Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/49951B2AC32D11EEAAF20861C4F9AE02.roa
File: 49951B2AC32D11EEAAF20861C4F9AE02.roa (raw, json)
Hash identifier: FMw0U06uUm4b8o38GGmUX3lFGIr+xn2SkK182xLY3ew=
Subject key identifier: 47:B0:31:C3:B2:AE:28:48:42:65:0A:8E:F2:0B:6F:A7:BC:DB:7B:71
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 04F0
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/49951B2AC32D11EEAAF20861C4F9AE02.roa
Signing time: Sun 04 Feb 2024 07:16:17 +0000
ROA not before: Sun 04 Feb 2024 07:16:17 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 141432
IP address blocks: 103.145.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 16:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Validity
Not Before: Feb 4 07:16:17 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65bf39c1-b3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:a2:5d:36:b4:ab:c2:4f:0f:90:5d:43:e7:
5d:d4:fd:f5:a6:7b:9c:88:46:e6:38:35:ee:fa:26:
56:3c:11:f3:6f:73:af:51:82:37:2a:27:67:f5:28:
55:11:f4:99:2d:dd:ec:a2:91:5f:f1:f6:69:d0:13:
6b:fb:a5:f0:46:0b:79:85:08:c8:0f:3a:dd:2f:06:
d2:f9:eb:0a:93:cf:42:ba:00:de:b6:f6:81:7b:00:
3f:dd:60:2a:af:53:23:01:aa:9a:ae:11:1a:11:1f:
e5:65:7e:fb:94:33:45:35:94:da:4c:0e:f2:61:e1:
a4:9a:3a:60:86:a9:32:fe:14:47:ba:53:d0:dc:ae:
b3:c5:ec:b1:92:0d:11:5c:8d:6f:21:93:3d:b6:62:
f3:8c:07:4c:a0:a3:e7:62:bf:30:6e:82:4c:d9:17:
a6:5c:9e:16:e6:17:c5:07:45:51:8c:8f:63:82:55:
e7:00:45:c3:2c:44:f6:28:50:91:73:cf:c7:66:60:
35:b7:64:ca:1e:40:a7:cd:a1:fd:de:51:56:db:b8:
5c:55:09:17:d5:b9:67:07:2d:26:6b:55:07:9f:ea:
3d:6a:ec:7d:db:ed:fc:15:7a:99:27:2e:20:bf:4e:
be:fb:4a:bd:4f:23:16:cd:d7:11:f8:18:c7:5e:55:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:31:C3:B2:AE:28:48:42:65:0A:8E:F2:0B:6F:A7:BC:DB:7B:71
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/49951B2AC32D11EEAAF20861C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b0:76:f2:ee:6e:81:a4:33:a7:6e:6a:00:90:5f:b4:c2:5c:
53:33:47:12:df:e3:c9:c9:13:5d:ea:ff:cb:e1:d1:ad:aa:c0:
69:6e:ee:4d:e3:34:be:ca:3f:13:d6:77:d8:5e:fa:73:bc:aa:
88:61:e6:91:13:1b:b5:af:a0:f6:b1:4e:08:82:48:31:2f:49:
07:30:3a:3e:40:a6:24:18:02:0b:ca:e4:80:ad:90:0f:ac:3b:
59:39:02:02:91:31:5a:18:cf:63:fb:e3:43:2f:40:7e:96:e2:
65:75:c2:7e:87:08:46:85:1d:cb:4d:f4:bd:94:ee:02:bd:d2:
8d:7b:54:f9:59:d4:7c:b5:28:85:ea:43:54:60:dc:f9:a4:e2:
3e:04:b1:15:c5:f1:89:fa:30:5e:a7:08:5f:b0:45:50:cc:38:
92:1f:ec:55:23:35:a4:65:02:99:bb:b3:96:c2:38:86:5d:b8:
76:29:8e:96:cd:5b:98:03:2f:45:ce:e4:89:83:94:e0:1b:66:
9b:ca:cd:28:09:1f:ec:62:19:7d:72:ce:c4:14:b5:9b:a1:54:
f4:0f:3a:63:34:fd:ab:69:6b:1b:f6:b7:6f:d5:8e:9a:b0:6d:
21:f3:38:c3:b3:7b:4f:81:3f:fd:7c:ea:42:5b:74:bb:1c:59:
02:f6:20:82
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF
QzdCN0RERjIwHhcNMjQwMjA0MDcxNjE3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJmMzljMS1iM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1wqiXTa0q8JPD5BdQ+dd1P31pnuciEbmODXu+iZWPBHzb3OvUYI3Kidn9ShV
EfSZLd3sopFf8fZp0BNr+6XwRgt5hQjIDzrdLwbS+esKk89CugDetvaBewA/3WAq
r1MjAaqarhEaER/lZX77lDNFNZTaTA7yYeGkmjpghqky/hRHulPQ3K6zxeyxkg0R
XI1vIZM9tmLzjAdMoKPnYr8wboJM2RemXJ4W5hfFB0VRjI9jglXnAEXDLET2KFCR
c8/HZmA1t2TKHkCnzaH93lFW27hcVQkX1blnBy0ma1UHn+o9aux92+38FXqZJy4g
v06++0q9TyMWzdcR+BjHXlWp5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEewMcOy
rihIQmUKjvILb6e823txMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1
QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQ5MEEvMTdFMkNGNTBCNUM1MTFFQkI1NEUwMTQ2QzRGOUFFMDIvNDk5NTFCMkFD
MzJEMTFFRUFBRjIwODYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkbgwDQYJKoZIhvcNAQELBQADggEBAMGwdvLuboGkM6du
agCQX7TCXFMzRxLf48nJE13q/8vh0a2qwGlu7k3jNL7KPxPWd9he+nO8qohh5pET
G7WvoPaxTgiCSDEvSQcwOj5ApiQYAgvK5ICtkA+sO1k5AgKRMVoYz2P740MvQH6W
4mV1wn6HCEaFHctN9L2U7gK90o17VPlZ1Hy1KIXqQ1Rg3Pmk4j4EsRXF8Yn6MF6n
CF+wRVDMOJIf7FUjNaRlApm7s5bCOIZduHYpjpbNW5gDL0XO5ImDlOAbZpvKzSgJ
H+xiGX1yzsQUtZuhVPQPOmM0/atpaxv2t2/VjpqwbSHzOMOze0+BP/186kJbdLsc
WQL2III=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org