Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/43B0268CAB3A11EFB5512E6FC4F9AE02.roa
File: 43B0268CAB3A11EFB5512E6FC4F9AE02.roa (raw, json)
Hash identifier: jiecgmFVxX2y5vByYaMwK4Xga40S4kozRmUE8YvyXJQ=
Subject key identifier: 93:88:94:F2:AA:3F:D4:C4:94:86:AD:C8:56:59:A4:8D:B9:E8:ED:1D
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0B90
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/43B0268CAB3A11EFB5512E6FC4F9AE02.roa
Signing time: Mon 25 Nov 2024 14:33:40 +0000
ROA not before: Mon 25 Nov 2024 14:33:40 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 06 Dec 2024 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2960 (0xb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Nov 25 14:33:40 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67448ac4-dca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:81:89:54:01:f7:ec:24:55:48:0d:39:1c:
23:1e:40:04:0a:84:60:b5:f8:41:0b:96:11:fc:88:
46:ed:d2:7e:70:55:0b:1f:5f:5e:7b:8b:13:42:32:
a9:87:40:b2:81:bf:c1:5b:2b:8c:62:2b:f1:a1:87:
92:c2:89:06:aa:c3:d0:50:c0:d8:cc:d1:e7:4c:fc:
e0:78:f2:00:ac:c6:06:da:db:f9:e3:c7:59:33:fb:
6f:f4:a0:77:66:95:3f:85:29:d2:34:f9:af:88:ce:
b0:97:88:81:a7:38:25:e7:b3:f7:e6:76:f9:60:8b:
6e:45:93:9b:b8:88:17:1b:af:b3:12:85:f7:19:51:
d6:7b:b1:62:1c:c1:f7:0d:25:0b:c5:28:0b:6c:b9:
08:2e:ce:9f:e3:3f:15:c0:01:28:4f:32:e0:28:87:
d2:dd:5b:c8:e1:bb:a6:8a:e9:d5:e1:60:a8:4e:98:
af:28:29:d5:92:a8:3a:68:8a:b9:02:6f:35:01:8d:
8d:14:39:d6:36:a4:8b:17:fc:6a:55:a0:00:4c:b0:
c4:9d:75:6f:6c:ce:b0:e5:ab:56:d0:76:70:48:60:
44:f6:df:ce:fd:3b:c2:c0:77:08:d3:8f:73:83:6a:
20:70:55:a1:35:70:ce:cc:f6:03:77:2b:31:3c:b7:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:94:F2:AA:3F:D4:C4:94:86:AD:C8:56:59:A4:8D:B9:E8:ED:1D
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/43B0268CAB3A11EFB5512E6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/23
14.192.131.0/24
14.192.133.0/24
14.192.136.0/24
14.192.143.0-14.192.144.255
14.192.147.0-14.192.150.255
14.192.155.0-14.192.156.255
14.192.158.0/23
43.247.120.0-43.247.122.255
103.20.132.0/24
103.20.134.0/24
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
a5:67:16:cf:58:71:09:91:d2:cd:c5:6d:1f:ef:46:a7:21:8b:
87:38:9f:8f:b3:76:d0:ee:13:6a:d3:85:42:c4:84:c6:93:2a:
74:12:be:14:1a:0f:4e:d0:62:e4:6e:4f:3d:7a:04:ea:0a:65:
cb:5f:2d:91:c5:f7:0d:2b:e0:e9:4f:4b:2b:f6:8a:f9:cd:bd:
97:9a:4e:7e:63:3d:3a:69:77:27:31:62:aa:c0:0c:06:c5:6b:
be:94:39:64:73:44:0d:30:17:fe:e9:0e:60:3c:24:5c:be:b4:
79:63:6f:a4:81:b9:09:f8:58:ca:bd:d8:b7:72:a4:1e:6e:19:
ad:c1:1b:2d:1b:7e:d2:b0:df:8f:67:7a:c5:da:34:b3:66:c4:
30:b4:5d:bd:ee:da:a8:70:71:f2:ce:2a:c0:a7:ca:4c:33:87:
8e:4e:cb:44:0d:3a:cd:a6:b8:ff:af:38:c6:cc:74:8c:88:20:
d4:65:61:96:42:34:9e:31:2c:ab:ee:44:e9:4d:12:b0:a8:71:
c9:68:e0:16:c5:9c:f9:fb:27:6b:1f:e9:c5:7f:0b:c3:0c:d7:
46:3e:72:a1:c3:3f:21:1e:8c:59:11:2f:de:ea:bf:c5:ab:ae:
83:1e:94:18:aa:27:8a:2a:28:0e:46:c0:67:23:b6:59:1b:75:
b8:64:c2:b4
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjQxMTI1MTQzMzQwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ0OGFjNC1kY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtK6BiVQB9+wkVUgNORwjHkAECoRgtfhBC5YR/IhG7dJ+cFULH19ee4sTQjKp
h0Cygb/BWyuMYivxoYeSwokGqsPQUMDYzNHnTPzgePIArMYG2tv548dZM/tv9KB3
ZpU/hSnSNPmviM6wl4iBpzgl57P35nb5YItuRZObuIgXG6+zEoX3GVHWe7FiHMH3
DSULxSgLbLkILs6f4z8VwAEoTzLgKIfS3VvI4bumiunV4WCoTpivKCnVkqg6aIq5
Am81AY2NFDnWNqSLF/xqVaAATLDEnXVvbM6w5atW0HZwSGBE9t/O/TvCwHcI049z
g2ogcFWhNXDOzPYDdysxPLeagQIDAQABo4IDCDCCAwQwHQYDVR0OBBYEFJOIlPKq
P9TElIatyFZZpI256O0dMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNDNCMDI2OENB
QjNBMTFFRkI1NTEyRTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZEGCCsGAQUFBwEHAQH/
BIGBMH8wbgQCAAEwaAMEAQ7AgAMEAA7AgwMEAA7AhQMEAA7AiDAMAwQADsCPAwQA
DsCQMAwDBAAOwJMDBAAOwJYwDAMEAA7AmwMEAA7AnAMEAQ7AnjAMAwQDK/d4AwQA
K/d6AwQAZxSEAwQAZxSGAwQFb1yAMA0EAgACMAcDBQAkA3mAMA0GCSqGSIb3DQEB
CwUAA4IBAQClZxbPWHEJkdLNxW0f70anIYuHOJ+Ps3bQ7hNq04VCxITGkyp0Er4U
Gg9O0GLkbk89egTqCmXLXy2RxfcNK+DpT0sr9or5zb2Xmk5+Yz06aXcnMWKqwAwG
xWu+lDlkc0QNMBf+6Q5gPCRcvrR5Y2+kgbkJ+FjKvdi3cqQebhmtwRstG37SsN+P
Z3rF2jSzZsQwtF297tqocHHyzirAp8pMM4eOTstEDTrNprj/rzjGzHSMiCDUZWGW
QjSeMSyr7kTpTRKwqHHJaOAWxZz5+ydrH+nFfwvDDNdGPnKhwz8hHoxZES/e6r/F
q66DHpQYqieKKigORsBnI7ZZG3W4ZMK0
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:26 2025 by rpki-client