Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/E164B7863A1511EE895E2730C4F9AE02.roa
File: E164B7863A1511EE895E2730C4F9AE02.roa (raw, json)
Hash identifier: EiT9ZRQuUOaQ//Rur+gYP58bbO2M5NOBF0IHARznxxg=
Subject key identifier: 34:79:D7:DF:20:FE:73:86:3C:F3:7A:71:93:3F:99:5D:30:38:F1:AA
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 1712
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/E164B7863A1511EE895E2730C4F9AE02.roa
Signing time: Mon 02 Oct 2023 16:54:22 +0000
ROA not before: Mon 02 Oct 2023 16:54:22 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 134512
IP address blocks: 43.239.140.0/22 maxlen: 22
43.239.140.0/24 maxlen: 24
43.239.141.0/24 maxlen: 24
43.239.142.0/24 maxlen: 24
43.239.143.0/24 maxlen: 24
103.71.172.0/22 maxlen: 22
103.71.172.0/24 maxlen: 24
103.71.173.0/24 maxlen: 24
103.71.174.0/24 maxlen: 24
103.71.175.0/24 maxlen: 24
103.194.168.0/24 maxlen: 24
103.194.169.0/24 maxlen: 24
103.194.170.0/24 maxlen: 24
103.194.171.0/24 maxlen: 24
103.248.52.0/22 maxlen: 22
103.248.52.0/24 maxlen: 24
103.248.53.0/24 maxlen: 24
103.248.55.0/24 maxlen: 24
103.252.220.0/22 maxlen: 22
103.252.220.0/24 maxlen: 24
103.252.221.0/24 maxlen: 24
103.252.222.0/24 maxlen: 24
103.252.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5906 (0x1712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Oct 2 16:54:22 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651af5be-f917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:c9:db:f1:4e:52:7b:0d:96:52:2b:27:bf:
e6:c9:ee:e3:03:e9:ab:cb:05:6c:3b:37:14:7b:62:
fc:d2:dc:00:d1:05:6a:04:ec:f7:18:23:be:05:89:
30:3b:dd:88:f3:71:72:5c:e4:9a:9e:4e:68:fe:9a:
e9:cc:c9:3b:57:5f:e5:49:0d:2a:90:0e:71:92:5f:
1b:fe:97:bf:bb:90:50:48:5e:2b:7f:39:83:95:78:
ba:28:11:b3:be:38:51:66:9b:5e:37:ab:45:99:69:
1f:86:d8:c6:40:2d:40:d5:e1:54:72:d0:0f:5f:73:
cb:cc:33:20:31:c3:6f:c2:43:4b:01:d1:9a:ed:00:
aa:24:1e:10:0f:75:9a:93:5d:7e:0c:07:e3:e5:d9:
e1:9e:42:2e:f8:15:6a:02:ca:99:dd:01:b1:ef:f9:
9b:93:85:0e:8e:96:20:a9:69:42:b1:c1:2c:0c:68:
5d:45:64:11:71:67:b6:56:b1:92:98:bd:27:68:4b:
2b:fa:c7:52:f7:8d:da:28:8a:68:55:e2:db:54:4a:
f5:1d:f5:c5:3b:d6:19:26:02:bd:74:0d:5e:2b:17:
3c:dc:c0:aa:f4:f0:ad:29:13:cd:27:20:4b:f3:2e:
81:17:d1:be:08:75:6a:f9:ce:59:87:bf:0a:29:2e:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:79:D7:DF:20:FE:73:86:3C:F3:7A:71:93:3F:99:5D:30:38:F1:AA
