Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/6235F9AE608811EE8CF04685C4F9AE02.roa
File: 6235F9AE608811EE8CF04685C4F9AE02.roa (raw, json)
Hash identifier: oT3YjF9bxWW/L4KcfgV0EGPbcjwm+dX4LQv4I3baknI=
Subject key identifier: D1:B3:5D:B3:30:18:96:5D:E4:74:04:FE:A5:B0:5E:88:0D:B1:7B:43
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: BC
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/6235F9AE608811EE8CF04685C4F9AE02.roa
Signing time: Wed 15 May 2024 06:40:55 +0000
ROA not before: Wed 15 May 2024 06:40:55 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 151201
IP address blocks: 103.69.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 11:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: May 15 06:40:55 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=664458f7-6a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:ab:57:a3:fd:ed:d4:36:57:87:d0:de:11:
44:b7:76:dc:f3:c1:86:51:0c:f2:b4:c0:0a:2a:bc:
18:b9:37:b4:5f:9b:96:3a:29:ef:3e:c4:7a:df:11:
1b:18:d1:4b:87:2a:87:61:1f:4a:5c:a8:c8:ed:ee:
43:a2:b1:94:f6:bd:b1:5b:0f:25:43:02:a6:a3:93:
c3:e7:f2:e9:f3:45:4d:8b:0c:e7:0d:bc:1f:3c:97:
d3:88:43:1b:72:63:f3:59:aa:45:c5:23:55:72:20:
f3:c8:93:b6:df:52:6e:85:9a:fe:7a:60:ec:b4:ec:
86:a6:5b:76:07:a5:c6:f8:cd:bd:1e:40:b8:46:41:
da:09:ee:e6:04:e6:b0:1f:84:23:31:56:3f:d8:69:
43:6a:ff:f9:5b:9a:5b:de:34:c1:03:4c:15:de:a2:
48:e6:d9:8f:74:5f:b7:52:56:2f:f5:b6:c1:74:e0:
31:be:59:11:02:ba:d5:72:83:4a:63:d3:f1:ef:9f:
da:dc:0b:51:61:ba:92:e2:5f:e4:b0:b3:42:1a:df:
2b:64:21:7e:1e:0f:4d:e0:60:37:65:9c:92:b0:86:
ff:f6:08:c2:28:4c:9d:74:67:04:51:d9:03:0c:ba:
38:01:f8:56:77:1c:be:59:55:7c:e6:05:14:0c:23:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:5D:B3:30:18:96:5D:E4:74:04:FE:A5:B0:5E:88:0D:B1:7B:43
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/6235F9AE608811EE8CF04685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:39:9d:93:6e:ab:1c:bc:68:5d:3c:40:25:ba:67:0c:c1:8b:
c2:79:83:e2:7e:af:c1:12:54:4b:7e:6e:07:c6:bc:47:54:9e:
b6:a6:47:43:a6:c1:ff:29:d8:81:c7:5e:f6:ed:c5:4c:ae:10:
ef:66:ea:ee:09:a5:eb:a8:00:11:72:71:bc:0a:ec:bd:7d:ef:
cb:ab:51:71:ea:b3:14:1e:93:fd:0a:a8:69:66:d7:0f:1a:ba:
63:1c:1d:81:a5:a3:69:02:c4:9b:59:c2:6d:60:cb:92:2f:15:
7a:1d:e4:5d:8e:65:7a:2a:45:15:14:31:e1:16:b4:c5:da:e1:
6a:cf:10:5c:ff:3b:76:e3:fd:86:e2:b3:4c:73:7a:a9:b5:6d:
24:93:70:e7:6d:b8:77:fe:64:e7:c4:29:5b:a0:ff:96:f1:02:
12:25:28:89:f1:98:c2:67:0a:de:78:96:3f:69:8f:f0:f2:c5:
0a:0d:fc:a5:53:3f:46:69:c5:2f:39:af:8c:ae:f5:a2:a6:30:
7a:2c:f2:92:91:ed:3e:80:49:78:15:b9:e6:f5:48:cf:60:e0:
c7:d7:2d:5f:40:7e:ff:7f:a1:9c:e0:85:db:5c:03:4f:1c:a0:
c3:f2:09:4e:75:83:a3:68:c9:3b:9c:e7:0a:27:97:3a:bf:9a:
d5:1d:70:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0
MzI4NzIzQTAwHhcNMjQwNTE1MDY0MDU1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQ0NThmNy02YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhSrV6P97dQ2V4fQ3hFEt3bc88GGUQzytMAKKrwYuTe0X5uWOinvPsR63xEb
GNFLhyqHYR9KXKjI7e5DorGU9r2xWw8lQwKmo5PD5/Lp80VNiwznDbwfPJfTiEMb
cmPzWapFxSNVciDzyJO231JuhZr+emDstOyGplt2B6XG+M29HkC4RkHaCe7mBOaw
H4QjMVY/2GlDav/5W5pb3jTBA0wV3qJI5tmPdF+3UlYv9bbBdOAxvlkRArrVcoNK
Y9Px75/a3AtRYbqS4l/ksLNCGt8rZCF+Hg9N4GA3ZZySsIb/9gjCKEyddGcEUdkD
DLo4AfhWdxy+WVV85gUUDCOvZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNGzXbMw
GJZd5HQE/qWwXogNsXtDMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0
OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTYxOTAvMEJCMzk2NTIwNDk2MTFFRUJEMzFFRDMwQzRGOUFFMDIvNjIzNUY5QUU2
MDg4MTFFRThDRjA0Njg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnRTgwDQYJKoZIhvcNAQELBQADggEBAE85nZNuqxy8aF08
QCW6ZwzBi8J5g+J+r8ESVEt+bgfGvEdUnramR0Omwf8p2IHHXvbtxUyuEO9m6u4J
peuoABFycbwK7L1978urUXHqsxQek/0KqGlm1w8aumMcHYGlo2kCxJtZwm1gy5Iv
FXod5F2OZXoqRRUUMeEWtMXa4WrPEFz/O3bj/Ybis0xzeqm1bSSTcOdtuHf+ZOfE
KVug/5bxAhIlKInxmMJnCt54lj9pj/DyxQoN/KVTP0ZpxS85r4yu9aKmMHos8pKR
7T6ASXgVueb1SM9g4MfXLV9Afv9/oZzghdtcA08coMPyCU51g6NoyTuc5wonlzq/
mtUdcH4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org