62:63:73:17:7f:de:89:80:e7:d0:b1:
66:2c:33:23:f9:e7:b6:4e:18:14:80:27:2c:fc:85:71:60:3e:
ca:06:09:ba:53:e0:fe:b0:a2:e0:42:31:f1:46:ca:5d:d3:1a:
b2:fe:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 12:46:35 2024 by rpki-client on console-ams.rpki-client.org