Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F5ABE4F02C3A11EE9504313BC4F9AE02.roa
File: F5ABE4F02C3A11EE9504313BC4F9AE02.roa (raw, json)
Hash identifier: e4WGs5H6IdQ2LbWpmPWHTNDjNQucTgGMnJP/zpfJH+A=
Subject key identifier: 2F:FD:D2:F7:A6:CD:BB:4E:CF:46:29:E3:28:3D:C1:65:E2:6B:40:C7
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3717
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F5ABE4F02C3A11EE9504313BC4F9AE02.roa
Signing time: Thu 27 Jul 2023 05:03:44 +0000
ROA not before: Thu 27 Jul 2023 05:03:44 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 17552
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
61.90.0.0/17 maxlen: 24
61.91.128.0/21 maxlen: 24
61.91.144.0/21 maxlen: 24
61.91.190.0/24 maxlen: 24
61.91.191.0/24 maxlen: 24
61.91.192.0/24 maxlen: 24
61.91.193.0/24 maxlen: 24
61.91.201.0/24 maxlen: 24
61.91.214.0/24 maxlen: 24
110.168.0.0/17 maxlen: 24
110.168.128.0/17 maxlen: 24
110.169.0.0/16 maxlen: 24
110.171.0.0/17 maxlen: 24
110.171.128.0/17 maxlen: 24
114.109.0.0/18 maxlen: 24
114.109.64.0/18 maxlen: 24
114.109.128.0/18 maxlen: 24
114.109.192.0/18 maxlen: 24
115.87.0.0/18 maxlen: 24
115.87.64.0/18 maxlen: 24
115.87.128.0/18 maxlen: 24
115.87.192.0/18 maxlen: 24
119.46.255.0/24 maxlen: 24
119.76.0.0/17 maxlen: 24
119.76.128.0/18 maxlen: 24
119.76.192.0/18 maxlen: 24
124.120.0.0/18 maxlen: 24
124.120.64.0/18 maxlen: 24
124.120.128.0/18 maxlen: 24
124.120.192.0/18 maxlen: 24
124.121.0.0/18 maxlen: 24
124.121.64.0/18 maxlen: 24
124.121.128.0/18 maxlen: 24
124.121.192.0/18 maxlen: 24
124.122.0.0/18 maxlen: 24
124.122.64.0/18 maxlen: 24
124.122.128.0/18 maxlen: 24
124.122.192.0/18 maxlen: 24
171.96.0.0/18 maxlen: 24
171.96.64.0/18 maxlen: 24
171.96.128.0/18 maxlen: 24
171.96.192.0/18 maxlen: 24
171.97.0.0/18 maxlen: 24
171.97.64.0/18 maxlen: 24
171.97.128.0/18 maxlen: 24
171.97.192.0/18 maxlen: 24
171.98.0.0/18 maxlen: 24
171.98.64.0/18 maxlen: 24
171.98.128.0/18 maxlen: 24
171.98.192.0/18 maxlen: 24
171.99.0.0/16 maxlen: 16
171.99.0.0/17 maxlen: 24
171.99.128.0/18 maxlen: 24
171.99.192.0/18 maxlen: 24
171.100.0.0/18 maxlen: 24
171.100.64.0/18 maxlen: 24
171.100.128.0/18 maxlen: 24
171.100.192.0/18 maxlen: 24
171.101.0.0/18 maxlen: 24
171.101.64.0/18 maxlen: 24
171.101.128.0/18 maxlen: 24
171.101.192.0/18 maxlen: 24
182.17.0.0/18 maxlen: 24
182.17.64.0/18 maxlen: 24
182.17.128.0/18 maxlen: 24
182.17.192.0/18 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 18
