Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/125DDA166FAE11E9B0AA475DC4F9AE02.roa
File: 125DDA166FAE11E9B0AA475DC4F9AE02.roa (raw, json)
Hash identifier: 145ZNSXmy1t0rTo5f8N6jymuPQSBsLjjR/0lARZ6SQA=
Subject key identifier: EA:1E:02:57:33:19:8F:98:46:3E:56:6B:BD:B3:7B:F5:29:DD:03:F8
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 120B
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/125DDA166FAE11E9B0AA475DC4F9AE02.roa
Signing time: Fri 02 Jun 2023 18:18:44 +0000
ROA not before: Fri 02 Jun 2023 18:18:44 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 137877
IP address blocks: 103.116.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4619 (0x120b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Jun 2 18:18:44 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647a3284-62d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:3e:74:1e:f1:8f:46:7e:10:a5:eb:9b:bf:
28:be:14:b0:fd:84:ee:d9:a4:95:95:da:6c:49:d3:
b1:c8:dd:d9:94:eb:d7:ee:3f:80:a0:a1:55:8d:c6:
54:fb:3d:09:02:a3:4d:53:d4:73:80:26:d9:02:c6:
62:68:f5:ad:e8:2b:91:a5:04:52:a8:b9:f5:c4:f5:
a2:58:45:74:de:10:8b:08:84:fc:a5:5e:f6:b4:31:
a5:ca:b5:88:68:15:8a:ad:f7:ae:4a:04:f1:a5:5e:
ac:f4:48:6c:58:bd:f3:b6:b4:9a:4b:50:8a:14:e3:
37:5a:2c:cc:7c:70:77:1c:7c:d1:6f:f9:ea:94:87:
1e:4e:55:78:e3:93:2e:a0:9c:8d:bb:7d:11:b1:28:
c7:84:75:74:86:f8:85:87:b4:f1:cb:82:cb:ad:6e:
9d:7a:b5:3c:21:0d:93:50:c1:76:98:3b:4e:28:8a:
f7:a7:4a:4c:22:3c:92:65:24:ba:57:ab:a1:1f:97:
18:f6:85:a5:6f:11:45:a7:d9:30:d1:ae:a2:1f:e7:
41:e5:f1:a0:50:3b:03:5e:09:96:8d:3d:2f:8c:b7:
95:f5:e7:d0:45:41:89:76:ba:28:cd:f8:52:d6:4b:
d3:00:de:bd:97:85:cd:f1:8f:b1:89:de:85:cf:a4:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:02:57:33:19:8F:98:46:3E:56:6B:BD:B3:7B:F5:29:DD:03:F8
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/125DDA166FAE11E9B0AA475DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:38:0e:ff:ee:01:a4:da:cb:64:d4:22:bf:08:d8:b0:7c:c3:
17:e5:f7:2a:42:0b:5c:09:55:10:d4:21:47:a4:25:a0:72:ab:
25:c7:77:a6:05:e2:e3:1e:2e:f2:90:e9:ef:58:d2:be:ae:1b:
9d:37:6a:63:ac:7a:9e:03:00:3a:04:50:3c:7a:69:b6:24:af:
32:ea:bb:b0:67:e4:39:f3:fc:48:7a:b2:30:97:0b:67:30:ac:
46:81:70:f4:c1:c6:e7:14:97:bf:86:82:d3:0e:04:91:8a:29:
5f:c1:dd:a2:e2:0f:b7:34:16:82:c8:1e:87:54:87:4b:b7:70:
1b:e6:19:49:56:ee:bc:ae:5d:d3:b5:97:9f:8e:f4:3a:99:19:
5f:51:cf:4d:c3:8d:1a:c7:0b:93:fe:c0:8f:b6:8e:c6:d1:ac:
90:d9:b3:37:54:65:3a:6f:0c:53:6a:bc:2e:b6:37:01:b3:76:
d4:a9:71:42:1a:2f:41:74:f3:ad:43:e3:cb:00:a4:b0:33:96:
11:90:e7:ee:7f:bb:dc:05:23:77:0d:da:d1:bf:7e:7e:cf:d7:
b9:dd:c2:3c:e9:65:e7:6d:3f:7e:19:35:3b:3d:7d:fe:38:ef:
7d:46:da:10:95:1b:b3:5e:87:3f:e8:b4:7a:2d:aa:87:7e:92:
dc:50:ae:10
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC
MzVFODU5RjkwHhcNMjMwNjAyMTgxODQ0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDdhMzI4NC02MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqeg+dB7xj0Z+EKXrm78ovhSw/YTu2aSVldpsSdOxyN3ZlOvX7j+AoKFVjcZU
+z0JAqNNU9RzgCbZAsZiaPWt6CuRpQRSqLn1xPWiWEV03hCLCIT8pV72tDGlyrWI
aBWKrfeuSgTxpV6s9EhsWL3ztrSaS1CKFOM3WizMfHB3HHzRb/nqlIceTlV445Mu
oJyNu30RsSjHhHV0hviFh7Txy4LLrW6derU8IQ2TUMF2mDtOKIr3p0pMIjySZSS6
V6uhH5cY9oWlbxFFp9kw0a6iH+dB5fGgUDsDXgmWjT0vjLeV9efQRUGJdroozfhS
1kvTAN69l4XN8Y+xid6Fz6SwSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOoeAlcz
GY+YRj5Wa72ze/Up3QP4MB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez
NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X
ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvMTI1RERBMTY2
RkFFMTFFOUIwQUE0NzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABndC0wDQYJKoZIhvcNAQELBQADggEBAFw4Dv/uAaTay2TU
Ir8I2LB8wxfl9ypCC1wJVRDUIUekJaByqyXHd6YF4uMeLvKQ6e9Y0r6uG503amOs
ep4DADoEUDx6abYkrzLqu7Bn5Dnz/Eh6sjCXC2cwrEaBcPTBxucUl7+GgtMOBJGK
KV/B3aLiD7c0FoLIHodUh0u3cBvmGUlW7ryuXdO1l5+O9DqZGV9Rz03DjRrHC5P+
wI+2jsbRrJDZszdUZTpvDFNqvC62NwGzdtSpcUIaL0F0861D48sApLAzlhGQ5+5/
u9wFI3cN2tG/fn7P17ndwjzpZedtP34ZNTs9ff44731G2hCVG7Nehz/otHotqod+
ktxQrhA=
-----END CERTIFICATE-----
Generated at Tue Mar 26 06:07:05 2024 by rpki-client on console-ams.rpki-client.org