Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/DBA26BF0CE2111EDA227A368C4F9AE02.roa
File: DBA26BF0CE2111EDA227A368C4F9AE02.roa (raw, json)
Hash identifier: vKUAIbWu++f7h+jrQMSUrrVsAqt62ts38ICkFVkw2LM=
Subject key identifier: F3:E1:9F:4D:71:FA:99:C4:F5:68:A0:07:7E:D6:EB:A0:ED:7D:F0:1D
Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial: 0B3E
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/DBA26BF0CE2111EDA227A368C4F9AE02.roa
Signing time: Tue 14 Nov 2023 19:47:19 +0000
ROA not before: Tue 14 Nov 2023 19:47:19 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 149994
IP address blocks: 103.130.114.0/24 maxlen: 24
103.130.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2878 (0xb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Validity
Not Before: Nov 14 19:47:19 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6553cec6-1f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:67:c4:a2:1d:48:c6:17:70:a1:59:96:a4:
c4:f8:b5:c4:c7:2e:21:4e:d8:3a:16:70:96:f0:10:
c1:23:20:05:34:a7:e1:b2:1e:10:2e:b6:fd:7b:55:
08:4c:10:1f:a4:33:0a:23:14:f2:b4:d0:35:8d:f1:
a2:0a:9e:88:80:2a:08:a6:62:9a:7f:60:35:9b:c4:
f8:e8:96:9d:08:a9:21:f6:cd:fd:c2:26:43:d1:36:
fa:7f:88:af:a2:59:4f:b0:87:5c:6f:c2:03:fb:05:
8a:bc:35:90:d5:ac:cc:51:28:ca:fd:af:96:7c:40:
77:34:d6:79:d2:c6:d8:92:1b:71:79:17:59:86:93:
38:be:b6:7a:a2:d2:bc:20:6c:ea:07:5d:a1:bd:16:
09:30:03:08:9a:52:52:1d:46:65:7a:a3:7a:d4:c4:
2c:44:7d:69:c0:d4:6a:e1:bd:47:f6:98:77:75:b2:
0e:71:7c:43:5c:de:bc:56:5f:50:ce:e2:61:f0:13:
9b:a9:68:af:13:9c:a3:fb:68:3a:08:4b:f4:f1:05:
7a:bc:33:5b:aa:ba:e5:8a:d2:0f:68:3a:29:b4:a2:
a9:b6:33:6f:05:3f:18:8e:0e:22:17:a6:ac:a3:b0:
da:99:2e:20:84:9f:e8:42:e1:68:f3:c7:ba:22:20:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:9F:4D:71:FA:99:C4:F5:68:A0:07:7E:D6:EB:A0:ED:7D:F0:1D
X509v3 Authority Key Identifier:
keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/DBA26BF0CE2111EDA227A368C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.114.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:25:86:cd:ac:1d:59:91:8d:39:1c:ea:f0:c0:3e:95:41:e3:
e3:fd:1a:cc:b9:0d:c2:b3:61:8d:db:18:88:b9:9f:ad:0a:c1:
c4:95:7f:08:17:4c:ea:ef:d9:d5:90:5b:c6:da:25:21:ad:61:
6e:57:b8:bd:58:df:d5:08:a7:3b:e8:7a:96:5e:5e:67:bf:52:
0b:4c:66:4f:9c:e9:e2:e6:a1:32:89:f9:fd:d8:5e:73:97:33:
2a:24:53:ef:93:3a:58:91:3b:e8:4d:6a:21:f2:dd:ab:0f:25:
73:bd:f1:41:c8:27:79:87:ea:0c:1b:d3:18:5b:c8:06:85:ce:
f2:f3:53:7e:88:c8:9c:1c:5c:04:1f:ec:ec:ba:70:fa:e8:85:
bb:17:bc:50:4b:dd:45:48:ca:81:14:f6:e8:08:f6:e9:65:f0:
a6:75:54:04:9a:0e:c0:d7:87:b4:fb:39:79:73:0f:67:02:57:
bd:f0:ac:d9:42:b8:26:05:61:5c:9f:d0:a8:f3:41:6f:b6:b0:
2d:d6:69:69:64:1b:b9:d9:ed:c8:ce:1d:f7:36:2b:6f:a5:b4:
67:b8:1a:a0:95:88:f4:a7:d2:d0:9f:96:fd:8b:10:95:e2:b5:
41:e7:cc:75:0b:4f:89:fb:96:99:7d:17:38:45:1f:1a:a7:c4:
e1:be:bb:00
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz
QjJEOUY4NDAwHhcNMjMxMTE0MTk0NzE5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTUzY2VjNi0xZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsX5nxKIdSMYXcKFZlqTE+LXExy4hTtg6FnCW8BDBIyAFNKfhsh4QLrb9e1UI
TBAfpDMKIxTytNA1jfGiCp6IgCoIpmKaf2A1m8T46JadCKkh9s39wiZD0Tb6f4iv
ollPsIdcb8ID+wWKvDWQ1azMUSjK/a+WfEB3NNZ50sbYkhtxeRdZhpM4vrZ6otK8
IGzqB12hvRYJMAMImlJSHUZleqN61MQsRH1pwNRq4b1H9ph3dbIOcXxDXN68Vl9Q
zuJh8BObqWivE5yj+2g6CEv08QV6vDNbqrrlitIPaDoptKKptjNvBT8Yjg4iF6as
o7DamS4ghJ/oQuFo88e6IiDxXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPPhn01x
+pnE9WigB37W66DtffAdMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC
ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyMUUvNjBDMTgxNTQwQjg5MTFFQThFNUFCNzVGQzRGOUFFMDIvREJBMjZCRjBD
RTIxMTFFREEyMjdBMzY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFngnIwDQYJKoZIhvcNAQELBQADggEBADolhs2sHVmRjTkc
6vDAPpVB4+P9Gsy5DcKzYY3bGIi5n60KwcSVfwgXTOrv2dWQW8baJSGtYW5XuL1Y
39UIpzvoepZeXme/UgtMZk+c6eLmoTKJ+f3YXnOXMyokU++TOliRO+hNaiHy3asP
JXO98UHIJ3mH6gwb0xhbyAaFzvLzU36IyJwcXAQf7Oy6cProhbsXvFBL3UVIyoEU
9ugI9ull8KZ1VASaDsDXh7T7OXlzD2cCV73wrNlCuCYFYVyf0KjzQW+2sC3WaWlk
G7nZ7cjOHfc2K2+ltGe4GqCViPSn0tCflv2LEJXitUHnzHULT4n7lpl9FzhFHxqn
xOG+uwA=
-----END CERTIFICATE-----
Generated at Sat Mar 23 16:47:14 2024 by rpki-client on console-ams.rpki-client.org