Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/24CFC5F02C1F11EF88E22248C4F9AE02.roa
File: 24CFC5F02C1F11EF88E22248C4F9AE02.roa (raw, json)
Hash identifier: BCRzT2DyAadW5+iQ9OldC1pzTbYF9Q8SE08HlwLwGT4=
Subject key identifier: D6:21:3E:0A:DD:19:76:55:97:77:72:03:17:E9:48:8E:68:36:5E:79
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A1C
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/24CFC5F02C1F11EF88E22248C4F9AE02.roa
Signing time: Thu 11 Jul 2024 21:57:20 +0000
ROA not before: Thu 11 Jul 2024 21:57:20 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133933
IP address blocks: 14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 21:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2588 (0xa1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 11 21:57:20 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6690553f-ebc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:7e:29:17:41:e9:ef:89:2e:a7:4e:82:45:
c5:f0:27:b3:84:95:aa:d6:b7:34:49:d5:82:eb:de:
a0:42:15:a9:54:5b:fc:1d:f8:eb:00:4d:be:d4:a5:
75:32:fe:94:48:b3:58:c3:ac:86:8d:40:68:70:da:
82:9c:f4:52:16:69:4c:aa:15:91:98:80:21:0c:4f:
a1:76:d3:c2:3b:3b:35:7e:c2:e3:64:40:ef:40:26:
13:b4:d1:3e:36:6b:8b:17:8f:3d:38:2d:be:ee:85:
fc:12:f7:3f:ce:4a:0e:c4:d0:c5:b9:0f:ac:54:ed:
3b:1e:8e:3e:a6:d6:c8:a8:2b:bb:78:3b:98:44:36:
b9:81:cc:50:b3:e6:1d:a4:06:b7:52:58:12:0f:31:
4e:e0:9a:50:ab:17:88:75:35:cf:87:8d:bc:f5:e7:
22:96:82:9f:06:06:97:0e:cb:35:04:a8:db:96:35:
1f:ac:a5:02:81:6b:d9:8a:77:18:6f:64:6a:e7:62:
69:4b:4f:7b:b2:b3:a5:5a:e3:43:c5:47:e7:f3:d5:
ea:ac:29:74:7b:63:9b:34:8a:3b:12:7c:d3:6c:ea:
5c:18:b0:c7:c1:ac:58:64:d1:73:5f:70:83:3b:93:
19:87:2c:77:1d:1a:23:cc:94:7a:c0:86:95:a4:7d:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:21:3E:0A:DD:19:76:55:97:77:72:03:17:E9:48:8E:68:36:5E:79
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/24CFC5F02C1F11EF88E22248C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.129.0/24
14.192.131.0/24
14.192.139.0/24
14.192.145.0/24
43.247.120.0/22
103.20.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:e4:5c:8b:9b:bd:9b:bb:a6:75:c3:c2:fb:20:2f:29:f5:6a:
45:f5:3c:9d:4b:cd:3b:14:7f:0b:54:56:cb:12:c2:2d:a4:9c:
2e:28:c8:3c:9d:26:03:40:58:17:f6:39:b6:60:58:f1:60:3e:
62:ac:b6:c4:d7:2e:c7:a0:ef:8c:00:d0:6b:cf:34:19:16:67:
49:7d:61:d1:14:eb:b4:bf:aa:49:13:9c:e6:e1:0f:75:10:01:
50:47:01:ec:cb:f3:8c:ad:0a:46:8f:f0:63:4f:8a:d8:1d:d9:
df:34:1a:14:1c:07:66:24:84:bc:b0:12:be:8f:bd:0f:67:85:
94:99:9f:f7:9f:97:7e:ff:05:2e:5d:d8:ad:15:d7:8d:2e:78:
f6:59:77:ad:2f:88:52:92:66:81:ca:d6:e5:a3:ef:43:db:b2:
0a:e1:5a:9f:73:36:29:54:29:70:bd:f4:bd:30:9a:f1:3b:20:
1a:12:2a:bf:ee:75:e7:33:78:64:28:db:c0:3a:be:9a:7d:2f:
10:c7:94:b2:44:6f:82:0e:a0:2c:ec:a4:c7:76:03:71:d2:73:
c1:f6:b7:78:12:21:f7:ed:b5:5f:eb:16:bf:b4:ac:12:65:b7:
aa:0b:32:5b:b1:a1:a0:4f:5e:1c:ae:d9:86:30:3a:ee:aa:9d:
fd:bf:f7:29
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjQwNzExMjE1NzIwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjkwNTUzZi1lYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/l+KRdB6e+JLqdOgkXF8CezhJWq1rc0SdWC696gQhWpVFv8HfjrAE2+1KV1
Mv6USLNYw6yGjUBocNqCnPRSFmlMqhWRmIAhDE+hdtPCOzs1fsLjZEDvQCYTtNE+
NmuLF489OC2+7oX8Evc/zkoOxNDFuQ+sVO07Ho4+ptbIqCu7eDuYRDa5gcxQs+Yd
pAa3UlgSDzFO4JpQqxeIdTXPh4289eciloKfBgaXDss1BKjbljUfrKUCgWvZincY
b2Rq52JpS097srOlWuNDxUfn89XqrCl0e2ObNIo7EnzTbOpcGLDHwaxYZNFzX3CD
O5MZhyx3HRojzJR6wIaVpH2uPwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFNYhPgrd
GXZVl3dyAxfpSI5oNl55MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMjRDRkM1RjAy
QzFGMTFFRjg4RTIyMjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBAAOwIEDBAAOwIMDBAAOwIsDBAAOwJEDBAIr93gDBAJnFIQw
DQYJKoZIhvcNAQELBQADggEBAI/kXIubvZu7pnXDwvsgLyn1akX1PJ1LzTsUfwtU
VssSwi2knC4oyDydJgNAWBf2ObZgWPFgPmKstsTXLseg74wA0GvPNBkWZ0l9YdEU
67S/qkkTnObhD3UQAVBHAezL84ytCkaP8GNPitgd2d80GhQcB2YkhLywEr6PvQ9n
hZSZn/efl37/BS5d2K0V140uePZZd60viFKSZoHK1uWj70PbsgrhWp9zNilUKXC9
9L0wmvE7IBoSKr/udeczeGQo28A6vpp9LxDHlLJEb4IOoCzspMd2A3HSc8H2t3gS
IffttV/rFr+0rBJlt6oLMluxoaBPXhyu2YYwOu6qnf2/9yk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:17 2025 by rpki-client