Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/65D05E8427EA11ECB1EBEA82C4F9AE02.roa
File: 65D05E8427EA11ECB1EBEA82C4F9AE02.roa (raw, json)
Hash identifier: HtdAqZuIKXWCIguUW/SEwzEzshhSqEkVQAJhzqqFp6s=
Subject key identifier: 90:FF:78:05:0A:5A:C2:E8:C0:36:05:A3:D9:7D:14:8B:80:10:EF:99
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 098E
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/65D05E8427EA11ECB1EBEA82C4F9AE02.roa
Signing time: Fri 23 Feb 2024 09:59:19 +0000
ROA not before: Fri 23 Feb 2024 09:59:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24462
IP address blocks: 101.78.204.0/22 maxlen: 24
116.92.130.0/24 maxlen: 24
203.174.32.0/24 maxlen: 24
220.232.190.0/24 maxlen: 24
220.232.228.0/24 maxlen: 24
220.232.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 04:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Feb 23 09:59:19 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d86c76-345f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:68:df:e0:6c:c1:87:ad:4c:b9:5c:81:7c:
c0:be:58:84:dd:32:f3:a3:5c:b2:58:5a:3b:bc:c0:
8b:ec:31:05:52:16:d4:b8:c8:2e:77:6a:44:34:27:
d6:f3:be:fe:83:bb:49:62:d4:b6:0c:46:fe:55:ec:
22:6a:c5:44:9d:e2:9c:94:9b:0c:bf:87:fb:34:dd:
6c:c8:bb:42:22:7e:c7:1a:d7:bf:da:6e:dc:79:97:
28:ea:b0:a9:00:7b:e8:1f:1f:13:60:1c:80:18:da:
7a:38:10:c7:07:c2:f4:39:8a:35:1e:5f:9b:47:6e:
01:a9:a4:ee:f6:e2:61:cb:18:50:ca:95:b4:db:b9:
8f:4a:95:2d:87:f8:8d:17:39:93:7c:e1:99:17:3a:
08:13:2b:b9:46:c5:9c:e5:1c:c6:f7:3d:89:18:0e:
88:2c:04:16:00:04:db:ed:06:ed:00:df:98:dd:56:
5c:d6:7e:ad:15:7a:12:ed:41:66:a4:f8:4f:09:b2:
69:e3:a0:cf:b7:1d:04:ca:5a:1c:fa:1c:c6:18:08:
fa:5e:a9:d1:d9:fd:6e:08:f2:c6:d9:6f:5c:ad:0d:
f9:2b:85:a6:4b:a0:26:cc:bd:3a:72:0e:6a:88:80:
4a:e4:78:92:f0:1b:0d:60:f0:7f:d2:f2:69:9f:29:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:78:05:0A:5A:C2:E8:C0:36:05:A3:D9:7D:14:8B:80:10:EF:99
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/65D05E8427EA11ECB1EBEA82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.78.204.0/22
116.92.130.0/24
203.174.32.0/24
220.232.190.0/24
220.232.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:45:ff:a9:58:43:08:e7:7c:b6:72:b4:e9:e2:b5:42:de:9c:
35:d3:78:9b:33:e1:b7:9c:4e:1b:84:d7:84:0e:84:e6:35:45:
90:04:8f:0a:f9:74:94:c6:99:21:39:e9:c8:4a:9a:04:67:2d:
fb:1b:c9:f9:45:ea:92:0d:3d:d1:5a:ce:4b:43:80:20:d1:b5:
4c:96:c6:e3:5e:53:11:70:96:b9:d8:cb:6d:30:3d:7c:f1:58:
97:d4:61:02:6c:c4:ad:2d:62:50:d3:d1:71:f2:59:7d:44:fa:
c3:35:89:95:4c:3b:3a:a5:8c:85:09:6e:2c:16:52:9b:d8:62:
7d:60:ed:16:f4:6a:8e:8d:b4:54:c3:a5:31:bd:a3:f3:89:97:
c8:a5:46:95:04:e0:f5:10:53:d6:c0:1e:2d:7f:a2:6a:0d:27:
b6:df:b0:14:8b:99:f2:5b:af:ef:81:fe:d6:f9:a4:91:1a:ec:
bf:62:50:9a:b1:b1:35:6e:f9:d9:f3:16:9d:fc:ca:d9:75:73:
0d:e9:58:dc:e2:da:ed:69:09:f1:c9:97:ad:2c:61:49:16:b0:
46:f3:45:83:52:15:85:00:03:9a:d7:be:3e:53:f2:c7:e4:82:
8b:12:fd:b7:aa:0f:37:2f:5b:78:cf:2a:b6:05:21:45:ca:3b:
ce:f8:6a:eb
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4
RThDRUI3NUYwHhcNMjQwMjIzMDk1OTE5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ4NmM3Ni0zNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/to3+BswYetTLlcgXzAvliE3TLzo1yyWFo7vMCL7DEFUhbUuMgud2pENCfW
877+g7tJYtS2DEb+VewiasVEneKclJsMv4f7NN1syLtCIn7HGte/2m7ceZco6rCp
AHvoHx8TYByAGNp6OBDHB8L0OYo1Hl+bR24BqaTu9uJhyxhQypW027mPSpUth/iN
FzmTfOGZFzoIEyu5RsWc5RzG9z2JGA6ILAQWAATb7QbtAN+Y3VZc1n6tFXoS7UFm
pPhPCbJp46DPtx0Eyloc+hzGGAj6XqnR2f1uCPLG2W9crQ35K4WmS6AmzL06cg5q
iIBK5HiS8BsNYPB/0vJpnynbRwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJD/eAUK
WsLowDYFo9l9FIuAEO+ZMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4
MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJCMUUvODkzNkNDMDQ4ODMyMTFFQTg0ODYxQjcwQzRGOUFFMDIvNjVEMDVFODQy
N0VBMTFFQ0IxRUJFQTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAJlTswDBAB0XIIDBADLriADBADc6L4DBAHc6OQwDQYJKoZI
hvcNAQELBQADggEBAI1F/6lYQwjnfLZytOnitULenDXTeJsz4becThuE14QOhOY1
RZAEjwr5dJTGmSE56chKmgRnLfsbyflF6pINPdFazktDgCDRtUyWxuNeUxFwlrnY
y20wPXzxWJfUYQJsxK0tYlDT0XHyWX1E+sM1iZVMOzqljIUJbiwWUpvYYn1g7Rb0
ao6NtFTDpTG9o/OJl8ilRpUE4PUQU9bAHi1/omoNJ7bfsBSLmfJbr++B/tb5pJEa
7L9iUJqxsTVu+dnzFp38ytl1cw3pWNzi2u1pCfHJl60sYUkWsEbzRYNSFYUAA5rX
vj5T8sfkgosS/beqDzcvW3jPKrYFIUXKO874aus=
-----END CERTIFICATE-----
Generated at Mon Mar 25 05:37:44 2024 by rpki-client on console-fra.rpki-client.org