Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/D10FBDDE63E811EEB2FCD02AC4F9AE02.roa
File: D10FBDDE63E811EEB2FCD02AC4F9AE02.roa (raw, json)
Hash identifier: dHRvh3nTL1EoqYuR3PmQ8+cVtYLrLbwolovJi2OWNSQ=
Subject key identifier: 24:39:58:A5:E9:CE:EB:30:CA:77:5F:16:6A:20:FE:62:FC:2C:7F:52
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: BA
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/D10FBDDE63E811EEB2FCD02AC4F9AE02.roa
Signing time: Fri 06 Oct 2023 01:36:49 +0000
ROA not before: Fri 06 Oct 2023 01:36:49 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 212669
IP address blocks: 103.230.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 10:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Oct 6 01:36:49 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=651f64b0-a1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:f8:77:70:f3:af:77:ca:5a:58:ca:f2:b8:
6d:2a:ab:94:69:f2:a2:14:f1:f5:96:5d:80:f6:d3:
20:b2:7a:a2:c7:39:5f:5e:7a:83:7a:2a:cf:70:39:
bd:d6:e5:9e:fd:d6:4f:39:dc:51:8e:1e:ce:ef:08:
e1:ce:57:26:ac:00:70:54:b6:4c:29:db:f8:f3:6f:
5f:3a:83:cd:f5:0a:94:4f:f6:55:71:bf:c1:35:dd:
4c:34:42:8e:01:e3:a2:40:b3:21:d9:dc:16:6a:25:
a8:95:b2:41:d6:c8:da:ff:29:18:50:82:9f:49:4c:
00:f4:5e:5c:67:3d:a2:4b:0d:67:ad:0e:8d:8d:08:
2d:17:a6:0f:5d:61:6f:27:29:1b:58:1f:da:fa:bd:
a8:42:ec:04:8e:a1:32:b0:db:44:4c:96:09:c3:ca:
15:bf:39:86:57:cb:40:73:2d:16:c2:0e:25:a6:ed:
88:29:28:df:1b:ad:a6:37:fa:4a:c9:62:5b:d7:f6:
f9:b5:47:9d:86:72:82:68:4e:4d:af:a3:7f:2e:2f:
13:2b:ef:94:c4:2f:f4:2b:d6:98:53:70:11:e0:e4:
d7:ae:03:db:e4:49:28:5c:42:0a:12:59:e9:29:37:
51:5a:4d:2e:bb:18:d3:9b:3f:29:ae:39:1e:cd:81:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:58:A5:E9:CE:EB:30:CA:77:5F:16:6A:20:FE:62:FC:2C:7F:52
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/D10FBDDE63E811EEB2FCD02AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.11.0/24
Signature Algorithm: sha256WithRSAEncryption
92:68:d5:65:69:b3:c8:52:40:73:19:f5:5c:8e:84:2e:d8:3a:
2c:e8:62:61:7a:7e:fb:d8:b0:0a:71:a5:79:47:1e:e5:92:10:
bb:2a:2d:63:f2:e7:61:4c:18:79:09:ee:dc:39:f6:99:cc:46:
db:3b:41:95:e8:2a:8b:3c:29:5b:c9:25:20:a9:29:8a:1a:92:
de:51:a3:f4:f1:50:9a:ef:d1:31:f3:42:ae:8a:af:ad:d2:e4:
13:c1:32:8b:b7:ce:ab:93:4a:ff:27:90:f4:98:47:5a:aa:cd:
21:1e:f6:7c:cb:bb:ae:10:2a:05:f7:c6:d6:5a:e0:7d:5c:ef:
f9:da:55:0b:f4:2c:f2:f6:18:cd:a3:1c:90:45:6d:4a:1d:f5:
16:2f:51:15:3f:9b:03:d0:4a:8f:47:18:f8:b4:9c:ba:60:06:
1b:ea:e5:bd:3c:f7:93:02:94:a2:4b:0d:84:ef:3c:93:4a:85:
ba:4c:53:ac:eb:28:38:56:36:bb:5d:c1:65:0f:93:68:b0:ab:
9b:4a:2d:67:68:ef:c9:3a:ef:7e:ba:55:ee:9b:07:78:94:6e:
6f:96:8e:0b:b1:c3:d5:7a:33:ca:fd:8e:6c:7c:de:a3:1b:ad:
32:e9:87:f2:f1:26:88:04:53:68:d6:5b:c7:b5:12:15:02:01:
98:b4:d2:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjMxMDA2MDEzNjQ5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFmNjRiMC1hMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKn4d3Dzr3fKWljK8rhtKquUafKiFPH1ll2A9tMgsnqixzlfXnqDeirPcDm9
1uWe/dZPOdxRjh7O7wjhzlcmrABwVLZMKdv4829fOoPN9QqUT/ZVcb/BNd1MNEKO
AeOiQLMh2dwWaiWolbJB1sja/ykYUIKfSUwA9F5cZz2iSw1nrQ6NjQgtF6YPXWFv
JykbWB/a+r2oQuwEjqEysNtETJYJw8oVvzmGV8tAcy0Wwg4lpu2IKSjfG62mN/pK
yWJb1/b5tUedhnKCaE5Nr6N/Li8TK++UxC/0K9aYU3AR4OTXrgPb5EkoXEIKElnp
KTdRWk0uuxjTmz8prjkezYFqIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCQ5WKXp
zuswyndfFmog/mL8LH9SMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvRDEwRkJEREU2
M0U4MTFFRUIyRkNEMDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5gswDQYJKoZIhvcNAQELBQADggEBAJJo1WVps8hSQHMZ
9VyOhC7YOizoYmF6fvvYsApxpXlHHuWSELsqLWPy52FMGHkJ7tw59pnMRts7QZXo
Kos8KVvJJSCpKYoakt5Ro/TxUJrv0THzQq6Kr63S5BPBMou3zquTSv8nkPSYR1qq
zSEe9nzLu64QKgX3xtZa4H1c7/naVQv0LPL2GM2jHJBFbUod9RYvURU/mwPQSo9H
GPi0nLpgBhvq5b0895MClKJLDYTvPJNKhbpMU6zrKDhWNrtdwWUPk2iwq5tKLWdo
78k67366Ve6bB3iUbm+Wjguxw9V6M8r9jmx83qMbrTLph/LxJogEU2jWW8e1EhUC
AZi00qo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org