Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/5C8B6670E4DA11EEA210A22CC4F9AE02.roa
File: 5C8B6670E4DA11EEA210A22CC4F9AE02.roa (raw, json)
Hash identifier: ZOP85BV35XX6yYXgugmd3TpmBe0ONCbgEO6aIXjRqEc=
Subject key identifier: AB:89:DC:97:AC:15:3F:66:E2:D0:CC:BC:4E:69:A5:56:68:F0:52:08
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 09A0
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/5C8B6670E4DA11EEA210A22CC4F9AE02.roa
Signing time: Mon 18 Mar 2024 03:48:20 +0000
ROA not before: Mon 18 Mar 2024 03:48:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39743
IP address blocks: 202.64.9.0/24 maxlen: 24
202.64.13.0/24 maxlen: 24
202.64.19.0/24 maxlen: 24
202.64.31.0/24 maxlen: 24
202.64.42.0/24 maxlen: 24
218.253.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 03:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464 (0x9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Mar 18 03:48:20 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f7b984-da11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:ad:06:7d:b6:bf:4e:0d:1c:5a:05:f2:aa:
1e:c6:03:41:8e:f1:00:f2:a4:64:5b:f9:da:43:79:
7b:bc:41:a4:e2:e1:f4:dc:cb:08:5c:52:08:24:93:
e7:3c:66:90:e8:72:04:47:a8:cd:8a:ac:8d:01:5e:
3c:07:b2:2c:aa:4c:28:89:1e:b2:4e:6f:7f:e0:be:
96:0a:e2:70:d6:9b:a2:8a:7e:b2:ab:ca:73:39:c9:
6f:38:39:6f:5e:20:c4:47:b6:53:a0:e9:a4:8c:34:
b2:fc:86:38:5a:dc:09:9a:91:7b:fc:98:29:be:4b:
d4:f4:98:5f:0d:fe:d2:4c:50:2b:91:ee:a8:e8:8d:
a2:d7:09:d3:bf:e8:56:04:bb:79:31:da:bf:84:34:
df:ec:dc:40:58:b4:69:e6:85:89:1a:de:ec:58:c7:
63:e6:24:41:9b:a3:2f:da:c0:8a:00:14:d4:e4:a5:
bc:af:bd:73:6b:78:ec:74:68:33:79:14:35:c8:f2:
a4:74:0f:fa:6b:e8:01:cf:95:03:78:76:b3:07:fe:
34:31:79:ca:00:ef:db:65:69:1e:c4:13:f9:09:af:
84:d0:18:ca:5a:2f:87:f2:a9:eb:2a:75:06:10:33:
f5:d1:9d:01:4f:7e:6c:95:10:50:e2:f7:6a:bf:2e:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:DC:97:AC:15:3F:66:E2:D0:CC:BC:4E:69:A5:56:68:F0:52:08
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/5C8B6670E4DA11EEA210A22CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.64.9.0/24
202.64.13.0/24
202.64.19.0/24
202.64.31.0/24
202.64.42.0/24
218.253.216.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:e7:c8:2d:d3:b1:5d:cc:ea:c3:85:dd:7b:06:20:8d:06:e1:
3a:28:a7:ab:96:37:24:9d:ee:a9:68:65:4a:f1:0c:25:eb:b8:
dc:45:4f:4b:ab:0c:d1:80:b3:13:08:b0:85:ad:20:7e:eb:ce:
27:16:30:06:b2:87:35:84:cc:fd:e4:55:fd:a8:a8:c6:ef:db:
8b:1b:77:9d:f1:47:d0:fe:eb:f9:c1:c2:2e:04:4b:21:8c:df:
19:28:3d:92:f7:3e:dd:10:fc:f9:be:0d:c4:14:e3:81:73:60:
0c:ac:cb:55:6f:c8:4b:52:90:32:d6:eb:e0:7d:db:69:66:72:
ee:1f:66:cd:b2:61:15:b3:1b:9e:80:6c:e0:3f:ae:5d:31:e6:
91:aa:fd:ce:90:13:28:65:be:3d:1f:91:c8:d7:72:86:59:cc:
89:27:53:b8:eb:1e:b6:03:a3:c6:12:80:16:93:a6:99:06:20:
d9:5b:93:b0:61:4d:8e:f8:e4:1c:2a:18:a8:a5:8b:89:f9:e4:
85:20:50:de:e9:31:14:2a:e1:c5:8a:f0:56:5f:00:5a:16:91:
e8:c1:6e:d7:75:9e:d5:3d:5a:5e:1d:dc:2c:1c:c7:f0:29:3a:
bc:58:32:33:a0:ab:f7:43:1c:07:99:9f:59:36:6f:ae:cf:75:
9e:30:5f:c0
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4
RThDRUI3NUYwHhcNMjQwMzE4MDM0ODIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWY3Yjk4NC1kYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1zStBn22v04NHFoF8qoexgNBjvEA8qRkW/naQ3l7vEGk4uH03MsIXFIIJJPn
PGaQ6HIER6jNiqyNAV48B7IsqkwoiR6yTm9/4L6WCuJw1puiin6yq8pzOclvODlv
XiDER7ZToOmkjDSy/IY4WtwJmpF7/JgpvkvU9JhfDf7STFArke6o6I2i1wnTv+hW
BLt5Mdq/hDTf7NxAWLRp5oWJGt7sWMdj5iRBm6Mv2sCKABTU5KW8r71za3jsdGgz
eRQ1yPKkdA/6a+gBz5UDeHazB/40MXnKAO/bZWkexBP5Ca+E0BjKWi+H8qnrKnUG
EDP10Z0BT35slRBQ4vdqvy7b/QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFKuJ3Jes
FT9m4tDMvE5ppVZo8FIIMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4
MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJCMUUvODkzNkNDMDQ4ODMyMTFFQTg0ODYxQjcwQzRGOUFFMDIvNUM4QjY2NzBF
NERBMTFFRUEyMTBBMjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBADKQAkDBADKQA0DBADKQBMDBADKQB8DBADKQCoDBAHa/dgw
DQYJKoZIhvcNAQELBQADggEBAC7nyC3TsV3M6sOF3XsGII0G4Toop6uWNySd7qlo
ZUrxDCXruNxFT0urDNGAsxMIsIWtIH7rzicWMAayhzWEzP3kVf2oqMbv24sbd53x
R9D+6/nBwi4ESyGM3xkoPZL3Pt0Q/Pm+DcQU44FzYAysy1VvyEtSkDLW6+B922lm
cu4fZs2yYRWzG56AbOA/rl0x5pGq/c6QEyhlvj0fkcjXcoZZzIknU7jrHrYDo8YS
gBaTppkGINlbk7BhTY745BwqGKili4n55IUgUN7pMRQq4cWK8FZfAFoWkejBbtd1
ntU9Wl4d3Cwcx/ApOrxYMjOgq/dDHAeZn1k2b67PdZ4wX8A=
-----END CERTIFICATE-----
Generated at Mon Mar 18 05:01:09 2024 by rpki-client on console-ams.rpki-client.org