Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/1DE889D464F711EDB4394F14C4F9AE02.roa
File: 1DE889D464F711EDB4394F14C4F9AE02.roa (raw, json)
Hash identifier: NRLxl4+aJLNU6t8xavbkyUo6a82xhi37L/PfJHxjFhw=
Subject key identifier: 54:1D:B8:A1:4B:51:97:6A:87:C7:DB:FA:F2:1C:D6:98:CC:46:A1:FB
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 0A76
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/1DE889D464F711EDB4394F14C4F9AE02.roa
Signing time: Tue 30 May 2023 21:01:32 +0000
ROA not before: Tue 30 May 2023 21:01:32 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 139294
IP address blocks: 103.113.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 09:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678 (0xa76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: May 30 21:01:32 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6476642c-615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:a3:39:f6:29:ae:87:61:24:00:86:7c:1e:
84:1d:2f:d0:d4:6d:6a:3f:31:3d:27:ee:c2:46:c1:
cb:51:53:61:4b:0a:06:62:23:bc:bf:b4:34:31:4e:
97:5e:c6:12:ff:dd:1a:68:4d:45:54:40:ae:54:03:
9f:9f:f3:8e:e3:f4:3e:9a:36:23:61:be:5f:95:b3:
ac:0c:c6:7f:a6:6f:a0:fb:47:a6:db:c9:ae:19:a3:
38:18:bc:fb:0b:4b:65:9c:e0:a3:51:d9:50:5b:82:
21:06:9b:85:57:f0:e5:2b:aa:9d:9e:62:09:67:fd:
0b:42:00:6f:b5:01:1e:9d:6e:81:34:17:e5:32:aa:
09:26:10:91:a2:a9:59:d4:22:ac:18:98:87:8f:76:
d4:e0:56:56:16:25:7a:d8:2e:6a:9a:71:20:3f:1c:
bc:eb:2b:ea:a6:54:5d:73:41:e4:f0:b7:c6:5e:f9:
55:3b:6a:75:60:0c:df:5f:cc:26:93:35:50:e2:19:
43:b2:40:dd:4f:01:39:a4:31:d4:de:1a:06:a0:c7:
11:ef:6f:00:db:c0:74:4f:6e:50:82:f8:41:f5:3b:
22:70:f9:26:58:2e:fe:37:82:03:e9:90:4d:b4:4d:
15:b7:bc:6f:b5:37:09:34:92:0a:31:4b:7b:69:6a:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:B8:A1:4B:51:97:6A:87:C7:DB:FA:F2:1C:D6:98:CC:46:A1:FB
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/1DE889D464F711EDB4394F14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.210.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e9:99:07:95:92:92:2f:8e:99:bc:4c:91:19:3b:73:07:10:
d7:91:ec:5b:92:2a:0a:a3:4e:32:01:2e:e0:30:e5:d3:66:28:
7a:22:44:34:42:91:7d:48:9f:7b:00:de:44:05:ab:ca:66:4e:
5b:9f:ea:1b:d6:ab:59:b6:13:11:10:5c:1c:5d:65:d6:b1:6e:
53:14:cc:01:09:39:8e:a5:cc:2a:5e:24:cb:a1:34:e6:d3:f2:
30:d8:9a:ca:6d:dc:d6:9f:52:93:22:cd:85:4e:ea:fe:69:84:
99:0b:b1:5c:58:ba:43:8c:67:2c:d7:f4:4d:9a:0e:6b:b3:4b:
04:31:39:b2:58:17:e2:14:20:4d:f7:8d:f8:75:f9:dc:84:a6:
25:74:d7:78:9f:7a:af:9f:ab:c0:dc:11:cc:a5:34:ca:bc:4d:
55:71:9b:70:a0:69:05:48:cd:f3:0f:c9:43:08:33:28:71:26:
27:7e:05:e0:d6:f4:39:54:64:34:40:4d:34:c5:db:d4:e4:74:
58:b6:a9:da:5b:2b:01:cb:51:dc:5a:3a:fd:23:71:a1:27:43:
fe:a4:a8:56:d2:0e:8c:9a:6f:f2:35:40:15:4f:20:7f:98:cc:
2e:37:5e:a5:66:96:b4:43:cd:ab:8f:c9:53:a7:21:26:58:93:
ba:39:49:77
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBQUQxMTAvBgNVBAUTKERERjg4NDkxMUFEM0YyOENDOUQ5NkE4QzI0QTkzOUE2
NUY4QjI1NzYwHhcNMjMwNTMwMjEwMTMyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc2NjQyYy02MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyIGjOfYprodhJACGfB6EHS/Q1G1qPzE9J+7CRsHLUVNhSwoGYiO8v7Q0MU6X
XsYS/90aaE1FVECuVAOfn/OO4/Q+mjYjYb5flbOsDMZ/pm+g+0em28muGaM4GLz7
C0tlnOCjUdlQW4IhBpuFV/DlK6qdnmIJZ/0LQgBvtQEenW6BNBflMqoJJhCRoqlZ
1CKsGJiHj3bU4FZWFiV62C5qmnEgPxy86yvqplRdc0Hk8LfGXvlVO2p1YAzfX8wm
kzVQ4hlDskDdTwE5pDHU3hoGoMcR728A28B0T25QgvhB9TsicPkmWC7+N4ID6ZBN
tE0Vt7xvtTcJNJIKMUt7aWqkFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFQduKFL
UZdqh8fb+vIc1pjMRqH7MB8GA1UdIwQYMBaAFN34hJEa0/KMydlqjCSpOaZfiyV2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBRC81MjFBRERDODE4
NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhvekoyV3FNSktrNXBsLUxK
WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNmaUVrUnJUOG96SjJXcU1KS2s1cGwtTEpYWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkJBQUQvNTIxQUREQzgxODQ4MTFFQTkwNzg1NjJCQzRGOUFFMDIvMURFODg5RDQ2
NEY3MTFFREI0Mzk0RjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncdIwDQYJKoZIhvcNAQELBQADggEBABLpmQeVkpIvjpm8
TJEZO3MHENeR7FuSKgqjTjIBLuAw5dNmKHoiRDRCkX1In3sA3kQFq8pmTluf6hvW
q1m2ExEQXBxdZdaxblMUzAEJOY6lzCpeJMuhNObT8jDYmspt3NafUpMizYVO6v5p
hJkLsVxYukOMZyzX9E2aDmuzSwQxObJYF+IUIE33jfh1+dyEpiV013ifeq+fq8Dc
EcylNMq8TVVxm3CgaQVIzfMPyUMIMyhxJid+BeDW9DlUZDRATTTF29TkdFi2qdpb
KwHLUdxaOv0jcaEnQ/6kqFbSDoyab/I1QBVPIH+YzC43XqVmlrRDzauPyVOnISZY
k7o5SXc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org