Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/EDD3BF18564311EE83737017C4F9AE02.roa
File: EDD3BF18564311EE83737017C4F9AE02.roa (raw, json)
Hash identifier: MPPX0fUT31A2Ve1rwqavIZtB6+JFtAtJ8lteHYeQ1BA=
Subject key identifier: 80:5B:60:42:73:AC:7C:29:C3:24:F3:D5:96:FD:74:7D:55:64:90:35
Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Certificate serial: 18FA
Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/EDD3BF18564311EE83737017C4F9AE02.roa
Signing time: Mon 18 Sep 2023 16:53:45 +0000
ROA not before: Mon 18 Sep 2023 16:53:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17882
IP address blocks: 14.1.124.0/24 maxlen: 24
14.1.125.0/24 maxlen: 24
14.1.126.0/24 maxlen: 24
14.1.127.0/24 maxlen: 24
103.11.192.0/24 maxlen: 24
103.11.193.0/24 maxlen: 24
103.11.194.0/24 maxlen: 24
103.11.195.0/24 maxlen: 24
103.48.184.0/24 maxlen: 24
103.48.185.0/24 maxlen: 24
103.48.186.0/24 maxlen: 24
103.48.187.0/24 maxlen: 24
103.79.156.0/23 maxlen: 24
103.197.240.0/24 maxlen: 24
103.197.241.0/24 maxlen: 24
103.197.242.0/24 maxlen: 24
103.197.243.0/24 maxlen: 24
103.206.68.0/24 maxlen: 24
103.206.69.0/24 maxlen: 24
103.206.70.0/24 maxlen: 24
103.206.71.0/24 maxlen: 24
103.212.116.0/24 maxlen: 24
103.212.117.0/24 maxlen: 24
103.212.118.0/24 maxlen: 24
103.212.119.0/24 maxlen: 24
103.219.136.0/24 maxlen: 24
103.219.137.0/24 maxlen: 24
103.219.138.0/24 maxlen: 24
103.219.139.0/24 maxlen: 24
103.239.56.0/24 maxlen: 24
103.239.57.0/24 maxlen: 24
103.239.58.0/24 maxlen: 24
103.239.59.0/24 maxlen: 24
122.201.16.0/24 maxlen: 24
122.201.17.0/24 maxlen: 24
122.201.18.0/24 maxlen: 24
122.201.19.0/24 maxlen: 24
122.201.20.0/24 maxlen: 24
122.201.21.0/24 maxlen: 24
122.201.22.0/24 maxlen: 24
122.201.23.0/24 maxlen: 24
122.201.24.0/24 maxlen: 24
122.201.25.0/24 maxlen: 24
122.201.26.0/24 maxlen: 24
122.201.27.0/24 maxlen: 24
122.201.28.0/24 maxlen: 24
122.201.29.0/24 maxlen: 24
122.201.30.0/24 maxlen: 24
122.201.31.0/24 maxlen: 24
123.200.232.0/24 maxlen: 24
123.200.233.0/24 maxlen: 24
123.200.234.0/24 maxlen: 24
123.200.235.0/24 maxlen: 24
123.200.236.0/24 maxlen: 24
123.200.237.0/24 maxlen: 24
123.200.238.0/24 maxlen: 24
123.200.239.0/24 maxlen: 24
123.200.248.0/24 maxlen: 24
123.200.249.0/24 maxlen: 24
123.200.250.0/24 maxlen: 24
123.200.251.0/24 maxlen: 24
123.200.252.0/24 maxlen: 24
123.200.253.0/24 maxlen: 24
123.200.254.0/24 maxlen: 24
123.200.255.0/24 maxlen: 24
139.5.216.0/24 maxlen: 24
139.5.217.0/24 maxlen: 24