202.176.128.0/19 maxlen: 19
202.176.183.0/24 maxlen: 24
202.176.184.0/24 maxlen: 24
2001:fb1::/32 maxlen: 32
2001:fb1::/44 maxlen: 48
2001:fb1:10::/44 maxlen: 48
2001:fb1:20::/44 maxlen: 48
2001:fb1:30::/44 maxlen: 48
2001:fb1:40::/44 maxlen: 48
2001:fb1:50::/44 maxlen: 48
2001:fb1:60::/44 maxlen: 48
2001:fb1:70::/44 maxlen: 48
2001:fb1:80::/44 maxlen: 48
2001:fb1:90::/44 maxlen: 48
2001:fb1:a0::/44 maxlen: 48
2001:fb1:b0::/44 maxlen: 48
2001:fb1:c0::/44 maxlen: 48
2001:fb1:d0::/44 maxlen: 48
2001:fb1:e0::/44 maxlen: 48
2001:fb1:f0::/44 maxlen: 48
2001:fb1:100::/44 maxlen: 48
2001:fb1:110::/44 maxlen: 48
2001:fb1:120::/44 maxlen: 48
2001:fb1:130::/44 maxlen: 48
2001:fb1:140::/44 maxlen: 48
2001:fb1:150::/44 maxlen: 48
2001:fb1:160::/44 maxlen: 48
2001:fb1:170::/44 maxlen: 48
2001:fb1:180::/44 maxlen: 48
2001:fb1:fc0::/48 maxlen: 48
2001:fb1:fd0::/48 maxlen: 48
2001:fb1:fe0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14103 (0x3717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 27 05:03:44 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c1faaf-f3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:7d:ba:4d:98:59:4c:e1:6d:3e:3d:b0:48:
b2:14:dd:17:b1:90:e2:6f:87:87:2b:63:39:d7:50:
47:d4:27:de:4a:bd:a6:45:35:cc:f7:a0:5e:87:4e:
26:bb:75:2e:4a:bd:08:4b:a8:71:f9:5e:66:04:67:
6e:53:61:5c:70:8e:5a:76:d9:c5:8e:55:a3:00:b9:
78:33:c8:e1:d4:a8:b3:20:1e:e1:7c:49:54:21:9b:
84:b5:a7:ff:a7:c5:2e:e1:95:c8:7d:bf:8e:c6:e9:
05:e6:72:76:e3:99:40:ea:54:d0:61:c1:2e:be:ce:
2a:47:04:70:ce:e4:1d:71:ec:ca:3b:e0:38:95:43:
bd:18:bd:c3:dc:ed:bb:47:ef:d5:35:bb:5d:84:49:
42:43:fe:b7:0a:06:4b:d8:50:a6:61:fb:f8:a7:07:
31:77:57:27:f1:6c:40:86:21:17:f5:6f:7f:11:65:
d8:af:4a:57:f3:8f:03:7e:e6:1b:63:96:76:34:bc:
1e:18:83:6e:93:5d:b0:62:3d:e8:80:cc:69:b4:57:
06:56:40:19:16:ce:34:a8:7f:53:eb:a0:f1:4b:61:
4d:f2:e7:b1:db:9c:5e:a0:17:5e:3f:9b:5c:3c:03:
8b:cc:01:f0:ea:83:b1:f8:e4:4b:75:8c:a2:a9:5c:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FD:D2:F7:A6:CD:BB:4E:CF:46:29:E3:28:3D:C1:65:E2:6B:40:C7
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F5ABE4F02C3A11EE9504313BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
61.90.0.0/17
61.91.128.0/21
61.91.144.0/21
61.91.190.0-61.91.193.255
61.91.201.0/24
61.91.214.0/24
110.168.0.0/15
110.171.0.0/16
114.109.0.0/16
115.87.0.0/16
119.46.255.0/24
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0-171.101.255.255
