Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/476F791A443E11EB8E268D3DC4F9AE02.roa
File: 476F791A443E11EB8E268D3DC4F9AE02.roa (raw, json)
Hash identifier: O0lj3UYZ0HknazR0ToQOylyfjJ3ibUzmE2DXJxOoWNQ=
Subject key identifier: 63:B6:6A:6F:EE:EB:48:8E:94:E1:8F:D2:AC:1D:23:A0:FB:17:AF:A6
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 1583
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/476F791A443E11EB8E268D3DC4F9AE02.roa
Signing time: Fri 24 May 2024 17:26:01 +0000
ROA not before: Fri 24 May 2024 17:26:01 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9989
IP address blocks: 27.111.208.0/20 maxlen: 20
27.111.220.0/24 maxlen: 24
27.111.224.0/22 maxlen: 22
27.111.232.0/22 maxlen: 22
27.111.236.0/23 maxlen: 23
27.111.238.0/23 maxlen: 23
101.97.64.0/22 maxlen: 22
118.103.180.0/22 maxlen: 22
118.103.183.0/24 maxlen: 24
202.79.192.0/22 maxlen: 22
202.79.196.0/24 maxlen: 24
202.79.197.0/24 maxlen: 24
202.79.200.0/21 maxlen: 21
202.79.208.0/20 maxlen: 20
202.79.209.0/24 maxlen: 24
2403:b100::/32 maxlen: 32
2403:b100::/33 maxlen: 33
2403:b100:7f00::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 04 Oct 2024 10:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5507 (0x1583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: May 24 17:26:01 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6650cda9-9720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:57:10:31:79:6d:cf:3a:41:78:70:48:3d:
fb:8f:97:b2:57:76:aa:ad:c5:5b:76:f5:1f:43:49:
bf:0a:43:83:2a:35:3d:24:f0:63:77:b0:1c:6e:e4:
50:d4:8f:c9:e9:8a:d2:0f:17:0f:08:50:3c:07:89:
05:80:c7:79:1c:4b:f6:97:38:ff:ad:98:fb:14:fc:
3e:57:62:92:49:7b:c8:f9:13:ee:8d:22:a1:c2:84:
df:22:3b:22:aa:3e:01:82:12:5f:2b:07:1f:f6:c5:
9d:ae:70:b9:82:28:d4:22:69:df:c5:4e:39:39:44:
99:a7:77:15:30:98:a8:f8:e7:e7:28:61:6f:4f:66:
36:d4:10:3c:3f:3e:e3:99:ff:c5:c4:6b:60:88:7e:
d8:3d:45:9b:5d:d9:81:56:75:f1:94:56:09:6c:fb:
17:be:9b:13:4a:0d:90:2e:b1:b5:d9:d7:16:c4:66:
bf:c4:30:47:d6:35:06:e5:32:b0:01:e9:ae:e6:61:
40:3a:a0:48:25:36:4b:bb:4c:43:30:d1:17:9c:28:
6d:20:74:db:db:27:f0:0c:c6:f0:10:92:c0:49:37:
17:cb:7b:83:bd:8e:71:39:2d:4d:cf:b8:71:ff:d2:
f9:fd:63:28:20:9d:30:11:66:1d:c1:d1:17:b0:14:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B6:6A:6F:EE:EB:48:8E:94:E1:8F:D2:AC:1D:23:A0:FB:17:AF:A6
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/476F791A443E11EB8E268D3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.208.0-27.111.227.255
