Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/F049F288BF4611ED906CEE70C4F9AE02.roa
File: F049F288BF4611ED906CEE70C4F9AE02.roa (raw, json)
Hash identifier: AEfM1u0RDo6/ZIvO25YuCok0BkcO1Swx4Qt3Yt8tvCY=
Subject key identifier: BB:0C:E3:E8:7B:40:B2:9A:1D:DB:BE:35:1C:79:49:7D:15:E7:C7:06
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 11A2
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/F049F288BF4611ED906CEE70C4F9AE02.roa
Signing time: Tue 26 Mar 2024 18:06:09 +0000
ROA not before: Tue 26 Mar 2024 18:06:09 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 141432
IP address blocks: 103.86.36.0/24 maxlen: 24
103.86.37.0/24 maxlen: 24
103.86.38.0/24 maxlen: 24
116.204.164.0/22 maxlen: 22
116.204.164.0/24 maxlen: 24
116.204.165.0/24 maxlen: 24
116.204.166.0/24 maxlen: 24
116.204.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 16:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Validity
Not Before: Mar 26 18:06:09 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66030e90-a3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:9d:db:59:68:4b:a3:eb:db:f7:9d:cb:f1:
1e:98:16:36:c0:16:b2:51:21:2f:a4:fd:44:47:79:
13:90:32:fe:67:a6:91:3b:82:97:36:03:67:b7:97:
7d:09:db:5f:56:ca:45:57:4d:42:fc:5d:27:50:48:
5c:2b:0b:bd:68:4e:50:88:38:5b:7d:86:c1:51:3c:
07:03:cb:b3:7b:a3:d4:96:ef:60:a9:7a:e9:20:e9:
bd:dd:23:80:32:65:5c:15:e7:75:01:35:43:f3:be:
4d:60:f9:00:64:07:1c:9e:7f:0e:4f:7c:c8:75:52:
5b:6f:d1:2c:ae:f2:fe:48:f7:8e:61:9f:7e:56:74:
79:6b:a5:e2:e7:54:e5:9d:3c:52:a0:35:5d:b6:76:
78:b9:66:e2:53:b1:b3:9e:d5:42:76:12:b0:f6:0d:
39:8b:74:1b:51:07:9b:9a:59:ed:66:3f:80:7f:06:
d1:cc:4c:83:a3:ee:cc:2c:1b:52:16:e4:9e:73:80:
29:77:5a:06:0b:a5:5f:da:87:63:18:7f:d2:ff:16:
07:d6:6d:b1:c7:c7:d5:ab:18:f8:5c:63:6f:b5:96:
11:12:a7:4e:f3:9a:c3:2d:e4:d9:24:0e:a0:2a:6e:
2e:22:45:46:e3:5e:a1:1e:81:9d:13:df:79:a8:14:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:E3:E8:7B:40:B2:9A:1D:DB:BE:35:1C:79:49:7D:15:E7:C7:06
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/F049F288BF4611ED906CEE70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.36.0-103.86.38.255
116.204.164.0/22
Signature Algorithm: sha256WithRSAEncryption
19:e2:55:e0:75:41:ec:12:3e:eb:18:f1:f1:42:26:06:00:30:
ef:e1:7a:19:d5:23:64:c8:8f:43:f5:71:d3:75:6e:b5:13:49:
c0:fa:3b:fd:f4:f1:54:4f:ef:4e:02:8a:19:54:20:5d:23:9a:
10:de:a2:8c:d6:93:51:07:69:8b:0b:3a:7b:05:21:93:32:99:
3a:39:21:fe:ee:fd:d8:c5:ee:8f:91:08:99:6e:a1:12:a8:69:
ef:43:89:e2:55:29:16:12:06:65:ae:85:15:55:20:4e:b1:39:
be:b2:e2:44:fc:5d:67:0b:b9:77:c3:f8:a3:55:be:32:ed:e0:
c0:9e:bd:b1:35:0d:f4:7f:15:1a:44:6c:e6:83:9c:a5:2f:60:
40:9e:41:be:79:7d:4b:9e:8a:7d:af:e2:39:15:02:d9:dd:7d:
1c:23:19:16:f8:b9:c4:22:10:cc:76:93:4f:8e:66:ce:9d:e3:
7f:27:92:b8:13:06:ea:80:01:9e:4a:88:1b:60:bf:47:63:7f:
f6:c6:36:80:27:00:b4:cb:90:a0:96:13:0a:2b:11:9e:35:13:
6e:8e:f2:4c:35:4b:ff:f7:c8:39:41:46:d7:b7:c6:39:4c:02:
1d:32:6a:ee:72:57:0f:2d:b9:b2:71:d7:31:a7:a3:83:25:95:
95:cd:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:47:41 2024 by rpki-client on console-ams.rpki-client.org