Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A3265ED0DF3E11EC83CCFE1EC4F9AE02.roa
File: A3265ED0DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier: xyUrmuuYLqghHnGNnBhklbQvkS2+j7kuKQjXyl7D6SA=
Subject key identifier: 12:F9:E9:E3:4E:4C:4D:80:D0:DB:B8:B0:CC:07:46:C7:FE:0D:DE:9C
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 03A9
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A3265ED0DF3E11EC83CCFE1EC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:14 +0000
ROA not before: Wed 31 Jul 2024 02:33:14 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 9891
IP address blocks: 147.50.224.0/19 maxlen: 19
147.50.224.0/22 maxlen: 22
147.50.228.0/24 maxlen: 24
147.50.230.0/24 maxlen: 24
147.50.231.0/24 maxlen: 24
147.50.232.0/22 maxlen: 22
147.50.236.0/23 maxlen: 23
147.50.238.0/24 maxlen: 24
147.50.239.0/24 maxlen: 24
147.50.240.0/22 maxlen: 22
147.50.246.0/24 maxlen: 24
147.50.247.0/24 maxlen: 24
147.50.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 25 Oct 2024 02:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: Jul 31 02:33:14 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a269-73e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:8f:99:1b:e1:00:19:82:30:a0:69:8d:ba:
68:a5:68:95:ec:98:18:3f:1d:1d:e0:d5:26:4b:3e:
d3:5f:fd:a9:e3:c4:52:03:42:b8:a8:32:5d:ab:68:
ed:e7:f3:ab:cd:fb:49:02:37:e7:11:4d:b3:89:7b:
cf:c7:29:60:6f:9d:41:3d:dd:ba:86:3c:28:47:1f:
fb:ef:ae:3c:33:b8:4b:54:62:49:d2:ea:a4:ec:3c:
b2:96:ae:00:8a:fc:5e:80:56:0c:75:8b:c5:11:11:
cf:a1:c0:2c:50:32:cb:fc:49:a4:cc:65:89:14:41:
40:82:a0:4c:4b:8a:4e:73:85:af:03:2f:34:96:8d:
df:7d:35:19:70:60:87:97:2f:56:ae:4f:0c:14:e3:
8a:dd:b1:cf:96:f6:75:83:40:0e:5b:89:c5:09:36:
86:16:a1:e5:7e:bb:68:f0:2b:b1:ca:a8:7f:a5:34:
ec:62:88:91:13:80:03:6d:fe:37:38:ec:86:b4:32:
a5:66:66:35:a5:95:52:21:fa:ec:67:4f:2e:31:51:
ae:b4:f1:ea:4a:af:4c:bc:e7:f4:c2:00:56:92:6b:
f5:ce:34:f3:a3:88:4a:70:c2:ba:c3:a8:d0:ab:0c:
f5:5e:86:0b:a2:7d:c5:b3:89:bd:a5:19:c0:88:4a:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:E9:E3:4E:4C:4D:80:D0:DB:B8:B0:CC:07:46:C7:FE:0D:DE:9C
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A3265ED0DF3E11EC83CCFE1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:c8:7d:fa:c1:4e:02:64:6f:e2:1e:25:00:c5:73:01:9b:c3:
74:a8:18:ae:71:f0:8f:af:73:f0:c0:00:94:ec:a3:44:46:17:
3d:9f:96:95:72:09:12:5b:e9:30:c2:15:46:e6:86:ce:9a:75:
5b:cb:2e:d1:f8:80:41:9d:dd:87:97:ca:0e:05:66:17:b6:c2:
84:ad:a7:23:f9:6e:27:df:d0:9d:46:f0:ec:10:b3:44:b5:38:
39:d4:ef:55:ee:3c:0b:96:63:74:86:4c:61:a4:07:d6:69:4e:
10:d5:87:e6:da:fd:97:6a:ca:e6:98:a8:d1:e4:c4:bc:44:ca:
44:34:69:6e:ad:ee:9c:8d:55:5d:a4:dc:8f:ad:de:6f:5d:46:
0d:61:0b:25:1b:28:24:58:e5:78:d4:77:38:b9:27:42:37:a7:
69:ce:a3:3e:70:0e:0b:b8:13:07:67:1f:3e:22:4b:82:92:7e:
b6:3b:38:64:6f:a8:7e:2a:d4:59:e4:59:4b:15:27:a0:ec:24:
e9:bf:b9:db:77:dc:8c:63:02:97:c1:78:45:23:0c:3d:fa:9a:
2a:4e:a6:e7:e0:a6:96:b1:73:50:7f:0f:b9:3f:32:c5:24:67:
d9:b8:45:55:5c:f3:3b:1d:e4:00:61:fd:20:69:13:c8:e0:07:
2e:5c:da:7a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjQwNzMxMDIzMzE0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5YTI2OS03M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4MWPmRvhABmCMKBpjbpopWiV7JgYPx0d4NUmSz7TX/2p48RSA0K4qDJdq2jt
5/OrzftJAjfnEU2ziXvPxylgb51BPd26hjwoRx/77648M7hLVGJJ0uqk7Dyylq4A
ivxegFYMdYvFERHPocAsUDLL/EmkzGWJFEFAgqBMS4pOc4WvAy80lo3ffTUZcGCH
ly9Wrk8MFOOK3bHPlvZ1g0AOW4nFCTaGFqHlfrto8Cuxyqh/pTTsYoiRE4ADbf43
OOyGtDKlZmY1pZVSIfrsZ08uMVGutPHqSq9MvOf0wgBWkmv1zjTzo4hKcMK6w6jQ
qwz1XoYLon3Fs4m9pRnAiEpUlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBL56eNO
TE2A0Nu4sMwHRsf+Dd6cMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQTMyNjVFRDBE
RjNFMTFFQzgzQ0NGRTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAWTMuAwDQYJKoZIhvcNAQELBQADggEBAKvIffrBTgJkb+Ie
JQDFcwGbw3SoGK5x8I+vc/DAAJTso0RGFz2flpVyCRJb6TDCFUbmhs6adVvLLtH4
gEGd3YeXyg4FZhe2woStpyP5biff0J1G8OwQs0S1ODnU71XuPAuWY3SGTGGkB9Zp
ThDVh+ba/ZdqyuaYqNHkxLxEykQ0aW6t7pyNVV2k3I+t3m9dRg1hCyUbKCRY5XjU
dzi5J0I3p2nOoz5wDgu4EwdnHz4iS4KSfrY7OGRvqH4q1FnkWUsVJ6DsJOm/udt3
3IxjApfBeEUjDD36mipOpufgppaxc1B/D7k/MsUkZ9m4RVVc8zsd5ABh/SBpE8jg
By5c2no=
-----END CERTIFICATE-----
Generated at Fri Oct 25 06:22:37 2024 by rpki-client on console-ams.rpki-client.org