Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/08259F98821D11EF81E8365DC4F9AE02.roa
File: 08259F98821D11EF81E8365DC4F9AE02.roa (raw, json)
Hash identifier: bkQroFPzxFVCKy0RYyUL65G/M3EDQ7kG1wed2W1ghgE=
Subject key identifier: D9:64:91:AA:E0:DD:7E:ED:67:69:E1:2F:D8:37:CB:34:3F:20:9A:BC
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0B08
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/08259F98821D11EF81E8365DC4F9AE02.roa
Signing time: Fri 04 Oct 2024 06:51:07 +0000
ROA not before: Fri 04 Oct 2024 06:51:07 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 09 Oct 2024 07:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Oct 4 06:51:07 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66ff905b-e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:a4:8d:6d:73:4a:9c:1a:7d:41:f0:07:35:
44:70:41:c5:f9:ca:21:17:32:b1:d6:bb:23:0a:00:
d2:19:85:b6:7f:65:65:b1:cf:46:44:01:0c:3e:95:
ce:e0:bb:70:5c:98:e4:21:91:a0:8c:4b:25:99:e5:
69:ab:28:2c:3e:f7:ec:d6:9a:c9:b0:84:a1:c5:af:
f4:91:76:bb:77:4d:db:70:b5:a2:13:db:60:d8:0c:
67:2e:ea:5a:97:b4:a1:37:d7:d0:4f:0a:c3:eb:34:
3d:d7:1e:4a:34:72:3d:2a:53:98:87:45:ca:8c:7a:
24:b7:9f:81:01:80:91:8f:b0:52:66:06:f0:46:f0:
eb:50:08:66:7b:47:d4:ad:cc:af:86:f0:c5:47:fd:
c6:a1:7d:30:72:0a:d5:56:07:6f:de:4b:84:12:50:
af:4d:81:39:38:d3:da:13:59:47:61:23:0b:4a:52:
ad:ca:3a:4a:28:5d:62:c1:03:8b:08:00:97:6a:39:
f5:24:b5:31:bb:57:76:91:11:29:e5:50:d6:5a:17:
cb:46:b8:b6:90:a0:48:87:b5:f0:3f:c3:02:24:0f:
e1:d4:04:14:58:0d:7d:ec:5e:4e:0d:95:c3:06:d5:
1a:e8:e0:15:f3:c6:05:ac:c7:c8:3b:41:bf:fc:ff:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:91:AA:E0:DD:7E:ED:67:69:E1:2F:D8:37:CB:34:3F:20:9A:BC
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/08259F98821D11EF81E8365DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/23
14.192.131.0/24
14.192.136.0/24
14.192.143.0/24
14.192.147.0/24
14.192.149.0-14.192.150.255
14.192.155.0/24
14.192.158.0/23
43.247.120.0-43.247.122.255
103.20.134.0/23
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
76:68:09:0d:76:c9:9e:a5:b3:bb:93:25:e2:b2:76:e3:fa:d7:
7f:fb:2f:a7:87:fa:23:ba:b6:d4:83:42:ac:c3:84:92:6a:a5:
bb:05:9e:d3:fc:fa:9f:96:01:a9:ac:e5:1c:b0:ea:7f:e8:ff:
c9:e2:ac:8c:1c:49:b8:ca:5d:bc:f0:f7:56:57:00:55:e7:35:
b8:23:41:b3:53:1c:eb:b7:c3:34:d2:99:27:69:7d:5d:c5:44:
62:6d:a9:67:ef:95:ac:7d:8c:4a:34:9c:ad:68:16:b0:d2:30:
cf:3b:17:ba:c1:16:0f:f1:e4:7e:cc:4f:63:58:2d:d8:78:15:
5e:fd:00:ca:7a:f8:7b:a8:55:7a:d5:08:07:74:0b:16:69:e6:
27:c9:02:de:56:cc:7e:d8:99:0f:30:27:4e:c0:9a:b1:a6:58:
81:eb:87:6c:87:4a:8e:96:3b:e8:6e:4f:f3:56:5b:e4:a1:62:
98:66:f9:d3:31:33:e4:e8:d6:df:db:46:9c:29:f1:74:35:90:
25:76:61:5b:6d:d4:13:19:4d:af:53:7b:68:97:74:7d:db:93:
56:c5:8f:13:a5:22:cb:e8:0e:b1:6f:92:64:a0:12:ec:e4:fd:
46:8b:c8:7f:e5:65:8e:88:be:f8:2d:2e:08:81:14:3f:bc:09:
d5:b7:db:b5
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjQxMDA0MDY1MTA3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZmOTA1Yi1lMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0ykjW1zSpwafUHwBzVEcEHF+cohFzKx1rsjCgDSGYW2f2Vlsc9GRAEMPpXO
4LtwXJjkIZGgjEslmeVpqygsPvfs1prJsIShxa/0kXa7d03bcLWiE9tg2AxnLupa
l7ShN9fQTwrD6zQ91x5KNHI9KlOYh0XKjHokt5+BAYCRj7BSZgbwRvDrUAhme0fU
rcyvhvDFR/3GoX0wcgrVVgdv3kuEElCvTYE5ONPaE1lHYSMLSlKtyjpKKF1iwQOL
CACXajn1JLUxu1d2kREp5VDWWhfLRri2kKBIh7XwP8MCJA/h1AQUWA197F5ODZXD
BtUa6OAV88YFrMfIO0G//P9LTQIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFNlkkarg
3X7tZ2nhL9g3yzQ/IJq8MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMDgyNTlGOTg4
MjFEMTFFRjgxRTgzNjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwegYIKwYBBQUHAQcBAf8E
azBpMFgEAgABMFIDBAEOwIADBAAOwIMDBAAOwIgDBAAOwI8DBAAOwJMwDAMEAA7A
lQMEAA7AlgMEAA7AmwMEAQ7AnjAMAwQDK/d4AwQAK/d6AwQBZxSGAwQFb1yAMA0E
AgACMAcDBQAkA3mAMA0GCSqGSIb3DQEBCwUAA4IBAQB2aAkNdsmepbO7kyXisnbj
+td/+y+nh/ojurbUg0Ksw4SSaqW7BZ7T/PqflgGprOUcsOp/6P/J4qyMHEm4yl28
8PdWVwBV5zW4I0GzUxzrt8M00pknaX1dxURibaln75WsfYxKNJytaBaw0jDPOxe6
wRYP8eR+zE9jWC3YeBVe/QDKevh7qFV61QgHdAsWaeYnyQLeVsx+2JkPMCdOwJqx
pliB64dsh0qOljvobk/zVlvkoWKYZvnTMTPk6Nbf20acKfF0NZAldmFbbdQTGU2v
U3tol3R925NWxY8TpSLL6A6xb5JkoBLs5P1Gi8h/5WWOiL74LS4IgRQ/vAnVt9u1
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:43 2025 by rpki-client