Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117664/F3C77FD2A5E411E88706660EC4F9AE02/CCD75266A5E511E8A2521110C4F9AE02.roa
File: CCD75266A5E511E8A2521110C4F9AE02.roa (raw, json)
Hash identifier: OCyzbo1egj+lRSsTTv4E6WGedxNWRf3Z2nYCvT94vZo=
Subject key identifier: 22:7F:F1:33:47:30:1A:1A:9E:2D:D8:00:EF:19:84:34:AB:A1:50:D6
Certificate issuer: /CN=A9117664/serialNumber=BAE0B5AFCBAA6021C46327F427A7491CFBD5F7BC
Certificate serial: 11F8
Authority key identifier: BA:E0:B5:AF:CB:AA:60:21:C4:63:27:F4:27:A7:49:1C:FB:D5:F7:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuC1r8uqYCHEYyf0J6dJHPvV97w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117664/F3C77FD2A5E411E88706660EC4F9AE02/CCD75266A5E511E8A2521110C4F9AE02.roa
Signing time: Wed 30 Aug 2023 17:44:55 +0000
ROA not before: Wed 30 Aug 2023 17:44:55 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 132238
IP address blocks: 103.96.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4600 (0x11f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117664/serialNumber=BAE0B5AFCBAA6021C46327F427A7491CFBD5F7BC
Validity
Not Before: Aug 30 17:44:55 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64ef8017-de29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:8a:88:11:5f:86:41:22:6e:e6:a6:0e:f9:
c6:87:2c:45:c0:a0:aa:39:90:a8:28:02:7e:6a:f0:
31:9d:10:56:4b:0b:1a:0c:7d:d2:26:85:78:cd:53:
ec:54:6c:b7:0c:94:d7:25:06:17:01:fe:87:e4:51:
b1:ea:4d:cb:77:73:83:81:63:d3:b3:d1:46:3e:2f:
c6:f1:da:3d:e2:a6:1f:b7:7f:0f:14:eb:3c:63:76:
ce:f5:60:70:74:2e:04:cf:06:94:1a:1f:35:3f:11:
b5:df:94:ea:bd:2d:86:f4:6e:17:cc:df:96:7a:45:
f2:c3:69:60:73:2c:b7:1f:95:fd:e5:38:09:ef:31:
b1:73:6f:91:2a:8b:19:47:bd:cc:e4:a1:50:11:22:
f5:a1:48:4b:aa:45:1c:52:cf:49:18:c5:98:ae:c8:
ef:9d:df:c6:06:f5:f5:08:5c:fc:9c:ae:13:a1:5d:
51:77:18:c1:cc:99:23:6a:dd:0b:2b:80:8e:75:ff:
49:53:4c:77:59:57:ce:82:e8:cb:ce:b3:be:8f:2c:
2c:7f:23:f3:52:34:7b:97:1f:65:c2:89:6f:c9:65:
ca:f0:64:5b:9e:f8:50:32:c0:51:43:95:9b:2e:fa:
03:7a:80:ff:a8:40:fd:f4:23:cd:a4:cd:e5:f8:bc:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:F1:33:47:30:1A:1A:9E:2D:D8:00:EF:19:84:34:AB:A1:50:D6
X509v3 Authority Key Identifier:
keyid:BA:E0:B5:AF:CB:AA:60:21:C4:63:27:F4:27:A7:49:1C:FB:D5:F7:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117664/F3C77FD2A5E411E88706660EC4F9AE02/uuC1r8uqYCHEYyf0J6dJHPvV97w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuC1r8uqYCHEYyf0J6dJHPvV97w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117664/F3C77FD2A5E411E88706660EC4F9AE02/CCD75266A5E511E8A2521110C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.76.0/22
