Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/F6FAF6943C1D11EBB8606E7BC4F9AE02.roa
File: F6FAF6943C1D11EBB8606E7BC4F9AE02.roa (raw, json)
Hash identifier: 9l04nlYbGcJlHXjPpIgF26CPX3L6drqNpUeM868xDTU=
Subject key identifier: 14:64:7F:EF:B9:A8:3A:DA:29:AC:49:78:27:F1:33:59:8C:6E:02:33
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 21F2
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/F6FAF6943C1D11EBB8606E7BC4F9AE02.roa
Signing time: Sat 02 Dec 2023 16:23:04 +0000
ROA not before: Sat 02 Dec 2023 16:23:04 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 137443
IP address blocks: 103.27.78.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Jan 2024 17:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8690 (0x21f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Dec 2 16:23:04 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656b59e8-f5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:29:02:dd:16:ca:d2:1a:a9:a6:7e:1e:a4:
10:e8:63:cb:3d:57:5b:cd:f3:4c:3a:68:63:23:d9:
a5:e9:3a:02:48:cb:99:20:03:ed:d5:1a:a9:91:4d:
fb:35:38:21:83:00:99:77:7e:04:3e:c9:9d:e1:3a:
1e:40:6e:75:88:11:42:4a:75:6b:f7:a3:e6:65:b3:
36:96:ea:70:8b:51:a7:68:76:15:c3:78:17:b0:5f:
f6:42:e6:a1:a4:04:2c:01:d0:91:e9:07:da:4b:c8:
da:9c:9a:2f:29:46:e5:1d:c6:ca:1c:78:fb:dd:8e:
26:53:f0:97:d4:f4:73:81:26:7e:03:a8:87:5a:07:
6b:5a:83:72:60:95:67:e2:df:98:5e:ba:36:19:a9:
5c:a6:5e:40:86:e1:b4:1b:6d:b3:51:b9:b1:04:10:
5b:a0:c0:1c:dd:15:98:d7:fa:88:5e:4b:9b:10:a9:
e9:39:cc:53:4e:a8:14:8b:70:f7:b8:46:d9:11:f6:
8d:93:eb:8c:c7:7c:4d:6a:8b:65:d2:fa:43:51:4f:
6f:99:13:d6:89:73:6b:92:ce:fb:27:29:48:c0:3a:
0a:8d:c1:66:d7:6b:b7:a3:6b:98:5c:a0:06:68:89:
59:8f:32:95:37:f3:2e:da:89:fb:35:34:ae:39:9e:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:7F:EF:B9:A8:3A:DA:29:AC:49:78:27:F1:33:59:8C:6E:02:33
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/F6FAF6943C1D11EBB8606E7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.78.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b2:7f:8d:62:95:bc:36:28:5f:9b:3d:49:f6:b1:e6:3b:a0:
9f:8b:57:ca:bf:34:ee:0b:d9:74:2f:b0:09:8c:ab:11:2f:3e:
93:e3:f4:da:92:b5:cc:ba:41:0f:c4:cd:ab:aa:97:5f:8a:3d:
ad:5f:63:10:40:c8:b8:8c:84:d0:48:39:2f:81:13:c7:95:d3:
4c:c2:64:9a:13:50:b9:39:f8:1f:2a:65:a2:3a:6a:1d:f6:e4:
79:cc:c5:35:99:f7:41:8b:a3:e4:13:2d:98:01:e4:c9:ad:c7:
11:1c:07:d1:1b:92:3f:d2:83:4d:48:34:10:bd:0e:dd:10:75:
58:89:f4:8f:65:df:f9:76:95:30:a5:ea:44:8e:f8:ab:fe:a6:
36:a2:ea:55:57:f7:43:16:21:0a:ad:7c:ee:19:03:6d:69:00:
d6:90:5c:91:1d:53:32:3a:d1:10:aa:0a:e4:53:12:72:28:93:
ba:53:b2:21:50:af:1d:07:26:e0:b8:c6:ee:93:18:10:de:3a:
ed:87:69:c7:4b:84:33:21:db:9f:e4:05:a0:01:3f:44:30:d4:
8d:cf:b1:fb:6d:05:7f:64:c5:6d:50:5d:45:55:24:1d:a1:a9:
c2:2c:87:b0:b9:0a:d9:92:3e:71:96:9a:b4:69:c6:75:1c:83:
1e:a2:37:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE
NDUyODk0MTEwHhcNMjMxMjAyMTYyMzA0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTZiNTllOC1mNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3akpAt0WytIaqaZ+HqQQ6GPLPVdbzfNMOmhjI9ml6ToCSMuZIAPt1RqpkU37
NTghgwCZd34EPsmd4ToeQG51iBFCSnVr96PmZbM2lupwi1GnaHYVw3gXsF/2Quah
pAQsAdCR6QfaS8janJovKUblHcbKHHj73Y4mU/CX1PRzgSZ+A6iHWgdrWoNyYJVn
4t+YXro2Galcpl5AhuG0G22zUbmxBBBboMAc3RWY1/qIXkubEKnpOcxTTqgUi3D3
uEbZEfaNk+uMx3xNaotl0vpDUU9vmRPWiXNrks77JylIwDoKjcFm12u3o2uYXKAG
aIlZjzKVN/Mu2on7NTSuOZ4HcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBRkf++5
qDraKaxJeCfxM1mMbgIzMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3
RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTAxQ0UvOTNCQTg1M0E5N0YwMTFFNUI5MjAxMDZBQzRGOUFFMDIvRjZGQUY2OTQz
QzFEMTFFQkI4NjA2RTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnG04wDQYJKoZIhvcNAQELBQADggEBAGGyf41ilbw2KF+b
PUn2seY7oJ+LV8q/NO4L2XQvsAmMqxEvPpPj9NqStcy6QQ/Ezauql1+KPa1fYxBA
yLiMhNBIOS+BE8eV00zCZJoTULk5+B8qZaI6ah325HnMxTWZ90GLo+QTLZgB5Mmt
xxEcB9Ebkj/Sg01INBC9Dt0QdViJ9I9l3/l2lTCl6kSO+Kv+pjai6lVX90MWIQqt
fO4ZA21pANaQXJEdUzI60RCqCuRTEnIok7pTsiFQrx0HJuC4xu6TGBDeOu2HacdL
hDMh25/kBaABP0Qw1I3PsfttBX9kxW1QXUVVJB2hqcIsh7C5CtmSPnGWmrRpxnUc
gx6iN34=
-----END CERTIFICATE-----
Generated at Tue Jan 30 20:33:54 2024 by rpki-client on console-fra.rpki-client.org