Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/7EFDFA184E1811EFA4D15056C4F9AE02.roa
File: 7EFDFA184E1811EFA4D15056C4F9AE02.roa (raw, json)
Hash identifier: X/KL9rOXO/6KmnwT0+OErRMb0HCzeXhAKOC2MKVtwds=
Subject key identifier: 1F:6F:6F:75:D2:9D:1C:63:BA:5A:6A:C9:40:F7:BB:94:62:13:3E:7C
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 0103
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/7EFDFA184E1811EFA4D15056C4F9AE02.roa
Signing time: Tue 30 Jul 2024 02:07:39 +0000
ROA not before: Tue 30 Jul 2024 02:07:39 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 21859
IP address blocks: 103.92.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 04:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Jul 30 02:07:39 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a84aeb-c0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:6b:98:7f:e9:b0:98:33:21:02:f2:97:38:
ee:cd:3c:5a:f0:c9:95:b5:56:bd:b6:76:2d:32:01:
1b:8b:5e:06:4e:4f:b9:82:f3:12:12:0f:bb:a7:41:
3e:7b:a5:8a:b9:56:f7:5d:bd:89:df:de:73:2c:9d:
f3:2c:8a:de:23:92:ee:94:ac:8a:51:0e:8a:c1:97:
95:2d:4a:f3:83:20:2f:da:ac:c1:04:22:37:63:22:
27:cc:f6:25:b7:09:8d:64:e0:a7:9d:c2:9b:f8:07:
6b:e8:3a:09:40:ce:cb:e8:b3:0a:da:bd:78:15:25:
31:e7:b8:01:07:89:c5:5a:b8:e3:d0:7f:f5:97:6b:
6f:85:3b:4d:5d:9e:8c:0b:6c:9f:3e:40:ae:18:4e:
8c:51:cd:b3:93:ed:c7:f1:6a:29:f7:3e:03:9a:00:
e6:66:55:76:64:b3:01:5b:da:21:64:24:05:4a:9a:
9d:03:c4:6b:49:e8:6c:97:e6:ae:cc:6a:e9:79:e2:
36:39:74:0a:70:88:23:f8:f8:15:cf:40:57:5f:c6:
c1:25:48:d1:ce:1c:46:ba:db:9f:1e:1d:37:b0:f2:
92:ff:0e:9d:cb:29:09:4b:6c:af:4d:cc:c2:50:e5:
4b:d0:d6:1b:b0:cd:a1:d7:0c:f2:ce:0f:b4:d4:93:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6F:6F:75:D2:9D:1C:63:BA:5A:6A:C9:40:F7:BB:94:62:13:3E:7C
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/7EFDFA184E1811EFA4D15056C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f5:2f:4b:5d:7d:8b:36:de:53:0a:f0:f6:ab:6e:ef:d6:9d:
66:64:d4:f3:96:46:b3:9a:bd:b3:35:e0:5b:2c:de:18:37:ed:
8e:0b:8a:ee:d4:c1:1b:6a:9b:d9:8d:b1:a3:0e:a5:67:32:fc:
bd:5f:45:4c:4e:0d:bf:a9:96:dd:79:d5:71:d1:76:83:c6:f9:
98:70:77:c9:f4:fc:13:95:99:61:64:b0:b0:7c:3f:c3:ac:5d:
9b:fa:f7:a2:08:db:77:54:f7:23:fe:e2:8c:2a:43:21:c6:00:
01:b1:c8:cd:b2:f4:88:9e:7a:0c:8b:2f:71:ae:51:08:ae:82:
23:15:dc:c8:6a:90:31:63:e6:cd:fc:ab:8d:44:f1:6e:e3:61:
d6:f2:d2:92:f2:25:01:12:f0:f0:fc:4d:9d:6f:df:51:e0:78:
e5:d8:06:4c:a4:5c:0f:5e:8b:37:7c:51:f0:d1:2d:96:4c:b6:
af:e4:20:f5:e3:83:cb:6e:a8:b9:c6:9a:5e:18:b8:d6:30:b6:
9a:39:fd:70:7d:c5:f6:ed:f3:d7:d7:8a:9b:38:36:11:5c:e2:
c6:02:d3:0b:3d:71:6c:df:f2:d0:80:41:6a:5a:5b:c9:c1:b4:
b3:37:31:c2:44:f1:78:ac:f4:10:47:95:24:75:d4:8e:7b:4c:
6d:32:37:6d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkxMkYxMTAvBgNVBAUTKEE5OEI0RDc1M0E4NERGRDQ5REE3RTIzMDdFMzE5MkE4
QzRGRjk4OTUwHhcNMjQwNzMwMDIwNzM5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE4NGFlYi1jMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnm9rmH/psJgzIQLylzjuzTxa8MmVtVa9tnYtMgEbi14GTk+5gvMSEg+7p0E+
e6WKuVb3Xb2J395zLJ3zLIreI5LulKyKUQ6KwZeVLUrzgyAv2qzBBCI3YyInzPYl
twmNZOCnncKb+Adr6DoJQM7L6LMK2r14FSUx57gBB4nFWrjj0H/1l2tvhTtNXZ6M
C2yfPkCuGE6MUc2zk+3H8Wop9z4DmgDmZlV2ZLMBW9ohZCQFSpqdA8RrSehsl+au
zGrpeeI2OXQKcIgj+PgVz0BXX8bBJUjRzhxGutufHh03sPKS/w6dyykJS2yvTczC
UOVL0NYbsM2h1wzyzg+01JOqaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB9vb3XS
nRxjulpqyUD3u5RiEz58MB8GA1UdIwQYMBaAFKmLTXU6hN/UnafiMH4xkqjE/5iV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTEyRi8wQTA2NzkwODBB
NTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5U2RwLUl3ZmpHU3FNVF9t
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FZdE5kVHFFMzlTZHAtSXdmakdTcU1UX21KVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTkxMkYvMEEwNjc5MDgwQTUxMTFFRThENzVCNjZCQzRGOUFFMDIvN0VGREZBMTg0
RTE4MTFFRkE0RDE1MDU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnXJEwDQYJKoZIhvcNAQELBQADggEBABf1L0tdfYs23lMK
8Parbu/WnWZk1POWRrOavbM14Fss3hg37Y4Liu7UwRtqm9mNsaMOpWcy/L1fRUxO
Db+plt151XHRdoPG+Zhwd8n0/BOVmWFksLB8P8OsXZv696II23dU9yP+4owqQyHG
AAGxyM2y9IieegyLL3GuUQiugiMV3MhqkDFj5s38q41E8W7jYdby0pLyJQES8PD8
TZ1v31HgeOXYBkykXA9eizd8UfDRLZZMtq/kIPXjg8tuqLnGml4YuNYwtpo5/XB9
xfbt89fXips4NhFc4sYC0ws9cWzf8tCAQWpaW8nBtLM3McJE8Xis9BBHlSR11I57
TG0yN20=
-----END CERTIFICATE-----
Generated at Thu Aug 1 06:17:41 2024 by rpki-client on console-ams.rpki-client.org