Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BBC9283E4B6E11EFA3355126C4F9AE02.roa
File: BBC9283E4B6E11EFA3355126C4F9AE02.roa (raw, json)
Hash identifier: Gf/H8Po+ofIn0xr/nHh9kN7psgvSpKDfhbXGACr7zhc=
Subject key identifier: 9F:45:60:E0:D8:89:0D:49:83:50:18:12:0D:5B:74:1B:04:DE:C1:60
Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial: 0496
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BBC9283E4B6E11EFA3355126C4F9AE02.roa
Signing time: Fri 26 Jul 2024 16:47:24 +0000
ROA not before: Fri 26 Jul 2024 16:47:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.116.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 18:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174 (0x496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Validity
Not Before: Jul 26 16:47:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66a3d31c-8961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:28:f5:c0:63:6f:e0:b4:46:7a:31:be:f0:
95:c8:c5:59:6c:8f:fa:f7:87:9f:b8:13:22:be:09:
92:d7:78:2c:f6:80:58:8b:41:ac:f8:3b:fb:c6:d2:
8b:69:35:85:11:e9:53:dc:7d:eb:38:74:0d:3e:1c:
38:5d:3a:03:6d:9d:9a:f0:d5:db:d9:63:fc:0d:50:
d7:49:96:26:3c:1d:16:7f:5a:24:4f:cb:d0:69:03:
b2:b3:5b:41:f0:53:79:ea:2e:e7:34:68:b2:49:5b:
fd:f4:ea:9c:e6:a7:d2:6d:40:e2:06:13:34:c5:43:
e4:fc:07:69:df:82:2a:52:c3:c9:ca:be:90:6e:87:
21:7d:ae:de:3a:28:b7:05:46:5d:f7:87:24:4a:e9:
fe:c1:d1:de:0b:27:79:50:2a:ba:4b:8d:30:c0:79:
8f:35:cd:9b:e4:a0:75:5f:4c:c0:cc:97:ea:e3:09:
54:7e:38:af:12:0b:00:97:a9:19:ab:21:24:a4:64:
ad:60:13:92:31:6d:ab:f4:72:ec:87:a9:64:00:bc:
1b:2d:03:01:71:33:bc:10:e7:51:00:95:88:89:a8:
4c:5d:db:2a:fd:28:75:e8:30:ae:a3:aa:61:54:d1:
6c:cf:d9:b6:65:ae:38:64:b4:6f:89:56:d2:90:8a:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:60:E0:D8:89:0D:49:83:50:18:12:0D:5B:74:1B:04:DE:C1:60
X509v3 Authority Key Identifier:
keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BBC9283E4B6E11EFA3355126C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f4:fd:12:ed:8e:ce:22:8c:e7:a1:92:e9:d2:99:7d:ec:ae:
56:06:57:ed:56:19:49:14:d0:4b:45:99:d3:b3:a1:94:52:f6:
cb:9a:6a:a7:8e:68:a3:f9:b7:43:2f:97:f3:d8:24:6e:b6:2e:
c3:3d:17:e0:5f:e3:f4:df:7a:38:1a:89:20:dc:f5:a2:f5:d1:
62:9e:8b:d4:dd:c2:31:c6:81:12:1c:e8:a4:68:23:32:44:22:
61:2f:68:a1:47:74:f6:0d:f2:dc:5f:7f:0a:56:8f:5c:3c:79:
6f:72:78:de:7b:d6:b1:8f:38:50:f7:eb:c1:0f:27:5d:91:0a:
cf:ab:5b:b2:90:50:be:2c:ef:a9:90:06:4d:d0:ee:49:e6:d2:
ce:6f:27:2c:c2:ed:74:af:11:9c:69:2d:36:b5:d6:c7:26:0d:
de:02:40:76:c8:a9:c2:8d:83:5a:bb:5c:b0:e1:c8:79:62:88:
77:99:63:64:f1:d0:00:66:66:60:d7:0c:3c:09:d2:a0:6c:a6:
b3:65:9b:68:b7:dc:61:bb:e9:d0:e6:61:fc:a5:d4:a9:7f:ff:
73:f1:11:4b:91:ac:6e:85:ad:4c:f5:f2:cb:99:64:b5:df:ad:
f7:9f:28:3c:a2:36:e2:fe:e5:3a:88:ba:9a:cd:92:6d:5a:11:
4e:ac:9b:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG
NjZENEM3MzUwHhcNMjQwNzI2MTY0NzI0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmEzZDMxYy04OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvMo9cBjb+C0RnoxvvCVyMVZbI/694efuBMivgmS13gs9oBYi0Gs+Dv7xtKL
aTWFEelT3H3rOHQNPhw4XToDbZ2a8NXb2WP8DVDXSZYmPB0Wf1okT8vQaQOys1tB
8FN56i7nNGiySVv99Oqc5qfSbUDiBhM0xUPk/Adp34IqUsPJyr6Qbochfa7eOii3
BUZd94ckSun+wdHeCyd5UCq6S40wwHmPNc2b5KB1X0zAzJfq4wlUfjivEgsAl6kZ
qyEkpGStYBOSMW2r9HLsh6lkALwbLQMBcTO8EOdRAJWIiahMXdsq/Sh16DCuo6ph
VNFsz9m2Za44ZLRviVbSkIopqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ9FYODY
iQ1Jg1AYEg1bdBsE3sFgMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG
MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjIwMzkvRkI3MERGNkFGRjIwMTFFQjgxNjBBQzUxQzRGOUFFMDIvQkJDOTI4M0U0
QjZFMTFFRkEzMzU1MTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABndAYwDQYJKoZIhvcNAQELBQADggEBAID0/RLtjs4ijOeh
kunSmX3srlYGV+1WGUkU0EtFmdOzoZRS9suaaqeOaKP5t0Mvl/PYJG62LsM9F+Bf
4/TfejgaiSDc9aL10WKei9TdwjHGgRIc6KRoIzJEImEvaKFHdPYN8txffwpWj1w8
eW9yeN571rGPOFD368EPJ12RCs+rW7KQUL4s76mQBk3Q7knm0s5vJyzC7XSvEZxp
LTa11scmDd4CQHbIqcKNg1q7XLDhyHliiHeZY2Tx0ABmZmDXDDwJ0qBsprNlm2i3
3GG76dDmYfyl1Kl//3PxEUuRrG6FrUz18suZZLXfrfefKDyiNuL+5TqIuprNkm1a
EU6sm6E=
-----END CERTIFICATE-----
Generated at Fri Jul 26 19:56:54 2024 by rpki-client on console-fra.rpki-client.org