Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/9CC42296428511EFBD8E2A53C4F9AE02.roa
File: 9CC42296428511EFBD8E2A53C4F9AE02.roa (raw, json)
Hash identifier: jMaLl/J0XDNIs/k0v6c+QGeWosuQfCaLhysurl6ammw=
Subject key identifier: 52:89:F5:55:6F:F2:B0:7F:28:95:B4:C2:AE:E2:A6:72:F8:50:F0:14
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 020D
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/9CC42296428511EFBD8E2A53C4F9AE02.roa
Signing time: Wed 13 Nov 2024 02:41:02 +0000
ROA not before: Wed 13 Nov 2024 02:41:02 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 139057
IP address blocks: 103.138.246.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
123.108.74.0/24 maxlen: 24
123.108.75.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Nov 2024 07:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Nov 13 02:41:02 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=673411be-58c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:c8:0b:91:08:5d:c6:fb:cb:2b:36:88:69:
30:d3:11:5d:8e:f4:16:bd:fb:b2:47:d7:bb:b0:13:
76:c9:b1:65:af:49:5e:e7:fc:66:52:26:6d:14:d1:
5b:ac:10:3e:73:e5:ec:af:8e:01:6f:1f:54:da:34:
62:4b:0a:a7:bc:08:f1:ac:4b:3b:60:10:8c:9f:12:
5e:69:23:68:bd:ec:1b:80:11:e5:99:26:1f:00:82:
9e:bc:bf:c3:50:ca:de:ab:4a:20:a4:59:b8:8c:ff:
07:83:a7:50:61:e7:67:43:d2:29:4c:9e:25:cf:39:
c4:5d:12:b2:5f:3b:29:6e:d0:6a:14:11:cb:fc:51:
df:8e:ee:8d:da:21:f5:0d:52:a1:b6:f9:6e:fc:20:
45:c4:88:7b:0a:29:4d:ef:69:3a:38:26:9e:89:79:
35:cc:89:9c:48:49:b1:f7:fe:37:c7:a3:12:5d:78:
3d:11:02:0d:3a:49:e4:e9:c7:2c:54:99:83:1a:9e:
46:40:bc:b5:94:dc:63:6e:4b:ec:68:7d:98:62:33:
e2:a6:68:75:bb:7c:bf:67:30:df:c1:2a:b1:d3:4f:
46:84:42:96:01:c1:86:22:bb:62:d7:f1:a2:2b:89:
6d:bc:1a:ac:6a:6f:12:08:08:78:6e:c6:b1:1a:6a:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:F5:55:6F:F2:B0:7F:28:95:B4:C2:AE:E2:A6:72:F8:50:F0:14
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/9CC42296428511EFBD8E2A53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.246.0/23
103.243.92.0/22
123.108.72.0/22
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:09:fe:49:65:c9:f9:43:25:f4:5c:38:c0:9e:5d:00:5d:1e:
bd:c2:f0:0f:12:97:93:ae:db:d7:a1:e2:25:82:1a:3c:81:73:
21:a3:7b:b3:d3:fb:c5:8a:29:c2:b9:57:37:80:5b:86:e4:1c:
ba:87:d9:96:2a:e0:53:96:10:0f:e9:d2:05:75:79:09:b3:72:
d2:bd:6b:d7:73:38:0e:8f:fa:5b:2f:b1:21:6e:72:c1:b8:e7:
84:87:4b:24:6f:4e:2f:d8:89:f7:75:54:f6:13:c6:c2:33:70:
5b:08:98:56:e6:6f:dd:f9:a4:31:55:25:a1:00:cc:ae:56:45:
19:dd:93:8c:e7:79:94:4f:dc:70:6e:07:7e:a1:26:26:42:41:
75:3c:0e:bf:3a:a4:27:15:bc:e6:22:34:02:25:62:70:88:ac:
a2:ee:3b:60:d4:91:1a:5d:df:6c:0b:29:fb:cf:d4:5d:2e:a9:
7e:d1:29:45:f1:d9:57:54:71:43:8e:68:8a:87:7f:ec:a5:a3:
b6:f2:ea:dc:10:8d:4b:10:7f:1c:ab:47:7d:ac:5b:99:2f:42:
53:1a:d3:31:cb:5d:c5:bd:0e:43:3c:10:73:f8:f0:3f:d5:03:
bf:a1:61:a5:80:80:eb:e5:5b:c5:25:4a:77:66:a8:40:ec:91:
e5:14:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 10:07:13 2024 by rpki-client on console-fra.rpki-client.org