Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/A95D6F80CFC111EE98ACFE46C4F9AE02.roa
File: A95D6F80CFC111EE98ACFE46C4F9AE02.roa (raw, json)
Hash identifier: AswCeroGiYZdPBvTlYj6J6ndHrCacPuPJshyiNuZFEc=
Subject key identifier: 5D:07:24:01:D8:AE:48:D8:07:B4:3D:99:A5:27:75:7E:9B:5E:F2:CF
Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Certificate serial: DD
Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/A95D6F80CFC111EE98ACFE46C4F9AE02.roa
Signing time: Tue 20 Feb 2024 07:28:37 +0000
ROA not before: Tue 20 Feb 2024 07:28:37 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 141731
IP address blocks: 103.60.204.0/24 maxlen: 24
103.60.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 09:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Validity
Not Before: Feb 20 07:28:37 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65d454a5-0667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3c:fb:fe:71:5c:ef:d3:14:9d:6e:67:7b:16:
cd:ba:05:5b:31:f0:ce:68:24:e1:9a:2b:f5:0b:06:
57:3d:d5:86:99:f2:4d:b0:11:32:c4:cb:d9:01:67:
1a:a6:3f:36:de:83:c2:41:7f:a7:04:f1:e7:f9:ea:
d5:ec:e1:e5:92:62:3c:02:af:54:e8:dc:20:f7:8c:
2f:4d:ed:c4:04:f5:33:3c:6c:90:3c:55:54:2d:36:
ac:02:6e:5a:c0:73:cf:7c:09:04:95:76:66:78:60:
43:09:6a:ca:4b:80:6f:66:de:cb:83:d2:14:68:ca:
ba:06:79:13:19:fe:6b:04:c8:6a:c7:c7:40:f7:c9:
55:35:04:82:25:ff:a2:98:f3:af:5b:6f:7e:37:fb:
bc:4e:85:5e:4f:b4:05:ec:37:88:1c:0e:df:05:20:
67:80:8d:62:17:52:e0:0b:90:02:47:5e:42:c4:e0:
1e:d8:06:db:52:7c:8e:65:26:0e:a8:c1:a0:f5:2d:
ab:11:27:01:f1:4f:1b:94:d2:bb:10:b0:2e:87:bf:
81:38:28:27:ed:3e:d2:95:af:9e:92:d8:bf:28:56:
c0:af:6f:b5:01:d7:fc:52:0a:a3:da:f0:5e:55:42:
a2:a2:5d:73:88:8b:b6:df:b0:4d:0c:0b:a7:38:8e:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:24:01:D8:AE:48:D8:07:B4:3D:99:A5:27:75:7E:9B:5E:F2:CF
X509v3 Authority Key Identifier:
keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/A95D6F80CFC111EE98ACFE46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.204.0/23
Signature Algorithm: sha256WithRSAEncryption
66:3e:71:05:9b:1c:ff:e9:7a:f5:07:87:e3:f8:0d:36:c0:1f:
da:f6:e9:6a:f4:b2:16:1b:75:c0:32:14:10:7e:c0:a1:93:65:
bd:1a:ba:22:88:62:fb:a6:f2:b4:59:d5:e2:8a:6e:15:a4:90:
e9:77:64:90:ef:e8:80:84:ea:68:86:66:e9:eb:d8:cb:f9:58:
ff:51:b7:00:f7:13:eb:f4:24:ad:73:e4:55:85:bc:05:da:71:
16:da:66:4e:56:1c:bc:b7:22:9e:ae:c7:e3:e3:9c:03:3b:b0:
0f:a1:95:72:c2:ba:74:3d:e7:4e:fc:74:44:4c:81:45:7c:1d:
57:8e:d7:e4:77:fd:0f:7a:33:53:1e:8c:23:9c:ff:ba:ed:9e:
fa:05:2e:55:73:45:d5:4b:e8:fc:59:60:ba:ee:21:a9:3f:25:
1d:ad:e4:a8:d6:7f:ec:65:83:dc:90:8b:dd:67:37:81:22:9c:
74:ef:e0:84:bc:49:f0:0e:88:8e:59:08:11:c9:18:78:d3:a9:
f9:66:12:f6:97:a3:9b:92:e1:97:d8:be:25:63:22:3c:c8:4c:
55:ac:60:ef:56:f8:eb:e0:64:c6:30:bd:4b:aa:9a:59:fc:cf:
cd:f9:62:36:21:c3:36:33:84:ec:9b:f2:80:6c:11:f8:d4:b6:
9d:28:36:3d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4
Q0ExNjZDNTEwHhcNMjQwMjIwMDcyODM3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ0NTRhNS0wNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Dz7/nFc79MUnW5nexbNugVbMfDOaCThmiv1CwZXPdWGmfJNsBEyxMvZAWca
pj823oPCQX+nBPHn+erV7OHlkmI8Aq9U6Nwg94wvTe3EBPUzPGyQPFVULTasAm5a
wHPPfAkElXZmeGBDCWrKS4BvZt7Lg9IUaMq6BnkTGf5rBMhqx8dA98lVNQSCJf+i
mPOvW29+N/u8ToVeT7QF7DeIHA7fBSBngI1iF1LgC5ACR15CxOAe2AbbUnyOZSYO
qMGg9S2rEScB8U8blNK7ELAuh7+BOCgn7T7Sla+ekti/KFbAr2+1Adf8Ugqj2vBe
VUKiol1ziIu237BNDAunOI7dzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF0HJAHY
rkjYB7Q9maUndX6bXvLPMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2
NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQ4NkYvMjJDRjM0NDg4NjZDMTFFREFGQTVBNDcxQzRGOUFFMDIvQTk1RDZGODBD
RkMxMTFFRTk4QUNGRTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnPMwwDQYJKoZIhvcNAQELBQADggEBAGY+cQWbHP/pevUH
h+P4DTbAH9r26Wr0shYbdcAyFBB+wKGTZb0auiKIYvum8rRZ1eKKbhWkkOl3ZJDv
6ICE6miGZunr2Mv5WP9RtwD3E+v0JK1z5FWFvAXacRbaZk5WHLy3Ip6ux+PjnAM7
sA+hlXLCunQ95078dERMgUV8HVeO1+R3/Q96M1MejCOc/7rtnvoFLlVzRdVL6PxZ
YLruIak/JR2t5KjWf+xlg9yQi91nN4EinHTv4IS8SfAOiI5ZCBHJGHjTqflmEvaX
o5uS4ZfYviVjIjzITFWsYO9W+OvgZMYwvUuqmln8z835YjYhwzYzhOyb8oBsEfjU
tp0oNj0=
-----END CERTIFICATE-----
Generated at Wed Feb 21 09:58:04 2024 by rpki-client on console-fra.rpki-client.org