Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/6152FDA25A1511EF8A6DA460C4F9AE02.roa
File: 6152FDA25A1511EF8A6DA460C4F9AE02.roa (raw, json)
Hash identifier: tQpjTQW1/XHURC3h+BwWmvukBoukUXjmq9EmUyRA0zI=
Subject key identifier: 69:6E:63:52:89:F9:62:81:61:B2:36:09:EC:C3:74:52:5E:BD:47:42
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 063F
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/6152FDA25A1511EF8A6DA460C4F9AE02.roa
Signing time: Wed 14 Aug 2024 08:15:34 +0000
ROA not before: Wed 14 Aug 2024 08:15:34 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 137451
IP address blocks: 43.252.208.0/24 maxlen: 24
43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.234.54.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 23:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Aug 14 08:15:34 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66bc67a6-7e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:9a:4b:9f:1a:42:9a:33:c0:65:2f:e9:f1:
f1:fd:b0:36:51:05:81:6f:dd:e6:20:0a:7d:0e:6d:
a7:fa:79:b3:d1:a4:2c:84:40:cc:23:f5:a9:da:a9:
15:28:66:a9:68:72:f6:2e:ae:f8:5e:c8:f2:75:70:
1d:d1:0d:fb:7b:34:e9:1c:cd:8b:2e:9a:52:ad:ef:
94:b2:85:f7:90:9f:db:67:ef:96:23:a0:7b:18:a8:
c2:62:2c:95:85:5d:c0:8e:d5:b2:1b:ee:ec:c9:98:
05:db:ca:e1:5d:b5:1b:69:fb:13:26:33:49:83:9b:
12:f5:3f:f7:01:37:7c:80:51:d7:b1:b5:d1:9b:98:
25:7c:f9:5e:fa:4d:26:49:11:46:aa:43:3b:be:64:
6c:8a:ef:29:b2:66:84:0f:0d:72:af:3b:ca:11:af:
d2:54:ec:ab:c6:51:5d:a8:d8:09:08:12:8b:11:42:
05:ea:3e:d7:33:cc:9b:d8:32:04:25:25:a6:75:f1:
69:5d:89:04:15:04:46:51:8a:3d:7d:c1:7b:5c:d5:
3f:c1:7f:1b:76:07:87:1f:e6:fc:6c:09:94:0b:66:
1b:b6:38:98:80:d4:14:4d:56:aa:e8:ca:d8:4b:2f:
27:d0:24:98:c5:f7:4c:36:d7:04:fe:b7:4a:fb:a3:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:63:52:89:F9:62:81:61:B2:36:09:EC:C3:74:52:5E:BD:47:42
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/6152FDA25A1511EF8A6DA460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.208.0-43.252.210.255
103.228.64.0/24
103.234.54.0/24
150.107.1.0-150.107.3.255
Signature Algorithm: sha256WithRSAEncryption
92:fd:ca:87:88:55:f5:5f:39:6c:a8:23:3d:7b:6c:db:65:1b:
32:e8:02:a6:ae:a2:28:0c:a8:a0:32:e6:bc:18:85:06:58:ba:
7d:4a:e0:d4:04:01:19:de:f6:a9:99:d7:f5:d6:af:8d:3c:4f:
5a:c6:4e:e7:40:f8:b3:d5:cf:e1:81:25:bd:ac:32:9e:2a:82:
21:b1:c0:d1:29:ab:f9:2c:c8:ab:8a:0e:8d:5f:06:c9:66:7c:
35:f7:ec:d6:a0:89:eb:0b:be:97:ef:65:86:a6:ec:21:10:e5:
2b:84:a0:3b:47:7f:13:22:67:77:f5:c8:5e:95:37:e0:55:03:
9b:1d:a8:27:59:d4:dc:1e:b5:29:85:b1:0f:7f:6d:2d:9b:56:
f6:80:45:3a:0f:3c:cf:17:c1:34:d0:bd:09:15:2d:7d:78:31:
b1:f6:ff:5c:48:b0:71:5b:06:b0:2b:64:2e:fd:4a:ec:f4:00:
88:f0:22:68:5d:e5:a7:8d:fe:00:ef:4a:89:0b:b9:89:64:8a:
f7:da:e3:8f:9d:5c:47:7c:e9:de:7e:1c:6e:5a:3d:e9:91:29:
fe:0b:03:3d:95:35:1a:1b:9d:9a:f0:6c:dc:44:38:06:aa:8f:
57:64:44:6f:35:3a:8e:23:ba:e6:10:98:16:53:22:a1:6c:14:
a6:aa:c4:6a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjQwODE0MDgxNTM0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJjNjdhNi03ZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbyaS58aQpozwGUv6fHx/bA2UQWBb93mIAp9Dm2n+nmz0aQshEDMI/Wp2qkV
KGapaHL2Lq74XsjydXAd0Q37ezTpHM2LLppSre+UsoX3kJ/bZ++WI6B7GKjCYiyV
hV3AjtWyG+7syZgF28rhXbUbafsTJjNJg5sS9T/3ATd8gFHXsbXRm5glfPle+k0m
SRFGqkM7vmRsiu8psmaEDw1yrzvKEa/SVOyrxlFdqNgJCBKLEUIF6j7XM8yb2DIE
JSWmdfFpXYkEFQRGUYo9fcF7XNU/wX8bdgeHH+b8bAmUC2YbtjiYgNQUTVaq6MrY
Sy8n0CSYxfdMNtcE/rdK+6MjWwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFGluY1KJ
+WKBYbI2CezDdFJevUdCMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNjE1MkZEQTI1
QTE1MTFFRjhBNkRBNDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E
MjAwMC4EAgABMCgwDAMEBCv80AMEACv80gMEAGfkQAMEAGfqNjAMAwQAlmsBAwQC
lmsAMA0GCSqGSIb3DQEBCwUAA4IBAQCS/cqHiFX1XzlsqCM9e2zbZRsy6AKmrqIo
DKigMua8GIUGWLp9SuDUBAEZ3vapmdf11q+NPE9axk7nQPiz1c/hgSW9rDKeKoIh
scDRKav5LMirig6NXwbJZnw19+zWoInrC76X72WGpuwhEOUrhKA7R38TImd39che
lTfgVQObHagnWdTcHrUphbEPf20tm1b2gEU6DzzPF8E00L0JFS19eDGx9v9cSLBx
WwawK2Qu/Urs9ACI8CJoXeWnjf4A70qJC7mJZIr32uOPnVxHfOnefhxuWj3pkSn+
CwM9lTUaG52a8GzcRDgGqo9XZERvNTqOI7rmEJgWUyKhbBSmqsRq
-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org