Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/D1980B60724B11EDA156B97BC4F9AE02.roa
File: D1980B60724B11EDA156B97BC4F9AE02.roa (raw, json)
Hash identifier: eQQrRVXN2i1FvQEfKIUEuQNH0RUDQ9cL3/vPeXTSTS8=
Subject key identifier: EA:73:55:F1:B7:2B:92:01:D3:DA:92:7F:C6:49:24:15:CE:81:BA:6E
Certificate issuer: /CN=A91209D3/serialNumber=0B15B1FDA3B76A51C3272441404BE9C98C3D610F
Certificate serial: 43
Authority key identifier: 0B:15:B1:FD:A3:B7:6A:51:C3:27:24:41:40:4B:E9:C9:8C:3D:61:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxWx_aO3alHDJyRBQEvpyYw9YQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/D1980B60724B11EDA156B97BC4F9AE02.roa
Signing time: Mon 27 Mar 2023 07:17:16 +0000
ROA not before: Mon 27 Mar 2023 07:17:16 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 8360
IP address blocks: 103.119.72.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209D3/serialNumber=0B15B1FDA3B76A51C3272441404BE9C98C3D610F
Validity
Not Before: Mar 27 07:17:16 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=642142fc-5cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:ea:25:98:e4:99:9f:14:02:41:4b:92:22:
03:33:6d:cb:0e:36:62:99:f6:73:50:50:3d:43:8a:
96:ed:99:4e:ec:ca:bb:0a:90:47:47:5e:6c:79:fe:
4b:59:b7:98:6a:75:32:aa:d2:3c:02:b6:83:43:ca:
30:a4:13:66:88:67:fd:ad:3e:7e:09:68:15:f7:c7:
09:0c:fa:f3:c0:cb:ae:e1:09:40:be:3a:87:3f:21:
76:cf:00:0a:15:c6:ee:11:d8:dc:75:e3:6b:a0:16:
81:90:71:28:52:39:64:5f:57:f0:84:c7:98:3a:64:
27:c7:5b:5c:8c:cd:d1:e3:ad:82:41:4c:be:5a:dd:
ed:48:91:a2:91:11:4e:2f:2d:88:ec:b8:b9:63:e5:
3e:96:6e:fa:35:1d:cc:98:5b:b5:53:37:41:ae:77:
d5:a0:1a:d8:65:e3:84:db:25:fe:74:fa:97:fa:c8:
1c:26:4c:8e:d9:80:d9:e4:56:e0:85:dc:0a:66:d3:
f9:1b:d7:5f:a8:a8:f9:c9:2b:7d:6b:56:bf:89:81:
30:75:73:61:4c:9f:20:e3:e1:21:3a:1a:9a:05:36:
c4:e0:e1:71:8e:bd:97:13:01:e2:1d:9f:93:7e:d6:
b6:b5:de:ff:85:31:07:dc:83:1b:2b:15:e7:f0:fc:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:73:55:F1:B7:2B:92:01:D3:DA:92:7F:C6:49:24:15:CE:81:BA:6E
X509v3 Authority Key Identifier:
keyid:0B:15:B1:FD:A3:B7:6A:51:C3:27:24:41:40:4B:E9:C9:8C:3D:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxWx_aO3alHDJyRBQEvpyYw9YQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/D1980B60724B11EDA156B97BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.72.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:08:e6:ad:15:80:07:5e:ef:69:54:c3:ad:44:51:90:95:5e:
