Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/113F88AA34FC11EF84CCF27BC4F9AE02.roa
File: 113F88AA34FC11EF84CCF27BC4F9AE02.roa (raw, json)
Hash identifier: C9aj3h31yQlBoidqAgO8t4IxUloIug/2ZSOr6UkD2/s=
Subject key identifier: 7A:A0:F4:33:7D:78:DD:94:F5:F1:93:AA:76:73:67:1B:27:37:F2:E1
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: F0
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/113F88AA34FC11EF84CCF27BC4F9AE02.roa
Signing time: Fri 28 Jun 2024 03:11:10 +0000
ROA not before: Fri 28 Jun 2024 03:11:10 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.92.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 02:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Jun 28 03:11:10 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667e29ce-8c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:bf:ff:9f:b2:42:f2:7e:ef:88:3d:d4:15:
a9:b5:46:00:0b:01:6c:66:18:0f:39:91:f4:34:0a:
e7:bb:ed:6c:3e:3a:fc:87:c6:fb:d3:a8:be:7c:ef:
64:5b:b5:f6:2f:6d:fa:23:97:62:05:84:03:0d:6f:
b6:33:11:ef:34:67:35:e9:de:ad:cb:07:20:6e:ce:
a2:f2:fa:9a:04:e5:01:e1:a6:30:ad:13:18:75:24:
d9:12:6d:d0:ef:ab:71:ea:c4:63:1d:cb:55:41:32:
14:fc:e4:49:f7:d3:cd:ae:26:9c:2b:b9:00:d5:e3:
d6:ff:43:52:67:63:f8:64:47:a9:de:0f:ed:a1:f5:
4c:3e:93:ed:8b:22:56:b5:05:75:e0:d2:fd:9b:69:
6e:6a:b6:c9:1f:0d:7b:31:88:ad:1c:58:19:7e:29:
57:e0:dd:c4:c4:38:b2:fd:cd:0d:2c:57:d1:b4:35:
9b:76:61:4e:25:45:9f:7c:32:44:b5:80:56:fd:87:
99:be:41:3b:a4:7e:55:81:f1:c1:82:0e:14:94:7c:
ba:76:0d:15:8f:9d:41:e5:78:e6:e7:1e:f3:16:bf:
4f:e2:c0:87:32:5d:fa:3b:b3:a8:44:8d:0c:f4:72:
b4:07:6f:6d:26:55:2f:6c:9f:cd:0a:f3:8f:18:6f:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:F4:33:7D:78:DD:94:F5:F1:93:AA:76:73:67:1B:27:37:F2:E1
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/113F88AA34FC11EF84CCF27BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3e:3f:3e:3d:71:99:0c:54:53:e0:f1:c2:e8:8f:9c:79:0c:
e8:f0:5a:a1:c7:19:4d:4f:49:59:e3:86:2b:ae:02:df:d1:bd:
7a:4a:eb:3a:c8:46:da:55:c6:25:58:e2:31:86:2b:98:6a:5a:
56:50:72:6f:0c:b1:50:6c:c2:8e:31:9f:56:12:5f:7d:a0:98:
f6:09:fa:58:8e:c4:d3:16:68:b7:0a:5d:0d:ac:cd:8b:98:46:
b6:44:08:81:0e:76:82:aa:bc:42:57:11:88:56:82:de:3f:f9:
de:1c:7e:70:b6:02:0f:4e:5f:21:45:92:5f:96:af:75:de:6e:
3b:1c:44:2b:c4:9c:47:c3:af:ee:45:bf:a1:6a:82:b7:74:4c:
0e:01:83:1f:83:74:23:15:33:0b:09:ed:1e:94:70:68:c1:5e:
bd:03:5a:55:36:10:64:7f:84:de:27:4a:87:df:05:40:91:70:
60:45:af:5c:79:fc:cd:76:51:02:a0:9d:4a:83:74:51:39:50:
96:37:5e:11:9c:7f:bc:92:2b:64:02:16:9c:52:9b:97:59:ad:
6f:6e:c5:12:a3:79:e3:e4:05:43:9d:71:ad:28:39:97:cb:b4:
8c:f6:9f:3e:89:4e:16:94:aa:db:8e:af:e5:e0:f5:eb:ff:2a:
75:be:b5:52
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkxMkYxMTAvBgNVBAUTKEE5OEI0RDc1M0E4NERGRDQ5REE3RTIzMDdFMzE5MkE4
QzRGRjk4OTUwHhcNMjQwNjI4MDMxMTEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdlMjljZS04YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3oC//5+yQvJ+74g91BWptUYACwFsZhgPOZH0NArnu+1sPjr8h8b706i+fO9k
W7X2L236I5diBYQDDW+2MxHvNGc16d6tywcgbs6i8vqaBOUB4aYwrRMYdSTZEm3Q
76tx6sRjHctVQTIU/ORJ99PNriacK7kA1ePW/0NSZ2P4ZEep3g/tofVMPpPtiyJW
tQV14NL9m2luarbJHw17MYitHFgZfilX4N3ExDiy/c0NLFfRtDWbdmFOJUWffDJE
tYBW/YeZvkE7pH5VgfHBgg4UlHy6dg0Vj51B5Xjm5x7zFr9P4sCHMl36O7OoRI0M
9HK0B29tJlUvbJ/NCvOPGG+IYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHqg9DN9
eN2U9fGTqnZzZxsnN/LhMB8GA1UdIwQYMBaAFKmLTXU6hN/UnafiMH4xkqjE/5iV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTEyRi8wQTA2NzkwODBB
NTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5U2RwLUl3ZmpHU3FNVF9t
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FZdE5kVHFFMzlTZHAtSXdmakdTcU1UX21KVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTkxMkYvMEEwNjc5MDgwQTUxMTFFRThENzVCNjZCQzRGOUFFMDIvMTEzRjg4QUEz
NEZDMTFFRjg0Q0NGMjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnXJEwDQYJKoZIhvcNAQELBQADggEBABc+Pz49cZkMVFPg
8cLoj5x5DOjwWqHHGU1PSVnjhiuuAt/RvXpK6zrIRtpVxiVY4jGGK5hqWlZQcm8M
sVBswo4xn1YSX32gmPYJ+liOxNMWaLcKXQ2szYuYRrZECIEOdoKqvEJXEYhWgt4/
+d4cfnC2Ag9OXyFFkl+Wr3XebjscRCvEnEfDr+5Fv6Fqgrd0TA4Bgx+DdCMVMwsJ
7R6UcGjBXr0DWlU2EGR/hN4nSoffBUCRcGBFr1x5/M12UQKgnUqDdFE5UJY3XhGc
f7ySK2QCFpxSm5dZrW9uxRKjeePkBUOdca0oOZfLtIz2nz6JThaUqtuOr+Xg9ev/
KnW+tVI=
-----END CERTIFICATE-----
Generated at Tue Jul 30 04:09:48 2024 by rpki-client on console-fra.rpki-client.org