182.17.0.0/16
202.176.64.0-202.176.191.255
IPv6:
2001:fb1::/32
Signature Algorithm: sha256WithRSAEncryption
9c:a6:f4:2a:82:c7:b9:77:30:b8:de:4c:61:69:aa:53:c1:57:
7f:96:be:e7:e8:34:7c:cf:31:aa:ea:b4:8a:33:8c:f0:85:7c:
b0:bc:23:73:ef:ea:41:9a:94:a1:f1:3d:38:0d:3c:57:98:58:
7d:e1:5c:dc:03:61:15:f6:af:7c:6b:33:83:ff:69:5e:45:e0:
c3:ed:0a:20:a9:73:6d:c8:79:c3:c4:5c:ab:1b:64:9b:4b:21:
ad:25:78:12:a0:3a:1b:53:16:dc:5e:02:ea:5c:97:ce:f9:36:
4e:76:93:f5:03:af:e4:e4:df:44:9b:9c:97:8f:51:2f:ec:3b:
f6:cb:51:ec:77:a0:b4:0e:65:27:57:69:19:01:db:03:d8:34:
2a:76:7e:56:16:ed:9d:4e:18:4c:26:05:5c:56:1a:14:41:de:
31:db:c3:79:3f:51:b7:09:cf:44:f6:b6:85:50:e5:dc:59:a1:
77:89:2b:d7:d7:0a:9e:97:3c:4f:af:a5:d5:61:6b:71:4b:55:
5e:a5:5b:1e:be:c7:3f:dd:33:ad:82:41:27:85:ff:1d:63:a2:
6f:e3:7d:23:d8:c7:e4:f6:63:ba:4e:10:62:02:7d:68:60:f7:
a2:6f:63:b4:25:90:7d:0c:ce:d2:ea:5b:70:d4:2c:1b:30:15:
fc:af:72:f3
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgICNxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzI3MDUwMzQ0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGMxZmFhZi1mM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3y59uk2YWUzhbT49sEiyFN0XsZDib4eHK2M511BH1CfeSr2mRTXM96Beh04m
u3UuSr0IS6hx+V5mBGduU2FccI5adtnFjlWjALl4M8jh1KizIB7hfElUIZuEtaf/
p8Uu4ZXIfb+OxukF5nJ245lA6lTQYcEuvs4qRwRwzuQdcezKO+A4lUO9GL3D3O27
R+/VNbtdhElCQ/63CgZL2FCmYfv4pwcxd1cn8WxAhiEX9W9/EWXYr0pX848DfuYb
Y5Z2NLweGINuk12wYj3ogMxptFcGVkAZFs40qH9T66DxS2FN8uex25xeoBdeP5tc
PAOLzAHw6oOx+ORLdYyiqVzcEQIDAQABo4IDIzCCAx8wHQYDVR0OBBYEFC/90vem
zbtOz0Yp4yg9wWXia0DHMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRjVBQkU0RjAy
QzNBMTFFRTk1MDQzMTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgawGCCsGAQUFBwEHAQH/
BIGcMIGZMIGHBAIAATCBgAMDABuRAwMCOggDBAc9WgADBAM9W4ADBAM9W5AwDAME
AT1bvgMEAT1bwAMEAD1byQMEAD1b1gMDAW6oAwMAbqsDAwBybQMDAHNXAwQAdy7/
AwMAd0wwCgMDA3x4AwMAfHowCgMDBatgAwMBq2QDAwC2ETAMAwQGyrBAAwQGyrCA
MA0EAgACMAcDBQAgAQ+xMA0GCSqGSIb3DQEBCwUAA4IBAQCcpvQqgse5dzC43kxh
aapTwVd/lr7n6DR8zzGq6rSKM4zwhXywvCNz7+pBmpSh8T04DTxXmFh94VzcA2EV
9q98azOD/2leReDD7QogqXNtyHnDxFyrG2SbSyGtJXgSoDobUxbcXgLqXJfO+TZO
dpP1A6/k5N9Em5yXj1Ev7Dv2y1Hsd6C0DmUnV2kZAdsD2DQqdn5WFu2dThhMJgVc
VhoUQd4x28N5P1G3Cc9E9raFUOXcWaF3iSvX1wqelzxPr6XVYWtxS1VepVsevsc/
3TOtgkEnhf8dY6Jv430j2Mfk9mO6ThBiAn1oYPeib2O0JZB9DM7S6ltw1CwbMBX8
r3Lz
-----END CERTIFICATE-----
Generated at Thu Jul 27 05:51:19 2023 by rpki-client on console-ams.rpki-client.org