Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A40AC3904BC611EE82FFE270C4F9AE02.roa
File: A40AC3904BC611EE82FFE270C4F9AE02.roa (raw, json)
Hash identifier: uhskbEIDwrCMGLIO2IXY0xMFmqQjXulUV3Crh+aJB8A=
Subject key identifier: FC:0A:F4:8F:A7:D8:38:69:2F:75:0B:28:B8:15:33:85:A0:9B:46:E9
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: 34
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A40AC3904BC611EE82FFE270C4F9AE02.roa
Signing time: Tue 05 Sep 2023 08:31:42 +0000
ROA not before: Tue 05 Sep 2023 08:31:42 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.69.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: Sep 5 08:31:42 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64f6e76e-7b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:a5:41:ed:5e:35:4c:ff:03:dd:15:7a:22:
74:42:d7:a1:9c:79:00:69:24:d0:57:4e:8c:ab:3e:
9d:22:07:c0:98:48:19:3a:8f:cc:93:88:2c:97:f1:
07:79:e6:57:07:ff:7e:1b:b3:34:8c:55:69:ee:09:
d2:08:16:04:3c:d6:7b:7c:48:c3:f1:66:f3:e4:00:
c5:bc:df:a5:2e:b7:1a:d8:67:8c:6d:b1:9f:3f:32:
bf:27:c9:ff:ef:65:7a:92:c7:95:36:2b:10:cf:35:
dd:f4:a5:d6:83:91:2a:89:c4:bd:70:b2:00:ac:3a:
9f:be:9d:ed:54:b9:1d:25:ab:b3:24:88:73:f5:d7:
2e:01:1b:b6:75:31:91:c2:3b:68:1e:82:da:ee:17:
78:f0:9b:6f:b4:bf:02:bb:a3:1a:f4:7e:1f:05:4f:
be:c0:78:78:1b:39:c1:71:d8:84:e1:86:72:93:6a:
a9:ad:81:f4:86:28:9c:4e:a5:75:36:68:db:bf:13:
b9:c0:5c:0e:ad:35:56:8a:01:e8:b8:ca:8f:59:a1:
8d:c6:53:1c:52:48:56:65:b9:42:04:42:da:3a:c1:
08:d3:59:0c:bc:39:be:5c:91:f0:90:c4:34:2c:68:
25:c7:61:1e:44:b3:78:f6:d2:c2:b8:bb:28:3f:e1:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:F4:8F:A7:D8:38:69:2F:75:0B:28:B8:15:33:85:A0:9B:46:E9
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A40AC3904BC611EE82FFE270C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f9:c8:25:3d:dc:bd:76:60:1c:0b:82:9f:8f:1d:17:44:73:
54:e8:f8:ca:eb:78:c8:e6:94:15:58:c4:6b:16:b4:c9:b0:bd:
2e:c1:bf:02:80:00:a3:d0:b8:87:58:0e:15:74:91:e6:f2:7d:
b4:24:37:ac:f0:4c:8f:7b:d3:27:bd:88:de:25:ee:62:d4:fc:
9d:dd:28:24:d5:f0:22:f4:e3:89:66:14:42:48:54:ee:c0:be:
37:0a:b6:be:ef:79:73:22:7d:1e:c6:a1:61:e2:b4:56:31:07:
cb:5d:54:08:bf:19:89:82:b9:34:6b:de:1e:37:a3:be:3d:09:
84:4f:f1:46:07:21:81:b5:bd:8e:7d:6f:67:87:e6:12:4c:2b:
5a:24:ad:22:13:bd:e0:73:a8:d5:36:da:b8:73:a0:21:c9:98:
10:cc:a2:a4:9a:60:08:81:92:50:90:e2:54:2a:32:59:36:22:
8a:3d:78:23:95:d5:e3:ad:ba:11:d4:e4:be:22:c4:51:ee:b2:
46:95:ab:a9:3a:2b:92:ad:8a:a2:0d:e4:74:e8:5b:d2:c3:0c:
42:62:b6:1f:75:66:2d:87:92:37:1a:e1:1f:d3:35:4b:6f:43:
ed:54:7c:a2:a4:eb:e0:9f:f7:9b:1c:34:9f:ef:f2:74:18:95:
d3:1c:5e:d9
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjE5MDExMC8GA1UEBRMoN0IzQTZCREVEMkY3QjRDMDU4NDU2OEMwNjRBQjgwMzQz
Mjg3MjNBMDAeFw0yMzA5MDUwODMxNDJaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZjZlNzZlLTdiMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLMaVB7V41TP8D3RV6InRC16GceQBpJNBXToyrPp0iB8CYSBk6j8yTiCyX8Qd5
5lcH/34bszSMVWnuCdIIFgQ81nt8SMPxZvPkAMW836UutxrYZ4xtsZ8/Mr8nyf/v
ZXqSx5U2KxDPNd30pdaDkSqJxL1wsgCsOp++ne1UuR0lq7MkiHP11y4BG7Z1MZHC
O2gegtruF3jwm2+0vwK7oxr0fh8FT77AeHgbOcFx2IThhnKTaqmtgfSGKJxOpXU2
aNu/E7nAXA6tNVaKAei4yo9ZoY3GUxxSSFZluUIEQto6wQjTWQy8Ob5ckfCQxDQs
aCXHYR5Es3j20sK4uyg/4Z+jAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/Ar0j6fY
OGkvdQsouBUzhaCbRukwHwYDVR0jBBgwFoAUezpr3tL3tMBYRWjAZKuANDKHI6Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MTkwLzBCQjM5NjUyMDQ5
NjExRUVCRDMxRUQzMEM0RjlBRTAyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZXpwcjN0TDN0TUJZUldqQVpLdUFOREtISTZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9BNDBBQzM5MDRC
QzYxMUVFODJGRkUyNzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdFODANBgkqhkiG9w0BAQsFAAOCAQEAb/nIJT3cvXZgHAuC
n48dF0RzVOj4yut4yOaUFVjEaxa0ybC9LsG/AoAAo9C4h1gOFXSR5vJ9tCQ3rPBM
j3vTJ72I3iXuYtT8nd0oJNXwIvTjiWYUQkhU7sC+Nwq2vu95cyJ9HsahYeK0VjEH
y11UCL8ZiYK5NGveHjejvj0JhE/xRgchgbW9jn1vZ4fmEkwrWiStIhO94HOo1Tba
uHOgIcmYEMyipJpgCIGSUJDiVCoyWTYiij14I5XV4626EdTkviLEUe6yRpWrqTor
kq2Kog3kdOhb0sMMQmK2H3VmLYeSNxrhH9M1S29D7VR8oqTr4J/3mxw0n+/ydBiV
0xxe2Q==
-----END CERTIFICATE-----
Generated at Sun Oct 1 19:07:39 2023 by rpki-client on console-ams.rpki-client.org