Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/30CB2AD8A60A11EA93DDAB13C4F9AE02.roa
File: 30CB2AD8A60A11EA93DDAB13C4F9AE02.roa (raw, json)
Hash identifier: XaLFH8qctC2DJ0Nan1UJWk6vS5Ax70LJ+so/TEIU2Ks=
Subject key identifier: 73:23:EF:70:5B:44:F2:64:60:20:FF:14:47:2C:CC:9D:86:79:E9:65
Certificate issuer: /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial: 1637
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/30CB2AD8A60A11EA93DDAB13C4F9AE02.roa
Signing time: Fri 14 Apr 2023 17:34:21 +0000
ROA not before: Fri 14 Apr 2023 17:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64096
IP address blocks: 43.228.180.0/22 maxlen: 22
43.228.180.0/24 maxlen: 24
43.228.181.0/24 maxlen: 24
43.228.182.0/23 maxlen: 24
103.47.200.0/22 maxlen: 24
103.212.56.0/22 maxlen: 22
103.212.56.0/24 maxlen: 24
103.212.57.0/24 maxlen: 24
103.212.58.0/24 maxlen: 24
103.212.59.0/24 maxlen: 24
116.206.0.0/22 maxlen: 22
116.206.0.0/24 maxlen: 24
2404:ff80::/32 maxlen: 32
2404:ff80:100::/48 maxlen: 48
2404:ff80:c000::/34 maxlen: 34
2404:ff80:ffe0::/44 maxlen: 48
2404:ff80:fff0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Apr 2024 02:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5687 (0x1637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Validity
Not Before: Apr 14 17:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64398e9c-5654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:f3:9e:aa:f1:4e:c5:4a:6a:3d:80:35:45:
31:02:b7:95:c2:e5:7a:42:73:6f:fc:91:1a:c2:56:
f6:72:33:0d:92:d8:3b:3e:1b:ce:08:5e:59:86:55:
24:60:29:dd:f7:6d:ea:86:8f:c8:77:29:2f:42:e4:
01:7b:f1:f2:96:2a:8b:b3:8d:f6:c4:5f:b2:84:be:
e5:25:aa:05:53:94:01:7e:f6:6d:8e:3a:8e:df:4e:
79:6f:f2:d2:98:b6:c9:80:de:86:bf:c2:93:1b:00:
d3:cb:65:91:8d:a9:a7:75:0f:ad:13:c0:59:a1:b5:
de:f3:25:db:54:35:14:db:57:94:62:ca:47:86:78:
f7:d4:6d:85:86:1b:5f:fa:9c:02:b7:d9:ce:95:cf:
eb:96:ed:6c:47:01:64:20:3c:0c:42:c5:26:28:e3:
c1:69:3a:74:ee:be:84:15:5c:6e:3a:6c:cf:53:c2:
6d:14:62:cc:ae:33:95:14:f7:80:88:70:ce:48:31:
71:eb:e3:18:26:8c:cf:4b:66:3b:f9:22:bb:58:91:
df:34:fd:7c:a8:b5:01:01:4a:44:b0:09:c5:93:4e:
6e:61:0d:65:e9:73:61:4e:97:0e:da:67:29:90:1a:
4e:15:1a:04:72:57:c0:65:5b:e5:4d:56:c0:ee:89:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:EF:70:5B:44:F2:64:60:20:FF:14:47:2C:CC:9D:86:79:E9:65
X509v3 Authority Key Identifier:
keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/30CB2AD8A60A11EA93DDAB13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.180.0/22
103.47.200.0/22
103.212.56.0/22
116.206.0.0/22
IPv6:
2404:ff80::/32
Signature Algorithm: sha256WithRSAEncryption
17:3e:6b:79:3b:26:b9:c9:04:8a:0f:6d:d4:20:72:a9:24:b2:
99:04:d4:f9:70:56:94:7b:c2:11:e0:2f:c5:81:af:56:42:68:
90:ce:90:fc:dd:9c:06:0b:98:de:39:2e:6e:99:95:84:b6:c2:
32:fa:1b:c5:8c:ce:bc:22:b8:07:9d:2d:7e:84:8e:4f:c3:51:
f0:05:5e:bc:a5:54:e4:c9:ec:d0:a7:67:d1:07:18:43:12:fd:
77:5f:f4:ec:2d:e8:d9:43:7e:4b:02:35:da:ba:ca:9d:0a:55:
7a:14:11:65:2b:f9:30:43:58:7a:f0:cb:b0:33:da:63:78:9b:
27:13:02:a1:44:23:fa:77:60:a1:a1:cb:71:a3:31:fc:e4:88:
c8:a0:87:1e:f4:57:1c:fa:79:6d:d6:42:65:dd:e6:77:d0:e8:
8a:21:8e:45:b4:0f:c5:41:0d:c6:b3:96:c1:5e:60:5d:2b:26:
de:a3:c4:f6:14:bb:80:18:b1:78:28:fa:fb:76:9d:d5:1e:d8:
9b:5f:48:ed:8e:43:7b:72:25:87:2d:7c:73:fd:2f:63:6f:79:
ed:37:c6:1c:ce:e0:5e:8f:87:5b:b8:90:cd:09:ba:7d:f2:60:
4d:1e:31:03:29:70:c0:23:7b:c4:63:e0:a7:6d:19:2f:17:d8:
66:99:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 03:33:38 2024 by rpki-client on console-fra.rpki-client.org