139.5.218.0/24 maxlen: 24
139.5.219.0/24 maxlen: 24
150.129.140.0/24 maxlen: 24
150.129.141.0/24 maxlen: 24
150.129.142.0/24 maxlen: 24
150.129.143.0/24 maxlen: 24
202.70.33.0/24 maxlen: 24
202.70.34.0/24 maxlen: 24
202.70.35.0/24 maxlen: 24
202.70.36.0/24 maxlen: 24
202.70.37.0/24 maxlen: 24
202.70.38.0/24 maxlen: 24
202.70.39.0/24 maxlen: 24
202.70.40.0/24 maxlen: 24
202.70.41.0/24 maxlen: 24
202.70.42.0/24 maxlen: 24
202.70.43.0/24 maxlen: 24
202.70.44.0/24 maxlen: 24
202.70.45.0/24 maxlen: 24
202.70.46.0/24 maxlen: 24
202.70.47.0/24 maxlen: 24
203.17.23.0/24 maxlen: 24
203.21.120.0/24 maxlen: 24
203.23.49.0/24 maxlen: 24
203.23.199.0/24 maxlen: 24
203.98.76.0/23 maxlen: 24
2405:5700::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Jan 2024 04:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6394 (0x18fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Validity
Not Before: Sep 18 16:53:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65088099-802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:47:3c:84:9e:9d:22:b5:d8:6e:8b:0b:df:
1d:b8:05:87:5f:0a:e6:8c:3c:fc:8a:ab:73:9c:81:
33:2b:a5:39:37:49:13:59:c4:0f:ff:e9:16:80:0f:
22:9b:c6:a5:81:6b:be:7f:7d:d2:a4:12:0c:e5:9b:
53:af:b6:62:10:b2:16:01:cc:b0:b7:db:e6:41:a2:
88:db:e1:2c:78:63:2b:6b:29:83:2a:20:34:c4:08:
dd:78:3c:27:dc:83:aa:db:a3:c1:c6:cc:03:f6:0d:
70:e9:18:7b:df:50:26:22:3f:3e:e8:9a:82:f4:85:
ef:23:92:56:9a:b5:80:0b:55:be:a7:9e:0a:b2:27:
57:88:1e:b4:63:1a:28:c9:92:85:c9:69:d8:ec:d4:
0b:a5:e9:d6:25:08:78:31:b7:9e:3e:5f:a2:df:8e:
b2:70:d2:fc:e8:50:fd:ed:9f:f6:62:10:91:dd:cc:
b1:f8:10:ce:a1:7d:e3:fc:80:b8:5e:d6:05:a6:0f:
f6:e4:4c:e8:4e:6b:83:47:86:ab:5a:b2:c2:cb:e5:
dd:42:ef:0c:3a:21:f9:7b:f9:3d:12:f3:cb:de:39:
95:95:d2:f7:ae:00:d1:c2:7d:90:7b:56:ae:0c:4b:
39:97:29:98:f4:48:4b:2f:84:35:67:04:33:85:59:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:60:42:73:AC:7C:29:C3:24:F3:D5:96:FD:74:7D:55:64:90:35
X509v3 Authority Key Identifier:
keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/EDD3BF18564311EE83737017C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.124.0/22
103.11.192.0/22
103.48.184.0/22
103.79.156.0/23
103.197.240.0/22
103.206.68.0/22
103.212.116.0/22
103.219.136.0/22
103.239.56.0/22
122.201.16.0/20
123.200.232.0/21
123.200.248.0/21
139.5.216.0/22
150.129.140.0/22
202.70.33.0-202.70.47.255
203.17.23.0/24
203.21.120.0/24
203.23.49.0/24
203.23.199.0/24
203.98.76.0/23
IPv6:
2405:5700::/32
