Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/F3AFC1DE417011EA951D4669C4F9AE02.roa
File: F3AFC1DE417011EA951D4669C4F9AE02.roa (raw, json)
Hash identifier: f2ZdUvCW7NMjhFBjgaI5+riea8AbuENSUk1KSW/65Iw=
Subject key identifier: 9A:C5:4D:60:AA:5F:A9:EC:52:63:0B:D0:89:AC:FB:A2:85:C4:65:F0
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0A02
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/F3AFC1DE417011EA951D4669C4F9AE02.roa
Signing time: Sat 02 Dec 2023 20:28:21 +0000
ROA not before: Sat 02 Dec 2023 20:28:21 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 17408
IP address blocks: 103.6.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 May 2024 00:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562 (0xa02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Dec 2 20:28:21 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=656b9365-9371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:21:e6:34:53:9c:58:79:b9:1c:86:b5:4d:
5d:9b:96:90:30:40:79:b2:9e:01:58:1f:4b:17:44:
91:7a:01:37:65:75:bb:4f:d2:e6:18:d9:5d:11:35:
18:e1:86:3d:6a:7d:fd:30:e0:ad:61:a5:61:b5:49:
4c:7b:cb:4b:d4:f2:e0:c0:2f:f1:b2:45:21:74:2a:
1f:97:aa:f0:e5:56:29:de:c4:bf:4a:43:0f:20:0c:
c1:3a:47:52:37:f0:af:08:a4:2a:3f:be:42:70:ec:
f9:81:92:a5:8d:e4:37:34:44:23:98:dc:bd:1c:cb:
3e:81:c2:d4:7c:31:f3:11:b7:ba:72:83:91:c4:dd:
54:db:72:bd:12:2c:91:d8:12:33:42:7e:66:56:82:
1b:3f:3b:d6:10:c5:73:58:70:68:fb:8f:49:44:c7:
d9:03:76:f0:12:43:d6:eb:d5:12:a1:37:04:34:80:
1e:04:b1:dd:57:97:bd:57:84:48:33:65:39:02:d4:
a1:e6:42:e2:94:7e:81:61:03:ea:51:75:ad:f4:4d:
84:9e:e7:2f:eb:31:2d:e4:7d:5f:01:a5:d5:d1:b7:
11:a7:37:43:9e:e6:77:f3:54:90:ed:09:70:48:6e:
32:70:1f:20:db:e4:38:7b:dc:1d:37:f5:fd:b6:96:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:4D:60:AA:5F:A9:EC:52:63:0B:D0:89:AC:FB:A2:85:C4:65:F0
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/F3AFC1DE417011EA951D4669C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.20.0/22
Signature Algorithm: sha256WithRSAEncryption
18:eb:e2:0a:04:94:d9:bb:21:77:c5:08:78:55:8f:2c:dd:f8:
7f:71:ab:b9:b1:a6:9e:ec:d6:6b:64:7d:56:d1:18:b9:bf:72:
d5:a0:f8:06:b2:0b:33:39:58:48:95:46:f8:28:a1:8e:f2:13:
85:fa:02:6d:51:08:8e:c7:c5:58:5f:26:2b:2e:2d:ea:21:21:
a9:23:22:ec:7a:cf:14:75:74:b6:72:0e:eb:72:39:2f:36:90:
65:ed:12:a4:2e:cf:11:e5:f6:05:33:f8:49:03:b2:61:0d:9d:
32:90:0f:97:db:3f:e7:38:a8:fc:fd:61:5a:80:d5:5d:bd:8e:
12:bd:b7:c7:aa:49:c8:33:2c:f0:e8:c9:45:77:83:49:2b:b2:
c9:c9:53:d4:c2:f6:9d:8b:b4:49:61:89:1d:08:04:34:ea:4f:
e4:9e:72:5c:d6:3a:3e:0a:93:c5:1f:bd:1e:9e:e2:da:b4:94:
41:64:2a:fd:97:53:9b:cd:b9:8c:bc:4a:fc:71:38:7b:30:cb:
5a:12:cd:a5:e3:4a:1d:b5:ea:22:d5:5e:c0:ed:ab:c4:d3:63:
0e:51:18:ce:a5:0f:a5:c4:bd:7c:85:82:1c:9e:45:d0:f9:35:
6c:2f:5d:03:0f:2d:db:94:60:7e:0e:a2:70:b2:0e:72:7c:73:
f6:c4:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:40:34 2024 by rpki-client on console-ams.rpki-client.org