Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/7FD99BE21F9C11EDA5DD9842C4F9AE02.roa
File: 7FD99BE21F9C11EDA5DD9842C4F9AE02.roa (raw, json)
Hash identifier: Xr81Jl7D8fOP4sYbNUFPiTyi1HaD8TvLvZIMKPt4m9I=
Subject key identifier: F0:B7:AF:24:2A:CB:85:25:12:DB:B8:70:BC:3C:42:3D:CC:3F:7A:40
Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Certificate serial: 1346
Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/7FD99BE21F9C11EDA5DD9842C4F9AE02.roa
Signing time: Tue 06 Jun 2023 18:27:09 +0000
ROA not before: Tue 06 Jun 2023 18:27:09 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 400618
IP address blocks: 103.116.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 06:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4934 (0x1346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Validity
Not Before: Jun 6 18:27:09 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647f7a7d-839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:17:86:43:42:02:f1:4a:54:b4:16:df:65:
8e:7b:d1:40:57:d0:9d:28:b8:58:fc:2e:5b:94:61:
0c:f0:03:be:48:20:a7:40:9e:ed:93:b4:90:cf:bf:
d3:f1:1f:1a:c5:40:a9:0f:ab:da:fc:39:af:e1:48:
ab:f0:cd:3d:da:26:36:7a:b4:ac:f4:0d:aa:3e:d6:
b0:9e:9e:df:c1:e6:00:f0:8d:33:9e:62:da:f7:be:
56:3f:a9:c3:8c:7e:c5:0a:6e:aa:9b:85:ab:1d:cc:
d6:51:15:fb:44:99:06:fc:81:a8:6e:c3:33:f8:ac:
71:dc:82:de:c0:c9:8b:b4:7c:69:ff:a4:b1:29:75:
c1:59:e5:94:32:c1:50:bf:b6:80:17:dd:b4:82:42:
1a:42:5b:f4:21:5d:68:fb:12:1f:a3:32:f1:73:c3:
a4:d3:91:df:38:54:5b:83:0c:0c:31:e9:d8:5c:00:
99:d4:c0:47:d1:f2:b0:e3:3e:ad:b4:2c:f3:b3:d7:
a2:f4:13:1f:3a:da:2a:0b:fa:8d:bc:5a:95:0a:89:
9b:89:74:40:b2:62:c7:c3:9d:02:6f:bd:21:35:e6:
bd:e0:7b:c9:83:7e:a3:2b:e3:6c:a8:22:27:d9:e2:
7e:90:a5:cf:6f:b5:7c:b0:2b:e0:92:87:ef:4a:c9:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B7:AF:24:2A:CB:85:25:12:DB:B8:70:BC:3C:42:3D:CC:3F:7A:40
X509v3 Authority Key Identifier:
keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/7FD99BE21F9C11EDA5DD9842C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.72.0/22
Signature Algorithm: sha256WithRSAEncryption
99:0d:da:f7:5b:6b:c5:b2:a5:a5:8e:31:a8:a3:9c:85:82:59:
9b:01:1b:b1:0e:d8:55:0c:fe:28:79:ed:04:93:0f:9f:dc:85:
7a:a9:e7:3d:88:47:00:43:52:ef:fa:ee:12:e6:9f:9e:43:68:
12:ba:03:41:b5:e5:32:39:0b:b5:11:da:6f:f3:d2:e5:2a:20:
ea:9e:03:f6:d8:7f:fb:0c:fa:5a:e0:5d:dc:9f:af:9a:25:4d:
1f:04:e6:8d:2d:87:a9:b7:f6:a2:84:68:a6:1d:e7:f8:de:7e:
d3:6b:a6:58:3e:c9:3f:91:c1:20:08:0b:60:4e:39:bb:a9:07:
3d:5b:12:2e:1e:cb:54:fb:ea:aa:b8:0f:d2:4a:90:7e:e3:84:
36:bf:ca:ce:a4:7f:01:33:00:fd:73:dc:05:41:00:19:0f:44:
b7:8f:ac:95:27:a3:1a:fb:73:2e:70:64:c1:84:09:a9:1d:c2:
97:f7:70:58:ae:87:7e:ee:f9:d0:09:53:d4:f3:c6:2f:be:26:
0e:59:39:6f:c7:86:90:66:86:02:0b:ce:1d:ad:47:2a:ee:e1:
5d:1f:47:9b:63:91:13:67:06:96:93:10:47:6b:a8:a1:af:13:
cc:79:5d:9d:c6:94:49:e9:85:3a:af:e0:76:5f:7e:d5:e9:47:
23:b7:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org