Signature Algorithm: sha256WithRSAEncryption
61:da:58:74:fd:27:63:21:68:67:ce:89:6e:ac:c6:73:b1:49:
40:f1:3b:cc:57:09:be:08:3f:32:af:49:25:94:86:05:67:0a:
2b:fe:85:e0:7d:f1:2c:2b:e0:cb:99:f9:2e:18:24:91:8c:da:
7e:c8:0a:a4:0a:2c:b1:a3:b9:5e:52:12:4f:b8:2f:45:bb:7a:
4b:c2:0e:e0:f1:ea:ec:93:69:fc:75:f5:7e:98:31:79:39:5d:
2b:e2:fc:25:b3:5a:32:63:af:11:a2:3c:39:24:a4:9c:46:d8:
7b:15:54:d5:6d:ed:45:35:3a:d8:48:d2:db:fe:8f:f5:63:94:
e3:05:d0:a6:35:30:19:a6:5c:51:26:b5:ac:40:b0:19:c5:32:
8f:84:ca:0a:5c:b9:e4:97:c3:b5:65:8c:e6:3b:a3:00:5e:b1:
47:68:26:5b:6e:cc:c9:02:f6:93:21:e9:63:57:64:da:ac:9e:
ba:a3:34:ec:a2:16:04:30:de:0c:0c:9d:e8:11:3b:68:b7:59:
d1:0c:ca:90:64:98:de:c1:08:45:74:b8:1d:02:90:6e:43:73:
32:19:9f:3f:f2:ef:63:34:22:34:08:1a:4d:98:86:7b:92:ee:
00:62:10:4f:97:72:56:9c:5c:a3:cd:7e:13:a9:35:9f:c7:25:
9d:f7:c0:46
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc2NjQxMTAvBgNVBAUTKEJBRTBCNUFGQ0JBQTYwMjFDNDYzMjdGNDI3QTc0OTFD
RkJENUY3QkMwHhcNMjMwODMwMTc0NDU1WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVmODAxNy1kZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRyKiBFfhkEibuamDvnGhyxFwKCqOZCoKAJ+avAxnRBWSwsaDH3SJoV4zVPs
VGy3DJTXJQYXAf6H5FGx6k3Ld3ODgWPTs9FGPi/G8do94qYft38PFOs8Y3bO9WBw
dC4EzwaUGh81PxG135TqvS2G9G4XzN+WekXyw2lgcyy3H5X95TgJ7zGxc2+RKosZ
R73M5KFQESL1oUhLqkUcUs9JGMWYrsjvnd/GBvX1CFz8nK4ToV1RdxjBzJkjat0L
K4COdf9JU0x3WVfOgujLzrO+jywsfyPzUjR7lx9lwolvyWXK8GRbnvhQMsBRQ5Wb
LvoDeoD/qED99CPNpM3l+Lx1YwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCJ/8TNH
MBoani3YAO8ZhDSroVDWMB8GA1UdIwQYMBaAFLrgta/LqmAhxGMn9CenSRz71fe8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzY2NC9GM0M3N0ZEMkE1
RTQxMUU4ODcwNjY2MEVDNEY5QUUwMi91dUMxcjh1cVlDSEVZeWYwSjZkSkhQdlY5
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V1QzFyOHVxWUNIRVl5ZjBKNmRKSFB2Vjk3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc2NjQvRjNDNzdGRDJBNUU0MTFFODg3MDY2NjBFQzRGOUFFMDIvQ0NENzUyNjZB
NUU1MTFFOEEyNTIxMTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnYEwwDQYJKoZIhvcNAQELBQADggEBAGHaWHT9J2MhaGfO
iW6sxnOxSUDxO8xXCb4IPzKvSSWUhgVnCiv+heB98Swr4MuZ+S4YJJGM2n7ICqQK
LLGjuV5SEk+4L0W7ekvCDuDx6uyTafx19X6YMXk5XSvi/CWzWjJjrxGiPDkkpJxG
2HsVVNVt7UU1OthI0tv+j/VjlOMF0KY1MBmmXFEmtaxAsBnFMo+EygpcueSXw7Vl
jOY7owBesUdoJltuzMkC9pMh6WNXZNqsnrqjNOyiFgQw3gwMnegRO2i3WdEMypBk
mN7BCEV0uB0CkG5DczIZnz/y72M0IjQIGk2YhnuS7gBiEE+XclacXKPNfhOpNZ/H
JZ33wEY=
-----END CERTIFICATE-----
Generated at Tue Nov 14 08:07:33 2023 by rpki-client on console-ams.rpki-client.org