Signature Algorithm: sha256WithRSAEncryption
95:f5:bc:2d:f3:b5:52:3f:07:04:4a:d7:4e:e1:15:1f:e1:52:
22:f9:3e:ff:4e:8c:f8:0b:1d:ec:84:13:a5:a4:11:9d:33:6a:
cb:15:1d:5e:93:29:1a:a6:be:50:9c:8b:3d:b2:97:be:ac:17:
11:7b:87:91:0c:5b:83:ff:08:88:af:ab:d9:f1:b9:64:8f:e5:
2f:19:fd:e5:f2:50:5e:92:ce:d5:63:c4:8e:cc:53:30:c3:d9:
d7:a8:a5:41:cb:c6:57:4b:5e:8d:a4:f8:2b:8b:e2:2a:2a:a6:
a0:0b:d9:c4:0c:5c:8c:99:1d:ff:b1:88:54:5f:0f:71:34:db:
76:1e:ce:9c:4b:ae:d8:24:b7:e5:eb:ab:58:b4:48:66:c9:c8:
ae:4d:58:a1:a6:93:de:3e:3a:0c:78:7a:99:44:63:2f:13:31:
fb:ae:be:ca:ec:64:b6:c2:28:ad:53:8b:e3:20:a6:58:e1:b8:
84:2a:df:61:7e:50:a0:63:77:53:83:4f:ae:c1:a0:b9:b9:e3:
09:49:d2:1b:db:a9:a2:33:86:fe:53:ce:f1:3a:6a:8c:77:e0:
78:64:7f:5e:9f:3f:c8:d5:a5:14:73:0b:14:71:4e:85:88:69:
52:54:f6:0a:de:f5:f4:c9:c5:9c:9c:9d:05:4d:8b:6b:60:34:
d0:f7:99:61
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgICGPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw
MTJCQzM3NTgwHhcNMjMwOTE4MTY1MzQ1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTA4ODA5OS04MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthJHPISenSK12G6LC98duAWHXwrmjDz8iqtznIEzK6U5N0kTWcQP/+kWgA8i
m8algWu+f33SpBIM5ZtTr7ZiELIWAcywt9vmQaKI2+EseGMraymDKiA0xAjdeDwn
3IOq26PBxswD9g1w6Rh731AmIj8+6JqC9IXvI5JWmrWAC1W+p54KsidXiB60Yxoo
yZKFyWnY7NQLpenWJQh4MbeePl+i346ycNL86FD97Z/2YhCR3cyx+BDOoX3j/IC4
XtYFpg/25EzoTmuDR4arWrLCy+XdQu8MOiH5e/k9EvPL3jmVldL3rgDRwn2Qe1au
DEs5lymY9EhLL4Q1ZwQzhVlvJQIDAQABo4IDIzCCAx8wHQYDVR0OBBYEFIBbYEJz
rHwpwyTz1Zb9dH1VZJA1MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw
RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERBMkQvODM4MzYyMEE1MEQ1MTFFNzlFQ0U0MDEzQzRGOUFFMDIvRUREM0JGMTg1
NjQzMTFFRTgzNzM3MDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgawGCCsGAQUFBwEHAQH/
BIGcMIGZMIGHBAIAATCBgAMEAg4BfAMEAmcLwAMEAmcwuAMEAWdPnAMEAmfF8AME
AmfORAMEAmfUdAMEAmfbiAMEAmfvOAMEBHrJEAMEA3vI6AMEA3vI+AMEAosF2AME
ApaBjDAMAwQAykYhAwQEykYgAwQAyxEXAwQAyxV4AwQAyxcxAwQAyxfHAwQBy2JM
MA0EAgACMAcDBQAkBVcAMA0GCSqGSIb3DQEBCwUAA4IBAQCV9bwt87VSPwcEStdO
4RUf4VIi+T7/Toz4Cx3shBOlpBGdM2rLFR1ekykapr5QnIs9spe+rBcRe4eRDFuD
/wiIr6vZ8blkj+UvGf3l8lBeks7VY8SOzFMww9nXqKVBy8ZXS16NpPgri+IqKqag
C9nEDFyMmR3/sYhUXw9xNNt2Hs6cS67YJLfl66tYtEhmyciuTVihppPePjoMeHqZ
RGMvEzH7rr7K7GS2wiitU4vjIKZY4biEKt9hflCgY3dTg0+uwaC5ueMJSdIb26mi
M4b+U87xOmqMd+B4ZH9enz/I1aUUcwsUcU6FiGlSVPYK3vX0ycWcnJ0FTYtrYDTQ
95lh
-----END CERTIFICATE-----
Generated at Wed Jan 24 06:21:23 2024 by rpki-client on console-fra.rpki-client.org