2f:03:bb:9f:49:b7:be:c7:27:89:c3:23:59:f5:f6:59:6c:b2:
ae:30:6d:17:71:e1:08:70:86:dc:af:84:38:63:4f:25:74:b6:
3f:f3:02:f8:3a:df:0f:b3:f8:81:55:dd:7b:ee:64:87:5f:2d:
bc:ae:1b:a7:41:ac:f8:29:9d:2b:1b:ce:a4:45:be:e3:1f:c2:
fd:b7:32:fb:7e:ea:3f:a3:5e:fc:31:2c:64:09:a9:2d:9b:70:
89:2f:3d:12:3e:1e:0e:e4:8a:a7:70:53:18:df:44:e2:a9:50:
46:07:50:60:75:e5:bc:7e:7e:4b:95:e8:82:df:ee:79:45:dc:
a2:86:3e:4f:30:5f:b8:17:f0:46:71:72:64:56:fb:cf:fa:40:
42:2b:a8:18:8b:4b:ef:c5:46:ea:c6:64:2a:63:91:25:aa:70:
df:a3:55:46:9f:e7:d2:86:2f:cb:04:43:c1:b1:ad:6f:45:d0:
7c:ac:8a:c7:a8:c0:62:33:39:ff:0b:b3:42:63:69:b0:63:19:
bb:b2:8b:97:a1:d2:4a:47:62:87:a8:5a:b9:c4:eb:6f:d8:bb:
81:6a:ff:b9:27:2e:95:9f:72:e9:35:a2:5d:13:19:b5:8b:8e:
75:ec:25:c3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MDlEMzExMC8GA1UEBRMoMEIxNUIxRkRBM0I3NkE1MUMzMjcyNDQxNDA0QkU5Qzk4
QzNENjEwRjAeFw0yMzAzMjcwNzE3MTZaFw0yNDA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0MjE0MmZjLTVjYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTjOolmOSZnxQCQUuSIgMzbcsONmKZ9nNQUD1DipbtmU7syrsKkEdHXmx5/ktZ
t5hqdTKq0jwCtoNDyjCkE2aIZ/2tPn4JaBX3xwkM+vPAy67hCUC+Ooc/IXbPAAoV
xu4R2Nx142ugFoGQcShSOWRfV/CEx5g6ZCfHW1yMzdHjrYJBTL5a3e1IkaKREU4v
LYjsuLlj5T6Wbvo1HcyYW7VTN0Gud9WgGthl44TbJf50+pf6yBwmTI7ZgNnkVuCF
3Apm0/kb11+oqPnJK31rVr+JgTB1c2FMnyDj4SE6GpoFNsTg4XGOvZcTAeIdn5N+
1ra13v+FMQfcgxsrFefw/Ko9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6nNV8bcr
kgHT2pJ/xkkkFc6Bum4wHwYDVR0jBBgwFoAUCxWx/aO3alHDJyRBQEvpyYw9YQ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwOUQzLzY1NDBDOTVBNzI0
ODExRURCMjI2MDQ3N0M0RjlBRTAyL0N4V3hfYU8zYWxIREp5UkJRRXZweVl3OVlR
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ3hXeF9hTzNhbEhESnlSQlFFdnB5WXc5WVE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDlEMy82NTQwQzk1QTcyNDgxMUVEQjIyNjA0NzdDNEY5QUUwMi9EMTk4MEI2MDcy
NEIxMUVEQTE1NkI5N0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWd3SDANBgkqhkiG9w0BAQsFAAOCAQEAXAjmrRWAB17vaVTD
rURRkJVeLwO7n0m3vscnicMjWfX2WWyyrjBtF3HhCHCG3K+EOGNPJXS2P/MC+Drf
D7P4gVXde+5kh18tvK4bp0Gs+CmdKxvOpEW+4x/C/bcy+37qP6Ne/DEsZAmpLZtw
iS89Ej4eDuSKp3BTGN9E4qlQRgdQYHXlvH5+S5Xogt/ueUXcooY+TzBfuBfwRnFy
ZFb7z/pAQiuoGItL78VG6sZkKmORJapw36NVRp/n0oYvywRDwbGtb0XQfKyKx6jA
YjM5/wuzQmNpsGMZu7KLl6HSSkdih6haucTrb9i7gWr/uSculZ9y6TWiXRMZtYuO
dewlww==
-----END CERTIFICATE-----
Generated at Wed Jan 31 09:31:28 2024 by rpki-client on console-ams.rpki-client.org