Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/ABAEFEAE6D0411EE878EAE44C4F9AE02.roa
File: ABAEFEAE6D0411EE878EAE44C4F9AE02.roa (raw, json)
Hash identifier: bwCSiKTUVHL8CwOuAXA4avKENLsh6bQK/gpylprxOBw=
Subject key identifier: 96:C0:07:0F:3D:B2:9B:70:1B:0B:28:E7:8A:20:F7:E4:6D:E6:70:00
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 051A
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/ABAEFEAE6D0411EE878EAE44C4F9AE02.roa
Signing time: Wed 18 Oct 2023 12:26:01 +0000
ROA not before: Wed 18 Oct 2023 12:26:01 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 834
IP address blocks: 43.247.135.0/24 maxlen: 24
43.255.120.0/24 maxlen: 24
43.255.122.0/23 maxlen: 24
43.255.156.0/24 maxlen: 24
103.24.216.0/23 maxlen: 24
103.231.56.0/24 maxlen: 24
103.231.58.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 17:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Oct 18 12:26:01 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=652fced9-2fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:31:69:6f:cc:39:cc:f2:e3:cf:5c:eb:2f:
20:20:ad:0e:0e:51:7f:c7:27:77:35:7a:48:f4:f9:
51:c3:6e:43:2f:e1:75:a4:cb:41:a8:1b:ba:6f:96:
af:77:0a:0d:71:dc:ef:03:86:9c:21:78:a9:6d:da:
05:0e:b5:bd:69:98:eb:0a:26:92:8a:7c:5c:20:98:
66:bd:64:01:fa:f5:ce:2b:b4:ce:4b:4b:d3:df:42:
6c:a3:d7:92:72:b5:c6:ee:3c:0d:74:5a:0b:7e:56:
11:7a:20:0e:3d:dd:18:52:cf:12:3b:96:5e:0c:1d:
e3:77:45:68:8d:61:27:01:96:cf:91:15:b2:23:0e:
a3:9b:97:61:f3:aa:eb:15:2c:d6:ed:76:12:18:c6:
d1:62:3b:c5:79:2e:d6:21:5f:31:2f:81:65:fe:87:
b7:d6:8b:97:ba:ae:b8:37:b1:50:bd:57:b8:c6:0f:
46:51:55:55:9d:02:50:cd:57:f4:d6:f5:2b:55:7a:
7e:a0:84:d9:4d:19:f1:d4:0a:c5:3d:33:81:7a:ac:
70:11:ca:98:60:72:9f:d1:8a:5c:e6:1b:39:f6:a3:
0f:86:bf:14:61:a9:0c:fc:31:d1:bf:58:95:2c:d6:
6b:e7:8c:b7:24:13:90:28:cd:0d:4c:7f:39:e9:c1:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:07:0F:3D:B2:9B:70:1B:0B:28:E7:8A:20:F7:E4:6D:E6:70:00
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/ABAEFEAE6D0411EE878EAE44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.135.0/24
43.255.120.0/24
43.255.122.0/23
43.255.156.0/24
103.24.216.0/23
103.231.56.0/24
103.231.58.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4c:78:5c:a9:ef:5b:5e:de:78:8e:a6:3d:83:ce:8c:8a:18:
32:ce:ff:5a:55:48:39:0e:f8:4f:fd:5f:4f:e4:22:c4:05:71:
b9:30:8f:26:bc:18:10:2c:30:65:ec:16:ef:a3:ce:f9:c3:cc:
63:47:ad:15:81:af:35:1c:ae:2d:6c:6e:bb:5e:1f:28:aa:46:
84:ba:32:73:c5:58:d2:bb:85:d4:05:0a:3a:67:73:b0:8d:80:
6c:a8:ec:bb:f5:67:b1:96:0c:ed:e9:fd:af:e3:7a:d4:ed:24:
10:af:de:8b:b3:67:ad:e6:bf:51:38:f3:eb:42:5d:1d:e6:95:
52:4b:94:57:45:16:b1:6c:69:c4:db:5a:4d:3f:89:ba:ad:23:
ad:b9:76:30:57:a6:0b:90:9f:db:bd:26:22:89:75:76:2e:aa:
b3:31:74:e3:9c:60:66:58:d1:c4:41:14:ae:43:70:f1:91:57:
7a:69:ac:90:ec:de:bd:8e:6f:b9:57:2a:66:ba:37:56:7b:c7:
9c:b0:fb:1f:be:0e:1b:bf:f3:ae:fa:d3:20:ff:c6:a8:c4:ad:
43:46:fb:96:79:e0:e8:69:68:1f:34:57:f0:54:3a:bb:6d:08:
29:17:3c:7e:51:99:90:fe:aa:29:9b:e3:9e:f9:62:a4:68:89:
92:c6:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org