Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/0516F708F1C711ED8893CF6DC4F9AE02.roa
File: 0516F708F1C711ED8893CF6DC4F9AE02.roa (raw, json)
Hash identifier: /eS+8GegpOJ/iNHQhMguKVH9mTufZSDKu4wTZy87MuQ=
Subject key identifier: 8D:81:FB:D5:17:CA:B8:1F:5A:3A:03:0A:19:EE:15:35:46:27:98:B7
Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial: 060F
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/0516F708F1C711ED8893CF6DC4F9AE02.roa
Signing time: Fri 26 Jan 2024 23:21:55 +0000
ROA not before: Fri 26 Jan 2024 23:21:55 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 132335
IP address blocks: 103.160.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 03 Aug 2024 16:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Validity
Not Before: Jan 26 23:21:55 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b43e93-9486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:59:b2:0a:12:3e:e0:91:ca:ab:cd:11:ab:
66:c9:38:94:8c:7f:a2:ce:76:32:38:0f:dc:2e:52:
dc:a8:2f:56:cf:8c:b1:9f:44:45:e0:98:f2:fe:87:
60:cf:40:d9:dc:55:89:93:a9:2d:bb:ba:25:74:b3:
22:0a:a2:5e:05:d1:06:c4:ef:c2:c4:01:1e:d8:da:
44:6c:e6:16:43:2c:23:3a:09:72:fb:3f:af:89:e0:
f1:97:5f:a1:31:cc:1a:50:e9:7e:00:64:2c:7f:09:
f3:d0:48:a0:46:72:93:bd:46:14:1f:43:72:33:70:
12:92:95:a3:22:bc:d6:d7:d7:18:07:f7:46:1c:24:
08:b3:83:a0:cc:d9:5e:ca:0c:6d:e8:7c:85:05:13:
d2:d8:91:aa:0f:81:d7:33:a7:52:44:18:a2:1c:56:
34:98:55:f5:c8:49:28:21:17:d5:df:f4:de:34:4f:
11:bd:04:22:12:d2:9d:65:5b:8b:22:60:b1:15:6f:
fe:13:2d:34:4b:49:6e:84:53:45:ca:21:c5:13:26:
d6:86:be:15:a2:a8:8b:01:2c:8c:3f:ec:4b:03:71:
43:a1:b4:a7:bd:52:c3:e1:b7:53:57:7f:cb:b4:6c:
07:6c:b7:73:14:95:1a:c2:f9:b1:f5:1c:8a:47:e2:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:FB:D5:17:CA:B8:1F:5A:3A:03:0A:19:EE:15:35:46:27:98:B7
X509v3 Authority Key Identifier:
keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/0516F708F1C711ED8893CF6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.144.0/23
Signature Algorithm: sha256WithRSAEncryption
62:1d:be:5c:24:62:9c:aa:b4:79:8d:d6:cb:9c:e0:d4:b8:98:
6a:72:42:86:82:33:e3:5b:d6:f6:0c:e6:fa:b4:5e:d9:3a:5b:
54:9a:98:ab:f6:3e:f7:ed:cd:a6:c9:5b:43:97:aa:9a:b0:cb:
9f:54:b6:7a:d6:66:6c:ef:2f:d3:12:25:ab:a9:fb:a4:ff:05:
37:25:ca:3d:b6:86:b1:8f:f2:d1:1b:e7:b8:7d:c9:d3:e5:ab:
51:5b:d7:41:96:d4:0d:79:48:be:30:56:1d:48:d2:f1:ae:fa:
3a:68:dc:61:35:9f:79:64:f9:b7:6b:66:01:7a:37:e2:14:16:
55:ca:f8:fc:73:c0:7e:5c:83:61:e9:90:be:8c:6b:42:15:37:
03:65:64:94:a5:c0:7a:e7:c9:ec:a6:b0:77:38:df:f0:d8:f1:
b0:b1:d8:5e:d0:95:8c:94:b9:49:39:72:ed:54:2d:1f:2e:d0:
05:2b:d9:09:ee:89:08:c0:ac:07:d8:e4:c7:db:3f:80:41:01:
80:c3:04:50:9d:90:7b:a9:31:52:4a:89:78:22:a7:e0:b2:ed:
13:d4:8d:62:fe:db:0b:0f:4b:f0:65:4f:31:db:ab:62:ec:22:
12:63:dc:5c:f5:da:44:3a:94:6d:61:b4:2a:a1:cc:22:fd:7c:
f2:3d:22:ec
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz
NjE0MEYyNTQwHhcNMjQwMTI2MjMyMTU1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI0M2U5My05NDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZdZsgoSPuCRyqvNEatmyTiUjH+iznYyOA/cLlLcqC9Wz4yxn0RF4Jjy/odg
z0DZ3FWJk6ktu7oldLMiCqJeBdEGxO/CxAEe2NpEbOYWQywjOgly+z+vieDxl1+h
McwaUOl+AGQsfwnz0EigRnKTvUYUH0NyM3ASkpWjIrzW19cYB/dGHCQIs4OgzNle
ygxt6HyFBRPS2JGqD4HXM6dSRBiiHFY0mFX1yEkoIRfV3/TeNE8RvQQiEtKdZVuL
ImCxFW/+Ey00S0luhFNFyiHFEybWhr4VoqiLASyMP+xLA3FDobSnvVLD4bdTV3/L
tGwHbLdzFJUawvmx9RyKR+KLOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI2B+9UX
yrgfWjoDChnuFTVGJ5i3MB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0
MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNGRTkvRjlFNjVFMjA0NDM4MTFFQkFENDQzRjc0QzRGOUFFMDIvMDUxNkY3MDhG
MUM3MTFFRDg4OTNDRjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnoJAwDQYJKoZIhvcNAQELBQADggEBAGIdvlwkYpyqtHmN
1suc4NS4mGpyQoaCM+Nb1vYM5vq0Xtk6W1SamKv2PvftzabJW0OXqpqwy59UtnrW
ZmzvL9MSJaup+6T/BTclyj22hrGP8tEb57h9ydPlq1Fb10GW1A15SL4wVh1I0vGu
+jpo3GE1n3lk+bdrZgF6N+IUFlXK+PxzwH5cg2HpkL6Ma0IVNwNlZJSlwHrnyeym
sHc43/DY8bCx2F7QlYyUuUk5cu1ULR8u0AUr2QnuiQjArAfY5MfbP4BBAYDDBFCd
kHupMVJKiXgip+Cy7RPUjWL+2wsPS/BlTzHbq2LsIhJj3Fz12kQ6lG1htCqhzCL9
fPI9Iuw=
-----END CERTIFICATE-----
Generated at Sat Aug 3 19:56:42 2024 by rpki-client on console-ams.rpki-client.org