Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509D9/9F8A5FBCF1D611EAA2C9997FC4F9AE02/0FE1130EF1D811EA83B9E280C4F9AE02.roa
File: 0FE1130EF1D811EA83B9E280C4F9AE02.roa (raw, json)
Hash identifier: 7mzc7J8HG1tGUAitUXwwV/gAQUod6ZAkED9+KEJgsAk=
Subject key identifier: 6A:C6:AA:87:01:FE:9D:8F:10:6E:38:D5:99:3B:B2:68:5D:D8:39:5D
Certificate issuer: /CN=A91509D9/serialNumber=0E31B7C53F9FD2E1229BFBD6BA75E466BE1D1E14
Certificate serial: 0630
Authority key identifier: 0E:31:B7:C5:3F:9F:D2:E1:22:9B:FB:D6:BA:75:E4:66:BE:1D:1E:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjG3xT-f0uEim_vWunXkZr4dHhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509D9/9F8A5FBCF1D611EAA2C9997FC4F9AE02/0FE1130EF1D811EA83B9E280C4F9AE02.roa
Signing time: Tue 28 Feb 2023 23:49:36 +0000
ROA not before: Tue 28 Feb 2023 23:49:36 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 17747
IP address blocks: 103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509D9/serialNumber=0E31B7C53F9FD2E1229BFBD6BA75E466BE1D1E14
Validity
Not Before: Feb 28 23:49:36 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63fe9310-3627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:ae:da:55:73:84:1b:ef:c0:f6:fc:bb:dc:
37:f3:b1:13:98:8a:8f:3e:34:42:aa:73:87:03:b0:
25:0f:c1:47:02:99:38:d8:13:d4:6b:59:3a:9c:34:
19:f4:25:76:7e:fe:15:ff:aa:4d:cf:64:83:a9:69:
5e:7d:3a:00:d0:a0:4d:45:2c:58:fc:eb:39:ac:34:
08:16:22:50:95:12:5b:10:1f:38:a8:c8:f4:30:12:
8c:6e:d7:5d:33:e3:82:72:65:11:c8:34:d4:02:db:
aa:8c:c8:47:be:25:04:59:80:69:c4:c1:15:75:a4:
57:b0:6d:61:30:46:e2:47:7f:53:12:43:de:0b:a1:
90:39:86:65:41:e2:91:0f:ad:07:d2:32:1a:59:5a:
80:6f:33:2b:4e:b4:a4:45:70:81:d2:43:4b:ad:6c:
e8:f0:52:a0:d9:6e:94:1b:6b:df:dc:97:78:b9:7c:
3b:95:34:bb:7c:85:51:44:11:63:5e:fc:e2:63:ad:
b2:98:65:7c:be:95:06:37:ed:b9:f9:38:06:d4:67:
d4:bc:70:2f:06:3b:58:bd:5c:6d:e3:ec:29:e3:a3:
89:fc:5b:79:32:8f:f6:d6:85:b3:94:91:e1:1b:01:
a9:1d:f8:6f:07:5a:a1:c1:36:20:a3:46:a9:16:46:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C6:AA:87:01:FE:9D:8F:10:6E:38:D5:99:3B:B2:68:5D:D8:39:5D
X509v3 Authority Key Identifier:
keyid:0E:31:B7:C5:3F:9F:D2:E1:22:9B:FB:D6:BA:75:E4:66:BE:1D:1E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509D9/9F8A5FBCF1D611EAA2C9997FC4F9AE02/DjG3xT-f0uEim_vWunXkZr4dHhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjG3xT-f0uEim_vWunXkZr4dHhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509D9/9F8A5FBCF1D611EAA2C9997FC4F9AE02/0FE1130EF1D811EA83B9E280C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.176.0/22
