Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A46ECE2E04C411EE979E8B13C4F9AE02.roa
File: A46ECE2E04C411EE979E8B13C4F9AE02.roa (raw, json)
Hash identifier: 6jSlobz3hV0UGDBALgDeWPMY55AQRTaKszsCI8g+PUE=
Subject key identifier: 1E:2D:5A:77:C5:79:9D:BC:08:7C:FA:71:DB:01:9D:08:B2:20:F7:3F
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: 03
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A46ECE2E04C411EE979E8B13C4F9AE02.roa
Signing time: Tue 06 Jun 2023 23:48:31 +0000
ROA not before: Tue 06 Jun 2023 23:48:31 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 103.69.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 14:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: Jun 6 23:48:31 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=647fc5cf-dc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:36:b6:3b:63:70:7f:ff:5e:76:a9:48:67:
2d:6b:ff:ae:fa:46:a9:e1:26:e8:2c:28:68:62:ce:
72:b4:c7:4f:7f:9e:11:8b:13:a5:9a:78:b1:64:62:
e9:1f:56:2e:bb:f4:9f:19:7f:93:1b:7c:ea:21:2f:
10:8d:56:12:85:a8:70:2d:30:c7:15:69:b1:dd:28:
ea:58:08:d0:30:ee:e1:01:49:bc:0f:dd:bc:4f:c0:
6f:9e:6b:b8:df:c7:94:7c:5f:90:44:bc:a1:59:c5:
95:84:7b:52:1c:75:3a:3e:10:81:33:33:63:5f:b8:
ca:f5:42:3e:a1:7c:d8:62:bb:1a:05:4a:3e:6b:f1:
8b:bf:d3:88:4c:0a:5e:47:de:0d:07:e8:c7:fb:bd:
19:6a:4f:27:05:bf:d3:6d:5d:f1:bc:7c:96:4b:7e:
66:fc:7d:26:4f:4c:b5:0d:45:ff:3a:e1:4d:5c:c1:
a4:13:e7:66:d4:09:ea:c1:74:06:5a:3b:e0:7b:5b:
ec:a1:61:66:ee:4f:8e:c6:c0:95:71:74:3c:6d:aa:
ca:11:87:93:6b:aa:89:aa:f5:9e:4e:bc:d0:11:75:
7a:03:2b:d8:10:9c:90:24:97:7f:d6:fe:19:5d:23:
a7:f3:5d:d6:27:96:8a:a7:d1:d3:c5:7b:47:dd:ef:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2D:5A:77:C5:79:9D:BC:08:7C:FA:71:DB:01:9D:08:B2:20:F7:3F
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A46ECE2E04C411EE979E8B13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:e3:21:2b:c6:52:ea:4e:f9:28:2f:63:32:95:8d:f9:20:
69:71:7a:b7:ec:2e:5d:a4:df:05:30:4a:3b:c7:8b:05:3b:39:
c8:6b:90:e6:3a:9f:31:de:ac:f9:63:ec:cc:a4:c0:22:f4:4f:
8b:e8:ca:58:13:0b:2b:0d:27:ee:3d:50:f8:1f:38:78:2a:e3:
4f:ab:ee:51:5a:2a:d9:e3:eb:f8:0a:f4:38:d2:c7:83:31:93:
1d:c7:2e:1b:d7:fe:c5:14:04:cc:73:b6:0c:f5:e4:7a:f4:4d:
50:32:ee:bd:23:a8:01:60:3e:53:9f:6a:4b:56:43:a0:3f:7d:
68:db:a0:99:05:07:61:5c:d2:34:84:f4:88:7c:10:4b:ce:a5:
2a:03:d7:36:bb:a3:5c:51:ed:14:8f:eb:53:bc:8f:ff:5c:b5:
3f:44:12:7b:6f:3c:9e:4e:14:0f:ae:72:89:cd:2c:69:8a:41:
63:0a:a8:ca:83:e8:1e:a6:f8:1f:25:d6:cb:f8:33:b3:74:b0:
71:62:b2:8d:09:29:e6:20:8a:e1:12:1f:0f:fd:5a:9d:82:6e:
3e:2e:6a:55:25:99:32:d3:f0:ae:b1:e6:7e:c1:23:fe:b6:a9:
8b:48:5b:6e:d6:22:7e:e4:97:4a:fa:db:1e:fe:8f:7b:a1:43:
88:73:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org