Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/4AB55242457711EEB5D5F024C4F9AE02.roa
File: 4AB55242457711EEB5D5F024C4F9AE02.roa (raw, json)
Hash identifier: ZoLLpigSCsicLIIrf9DOEeBa+VU60ck0nN92xa25hNs=
Subject key identifier: CE:DE:9E:89:A5:A3:F0:6B:6E:62:D3:46:95:2D:FB:98:0F:11:DB:19
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 0628
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/4AB55242457711EEB5D5F024C4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:14:09 +0000
ROA not before: Tue 03 Sep 2024 01:14:09 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 147293
IP address blocks: 103.24.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 23:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 3 01:14:09 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d662e0-4d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:d5:4b:19:e9:01:f9:5f:10:2b:7a:e7:db:
e8:8b:98:22:c6:c3:fe:b4:a9:57:81:d5:76:8e:44:
c7:e1:36:01:2c:43:5f:e0:12:09:ed:20:13:aa:2c:
d8:bc:65:83:09:e1:f5:0a:0b:cc:f6:4c:87:75:eb:
d0:d6:6e:43:d3:ee:b4:1b:45:67:9d:24:55:f1:ae:
a6:21:a2:2d:6c:88:4e:f5:68:93:f1:62:c6:e1:88:
c5:f2:bc:8c:4c:53:a3:a4:c8:4b:a5:49:fa:f8:12:
fd:d1:0d:cb:6f:d9:bc:cb:33:71:01:0e:fb:32:d3:
16:d9:6b:cf:a7:e9:88:d1:35:3b:64:83:94:9f:25:
67:d1:b6:e4:d1:b0:dc:9a:b0:cc:23:ad:96:30:dc:
c7:08:f8:5b:dc:79:92:73:96:22:0b:06:77:37:ea:
4e:88:b2:bd:85:66:52:87:b0:03:03:b0:d6:24:b1:
31:e4:f1:c2:11:51:fc:86:76:a2:52:9a:7f:d6:51:
3b:b9:fc:a1:e6:0f:b3:a9:ba:47:ed:1b:34:b1:90:
9a:97:b6:eb:b4:01:d4:11:03:89:8c:c7:f2:13:92:
d5:95:e0:88:3b:94:10:7e:9d:b5:72:f7:ae:e9:c8:
7c:98:08:c8:3f:1a:2e:61:6e:75:da:bd:17:4b:8e:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:9E:89:A5:A3:F0:6B:6E:62:D3:46:95:2D:FB:98:0F:11:DB:19
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/4AB55242457711EEB5D5F024C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.217.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:bb:27:a6:f4:a5:8e:19:18:87:65:ac:a9:bf:ab:ce:a8:60:
96:c6:8f:42:0c:46:b9:3c:f4:d9:47:55:9c:67:89:96:ec:70:
34:38:76:d3:5f:61:30:4f:a0:0f:74:e5:77:1c:7d:0d:0a:0f:
28:a5:05:7f:b7:e8:84:c1:36:37:0b:27:f8:9e:47:3c:a8:8b:
8b:ab:12:96:f4:ec:79:f6:a4:f0:aa:94:87:4f:b3:c2:1f:5d:
5d:7c:8a:15:36:08:d0:8b:cf:ba:6a:ac:14:1d:4e:51:5f:df:
ba:05:27:7f:eb:b7:49:98:db:83:0e:bd:b9:c2:49:48:ab:fb:
f1:13:ff:62:a4:9a:55:ca:4f:37:ac:cf:12:93:67:00:50:2f:
b7:b1:f6:6c:3f:66:47:e4:d7:14:73:69:3a:a7:08:43:28:a6:
95:05:f5:dc:85:7d:31:c9:26:ee:f8:e1:b9:e1:46:48:40:32:
b8:b0:6e:6c:fb:d2:9b:bb:58:d9:df:de:70:87:e3:da:bf:d7:
be:f3:79:e6:7c:ce:12:4f:c2:18:c6:01:04:06:f4:b9:b8:e3:
c7:00:75:d2:a2:36:f7:3d:f2:97:0d:19:42:89:1b:8f:c8:6d:
26:eb:79:01:24:28:5f:f0:32:11:14:20:e5:f2:7c:28:d3:4a:
67:07:76:69
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF
QTNDNzEwMTMwHhcNMjQwOTAzMDExNDA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2NjJlMC00ZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzxHVSxnpAflfECt659voi5gixsP+tKlXgdV2jkTH4TYBLENf4BIJ7SATqizY
vGWDCeH1CgvM9kyHdevQ1m5D0+60G0VnnSRV8a6mIaItbIhO9WiT8WLG4YjF8ryM
TFOjpMhLpUn6+BL90Q3Lb9m8yzNxAQ77MtMW2WvPp+mI0TU7ZIOUnyVn0bbk0bDc
mrDMI62WMNzHCPhb3HmSc5YiCwZ3N+pOiLK9hWZSh7ADA7DWJLEx5PHCEVH8hnai
Upp/1lE7ufyh5g+zqbpH7Rs0sZCal7brtAHUEQOJjMfyE5LVleCIO5QQfp21cveu
6ch8mAjIPxouYW512r0XS45VbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM7enoml
o/BrbmLTRpUt+5gPEdsZMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2
NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvNEFCNTUyNDI0
NTc3MTFFRUI1RDVGMDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnGNkwDQYJKoZIhvcNAQELBQADggEBAMi7J6b0pY4ZGIdl
rKm/q86oYJbGj0IMRrk89NlHVZxniZbscDQ4dtNfYTBPoA905XccfQ0KDyilBX+3
6ITBNjcLJ/ieRzyoi4urEpb07Hn2pPCqlIdPs8IfXV18ihU2CNCLz7pqrBQdTlFf
37oFJ3/rt0mY24MOvbnCSUir+/ET/2KkmlXKTzeszxKTZwBQL7ex9mw/Zkfk1xRz
aTqnCEMoppUF9dyFfTHJJu744bnhRkhAMriwbmz70pu7WNnf3nCH49q/177zeeZ8
zhJPwhjGAQQG9Lm448cAddKiNvc98pcNGUKJG4/IbSbreQEkKF/wMhEUIOXyfCjT
SmcHdmk=
-----END CERTIFICATE-----
Generated at Mon Sep 30 02:01:09 2024 by rpki-client on console-ams.rpki-client.org