150.129.124.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c2:31:80:c7:79:fe:97:cd:41:c6:fa:d5:75:16:ec:b4:9e:
cc:17:b1:c2:15:7a:11:9c:94:75:d6:ce:f4:c7:7c:11:ce:2c:
89:d7:c1:d3:7f:82:55:6b:d1:4b:95:1a:2c:c8:8b:a6:34:27:
59:31:d9:21:94:14:a4:34:82:81:53:76:d4:74:9a:22:ba:a1:
4c:be:97:a0:4b:31:7e:0d:a9:36:32:5a:fc:6b:07:28:da:8b:
8e:32:50:16:77:8f:a5:93:4f:aa:43:54:35:03:74:d4:32:b1:
0d:ca:71:a8:fc:ee:6b:d6:c1:96:ec:72:f7:50:a6:f9:da:4b:
54:8b:2f:37:1f:dd:87:b9:39:d6:70:42:1a:5d:29:51:77:8b:
6c:be:a9:90:1a:05:35:35:bb:c2:20:14:ba:bd:a7:14:0e:fe:
b4:e2:76:6f:19:6d:83:ce:95:77:90:30:85:5e:12:e1:0c:aa:
c3:77:f9:23:38:35:ca:eb:d2:66:0c:10:df:5f:b1:86:14:61:
88:4b:57:b0:87:07:e8:14:08:59:89:6f:a1:a6:0e:ac:4d:64:
a6:e3:c7:d1:71:0e:45:bb:d1:4f:50:6f:98:81:42:a0:7f:0e:
b8:e1:d5:8f:1a:a2:07:d2:ef:2c:6c:90:e7:89:0f:21:ff:e7:
68:25:29:22
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA5RDkxMTAvBgNVBAUTKDBFMzFCN0M1M0Y5RkQyRTEyMjlCRkJENkJBNzVFNDY2
QkUxRDFFMTQwHhcNMjMwMjI4MjM0OTM2WhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2ZlOTMxMC0zNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+Gu2lVzhBvvwPb8u9w387ETmIqPPjRCqnOHA7AlD8FHApk42BPUa1k6nDQZ
9CV2fv4V/6pNz2SDqWlefToA0KBNRSxY/Os5rDQIFiJQlRJbEB84qMj0MBKMbtdd
M+OCcmURyDTUAtuqjMhHviUEWYBpxMEVdaRXsG1hMEbiR39TEkPeC6GQOYZlQeKR
D60H0jIaWVqAbzMrTrSkRXCB0kNLrWzo8FKg2W6UG2vf3Jd4uXw7lTS7fIVRRBFj
XvziY62ymGV8vpUGN+25+TgG1GfUvHAvBjtYvVxt4+wp46OJ/Ft5Mo/21oWzlJHh
GwGpHfhvB1qhwTYgo0apFkaHnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGrGqocB
/p2PEG441Zk7smhd2DldMB8GA1UdIwQYMBaAFA4xt8U/n9LhIpv71rp15Ga+HR4U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlEOS85RjhBNUZCQ0Yx
RDYxMUVBQTJDOTk5N0ZDNEY5QUUwMi9EakczeFQtZjB1RWltX3ZXdW5Ya1pyNGRI
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RqRzN4VC1mMHVFaW1fdld1blhrWnI0ZEhoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTA5RDkvOUY4QTVGQkNGMUQ2MTFFQUEyQzk5OTdGQzRGOUFFMDIvMEZFMTEzMEVG
MUQ4MTFFQTgzQjlFMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJn4bADBAKWgXwwDQYJKoZIhvcNAQELBQADggEBAFbCMYDH
ef6XzUHG+tV1Fuy0nswXscIVehGclHXWzvTHfBHOLInXwdN/glVr0UuVGizIi6Y0
J1kx2SGUFKQ0goFTdtR0miK6oUy+l6BLMX4NqTYyWvxrByjai44yUBZ3j6WTT6pD
VDUDdNQysQ3Kcaj87mvWwZbscvdQpvnaS1SLLzcf3Ye5OdZwQhpdKVF3i2y+qZAa
BTU1u8IgFLq9pxQO/rTidm8ZbYPOlXeQMIVeEuEMqsN3+SM4Ncrr0mYMEN9fsYYU
YYhLV7CHB+gUCFmJb6GmDqxNZKbjx9FxDkW70U9Qb5iBQqB/Drjh1Y8aogfS7yxs
kOeJDyH/52glKSI=
-----END CERTIFICATE-----
Generated at Wed Sep 6 05:07:31 2023 by rpki-client on console-ams.rpki-client.org