27.111.232.0/21
101.97.64.0/22
118.103.180.0/22
202.79.192.0-202.79.197.255
202.79.200.0-202.79.223.255
IPv6:
2403:b100::/32
Signature Algorithm: sha256WithRSAEncryption
74:75:f3:05:8d:b5:b8:4f:9f:9b:56:65:dd:65:7a:5a:1d:aa:
1f:4a:75:ac:9a:45:95:c6:be:5e:6f:7d:67:08:62:67:36:ed:
6f:fb:fe:c1:30:16:38:9d:05:00:18:e3:78:2c:2e:1e:8f:5c:
2f:9e:a7:3f:fe:a4:d8:1b:83:05:1d:5a:97:4d:4d:0e:b2:27:
5b:c7:e6:c2:bf:90:6b:fb:d8:91:f9:ee:c4:09:9e:5c:15:74:
5e:5f:fe:32:47:79:15:9d:65:2c:44:2f:cb:6c:b6:10:e9:bf:
25:30:e3:98:d7:a2:a6:eb:93:e6:92:93:90:f2:eb:27:31:db:
29:e9:53:9a:cb:8b:03:e9:72:de:60:f9:01:86:86:1c:52:74:
1e:66:97:7e:c0:b7:37:54:2a:fa:23:6f:7d:28:49:db:52:44:
e8:d7:e7:64:7e:23:78:f1:e7:29:76:18:0d:d0:99:1f:8e:2c:
ea:43:03:de:cb:2f:d7:66:6e:ce:ce:89:21:04:1a:ac:2a:e9:
a8:01:16:4a:95:25:7d:82:90:54:94:29:5d:17:63:20:54:0e:
12:f3:94:ea:f2:02:70:66:ce:c7:4e:78:c1:b5:c5:07:dd:28:
60:a4:75:37:24:f8:e1:47:93:cd:1f:93:15:4b:48:06:ef:65:
0a:5d:dd:5b
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgICFYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1
NzA3M0UxN0YwHhcNMjQwNTI0MTcyNjAxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjUwY2RhOS05NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ctXEDF5bc86QXhwSD37j5eyV3aqrcVbdvUfQ0m/CkODKjU9JPBjd7AcbuRQ
1I/J6YrSDxcPCFA8B4kFgMd5HEv2lzj/rZj7FPw+V2KSSXvI+RPujSKhwoTfIjsi
qj4BghJfKwcf9sWdrnC5gijUImnfxU45OUSZp3cVMJio+OfnKGFvT2Y21BA8Pz7j
mf/FxGtgiH7YPUWbXdmBVnXxlFYJbPsXvpsTSg2QLrG12dcWxGa/xDBH1jUG5TKw
Aemu5mFAOqBIJTZLu0xDMNEXnChtIHTb2yfwDMbwEJLASTcXy3uDvY5xOS1Nz7hx
/9L5/WMoIJ0wEWYdwdEXsBSy3QIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFGO2am/u
60iOlOGP0qwdI6D7F6+mMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5
RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvNDc2Rjc5MUE0
NDNFMTFFQjhFMjY4RDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E
VTBTMEIEAgABMDwwDAMEBBtv0AMEAhtv4AMEAxtv6AMEAmVhQAMEAnZntDAMAwQG
yk/AAwQByk/EMAwDBAPKT8gDBAXKT8AwDQQCAAIwBwMFACQDsQAwDQYJKoZIhvcN
AQELBQADggEBAHR18wWNtbhPn5tWZd1lelodqh9KdayaRZXGvl5vfWcIYmc27W/7
/sEwFjidBQAY43gsLh6PXC+epz/+pNgbgwUdWpdNTQ6yJ1vH5sK/kGv72JH57sQJ
nlwVdF5f/jJHeRWdZSxEL8tsthDpvyUw45jXoqbrk+aSk5Dy6ycx2ynpU5rLiwPp
ct5g+QGGhhxSdB5ml37AtzdUKvojb30oSdtSROjX52R+I3jx5yl2GA3QmR+OLOpD
A97LL9dmbs7OiSEEGqwq6agBFkqVJX2CkFSUKV0XYyBUDhLzlOryAnBmzsdOeMG1
xQfdKGCkdTck+OFHk80fkxVLSAbvZQpd3Vs=
-----END CERTIFICATE-----
Generated at Fri Oct 4 14:31:47 2024 by rpki-client on console-ams.rpki-client.org