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/E164B7863A1511EE895E2730C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.140.0/22
103.71.172.0/22
103.194.168.0/22
103.248.52.0/22
103.252.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:46:e3:40:7e:e2:39:dc:07:a8:31:39:32:6c:a6:0d:54:86:
e2:26:f6:8b:17:be:89:80:18:52:7f:99:ef:88:3b:b6:0d:3e:
60:d0:ba:85:d7:e0:8c:61:a7:6f:44:a2:0f:e0:8b:8f:de:ab:
f9:11:9a:04:c6:17:99:7c:c6:42:49:e9:af:7f:22:6b:bd:7e:
3c:69:2c:0b:4d:b2:12:a8:33:3a:01:bf:82:84:1e:78:2e:2d:
83:9c:4e:44:b4:2a:7e:ac:0c:e8:7b:f9:ff:2b:a7:72:76:3d:
34:88:7b:40:54:9e:21:d0:5c:34:e3:e8:0a:4c:ef:7b:9d:30:
b9:a7:5c:bb:70:6e:0b:02:59:a1:5a:fc:e8:02:e7:22:5a:95:
13:23:62:73:6d:80:52:03:1a:87:83:c4:eb:56:80:40:59:6b:
a0:26:ee:b2:f6:9f:36:97:ca:03:ba:96:d7:4f:9c:55:cb:ca:
54:f2:ce:90:98:e8:af:53:ed:7f:14:e5:2b:62:43:f4:dc:51:
e9:46:e4:fb:70:9a:3b:ac:31:12:68:38:23:e6:fa:9f:ba:9c:
80:1e:9d:dc:5b:01:d5:32:a8:6f:57:4f:2e:50:1f:aa:c0:c6:
5f:9a:2c:65:73:8e:8b:44:e1:ab:53:a1:dd:74:26:65:f7:a8:
ed:b4:c9:17
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICFxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx
OEZEQjVCNUUwHhcNMjMxMDAyMTY1NDIyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFhZjViZS1mOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5rJ2/FOUnsNllIrJ7/mye7jA+mrywVsOzcUe2L80twA0QVqBOz3GCO+BYkw
O92I83FyXOSank5o/prpzMk7V1/lSQ0qkA5xkl8b/pe/u5BQSF4rfzmDlXi6KBGz
vjhRZpteN6tFmWkfhtjGQC1A1eFUctAPX3PLzDMgMcNvwkNLAdGa7QCqJB4QD3Wa
k11+DAfj5dnhnkIu+BVqAsqZ3QGx7/mbk4UOjpYgqWlCscEsDGhdRWQRcWe2VrGS
mL0naEsr+sdS943aKIpoVeLbVEr1HfXFO9YZJgK9dA1eKxc83MCq9PCtKRPNJyBL
8y6BF9G+CHVq+c5Zh78KKS5nHwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDR5198g
/nOGPPN6cZM/mV0wOPGqMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1
QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEI1QkQvMzNDQjExN0FCNUE5MTFFNzlDNzRDQjcyQzRGOUFFMDIvRTE2NEI3ODYz
QTE1MTFFRTg5NUUyNzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAIr74wDBAJnR6wDBAJnwqgDBAJn+DQDBAJn/NwwDQYJKoZI
hvcNAQELBQADggEBAG9G40B+4jncB6gxOTJspg1UhuIm9osXvomAGFJ/me+IO7YN
PmDQuoXX4Ixhp29Eog/gi4/eq/kRmgTGF5l8xkJJ6a9/Imu9fjxpLAtNshKoMzoB
v4KEHnguLYOcTkS0Kn6sDOh7+f8rp3J2PTSIe0BUniHQXDTj6ApM73udMLmnXLtw
bgsCWaFa/OgC5yJalRMjYnNtgFIDGoeDxOtWgEBZa6Am7rL2nzaXygO6ltdPnFXL
ylTyzpCY6K9T7X8U5StiQ/TcUelG5PtwmjusMRJoOCPm+p+6nIAendxbAdUyqG9X
Ty5QH6rAxl+aLGVzjotE4atTod10JmX3qO20yRc=
-----END CERTIFICATE-----
Generated at Wed Dec 13 08:24:01 2023 by rpki-client on console-fra.rpki-client.org