Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/310862F4480011EE930A2A65C4F9AE02.roa
File: 310862F4480011EE930A2A65C4F9AE02.roa (raw, json)
Hash identifier: VyoA7k26WpYzyE0g/vy8JVyGMjzkh02wBEag4x85ckY=
Subject key identifier: 21:F0:27:19:9A:A0:FD:C6:EE:AE:45:44:07:A7:A1:F9:1D:52:F4:75
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0819
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/310862F4480011EE930A2A65C4F9AE02.roa
Signing time: Mon 18 Sep 2023 06:17:47 +0000
ROA not before: Mon 18 Sep 2023 06:17:47 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
43.174.0.0/16 maxlen: 24
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.114.0/23 maxlen: 24
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:1d::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/48 maxlen: 48
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:31::/48 maxlen: 48
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5b::/48 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6a::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Sep 18 06:17:47 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6507eb8a-7b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:7d:57:bc:d9:d4:7e:3f:6d:94:18:76:95:
f7:62:f1:19:66:fe:59:5e:63:fc:78:51:a6:c0:0e:
45:f8:c5:17:49:db:1c:da:78:c3:a7:f4:61:5d:cb:
64:bc:95:40:9f:e0:cb:39:3a:bb:79:2b:04:7b:39:
18:6d:6f:e7:71:07:43:11:51:0c:bf:6d:f1:28:b0:
96:a5:93:dc:96:bf:92:a9:60:7f:8a:86:d5:8a:ae:
e7:3b:0f:34:cb:14:da:f1:e2:c1:7a:da:70:5c:cd:
69:44:74:f6:45:67:78:a5:5d:37:c3:1f:d2:8a:59:
61:25:65:2b:64:96:db:d2:35:c5:42:b0:39:9c:f0:
0f:a2:e4:2c:d5:88:df:88:60:b5:c5:fd:df:6f:3b:
eb:c3:32:ef:be:ca:6d:6f:81:21:19:60:95:c0:8f:
ed:87:67:40:08:32:e9:5c:bc:cf:2a:ef:a5:06:87:
c3:aa:4f:ff:eb:cd:27:87:4d:15:e7:27:f2:41:28:
35:58:37:62:74:1c:e2:5d:cb:59:b3:a0:5b:fa:04:
6e:0a:57:fe:4b:7e:ff:71:63:63:a2:c8:9c:66:df:
6f:b2:cd:f2:02:06:a1:42:b6:c4:ed:fe:38:8b:75:
cb:d4:7f:4e:09:d7:7a:b1:80:2a:5b:db:b2:4b:b4:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:27:19:9A:A0:FD:C6:EE:AE:45:44:07:A7:A1:F9:1D:52:F4:75
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/310862F4480011EE930A2A65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0/23
43.130.0.0-43.130.191.255
43.131.0.0/18
43.131.224.0/19
43.132.68.0/24
43.132.96.0-43.132.255.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.152.96.0/19
43.152.192.0-43.174.255.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.114.0/23
150.109.90.0/23
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
1a:7f:a8:60:71:c9:bb:8d:15:21:ef:08:89:0b:c1:65:f5:42:
47:f5:c5:71:c0:5e:43:43:d5:f4:82:15:f3:fd:ff:ee:e7:5a:
c8:cb:24:be:d2:1c:03:06:87:0d:e2:d7:50:cf:ff:15:16:53:
f2:eb:a2:f2:4a:d0:a9:ee:29:2b:b1:8a:f5:5e:e3:a5:7f:c0:
49:1e:fe:a2:a4:85:34:16:dd:fa:1f:ed:9b:28:01:fb:87:84:
18:0f:bd:49:47:fa:a0:ff:e6:cc:01:76:e4:bc:b8:a0:5f:73:
9f:79:5d:99:fb:23:96:e3:11:1d:81:b5:83:4d:f4:bc:4c:d3:
f1:35:ed:b5:e5:03:1c:76:a4:fb:2c:c4:cd:92:1e:61:ea:99:
47:a1:d8:13:75:4f:66:0a:89:9b:ba:a0:20:1d:5a:fe:c9:64:
a4:9a:17:33:a5:bb:0b:b7:b7:9d:b9:58:ef:86:2b:4d:a6:a2:
c4:68:d6:77:a3:f7:eb:f1:d7:53:60:1c:e2:6b:63:bd:91:99:
5f:2b:f6:d9:67:61:13:8f:8f:a2:2a:a5:94:30:dd:95:79:c8:
38:d9:f5:03:2e:2b:ad:a6:11:9b:58:02:ee:c3:e0:f2:11:90:
3f:3d:3c:39:a2:df:0e:a9:c2:d0:23:5f:93:3a:04:91:56:e1:
79:03:20:ae
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjMwOTE4MDYxNzQ3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTA3ZWI4YS03YjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrd9V7zZ1H4/bZQYdpX3YvEZZv5ZXmP8eFGmwA5F+MUXSdsc2njDp/RhXctk
vJVAn+DLOTq7eSsEezkYbW/ncQdDEVEMv23xKLCWpZPclr+SqWB/iobViq7nOw80
yxTa8eLBetpwXM1pRHT2RWd4pV03wx/SillhJWUrZJbb0jXFQrA5nPAPouQs1Yjf
iGC1xf3fbzvrwzLvvsptb4EhGWCVwI/th2dACDLpXLzPKu+lBofDqk//680nh00V
5yfyQSg1WDdidBziXctZs6Bb+gRuClf+S37/cWNjosicZt9vss3yAgahQrbE7f44
i3XL1H9OCdd6sYAqW9uyS7TUVQIDAQABo4IDMTCCAy0wHQYDVR0OBBYEFCHwJxma
oP3G7q5FRAenofkdUvR1MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvMzEwODYyRjQ0
ODAwMTFFRTkzMEEyQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgboGCCsGAQUFBwEHAQH/
BIGqMIGnMIGWBAIAATCBjwMEASuA3jALAwMBK4IDBAYrgoADBAYrgwADBAUrg+AD
BAArhEQwCwMEBSuEYAMDACuEAwQHK4YAAwQAK4c6AwQAK4e7AwQFK5hgMAsDBAYr
mMADAwArrgMEAGUgjAMEAWUhBDAMAwQAZSERAwQCZSEQAwQBZSEaAwQBZSEeAwQA
ZSEpAwQBZSFyAwQBlm1aMAwEAgACMAYDBAAkDcAwDQYJKoZIhvcNAQELBQADggEB
ABp/qGBxybuNFSHvCIkLwWX1Qkf1xXHAXkND1fSCFfP9/+7nWsjLJL7SHAMGhw3i
11DP/xUWU/LrovJK0KnuKSuxivVe46V/wEke/qKkhTQW3fof7ZsoAfuHhBgPvUlH
+qD/5swBduS8uKBfc595XZn7I5bjER2BtYNN9LxM0/E17bXlAxx2pPssxM2SHmHq
mUeh2BN1T2YKiZu6oCAdWv7JZKSaFzOluwu3t525WO+GK02mosRo1nej9+vx11Ng
HOJrY72RmV8r9tlnYROPj6IqpZQw3ZV5yDjZ9QMuK62mEZtYAu7D4PIRkD89PDmi
3w6pwtAjX5M6BJFW4XkDIK4=
-----END CERTIFICATE-----
Generated at Tue Oct 24 10:13:10 2023 by rpki-client on console-ams.rpki-client.org