Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/78D11314564211EFAF1C7F69C4F9AE02.roa
File: 78D11314564211EFAF1C7F69C4F9AE02.roa (raw, json)
Hash identifier: f8axHdJ87eNMnbAJpCBHhwGIJp65y7oLDhIUsr/EHg4=
Subject key identifier: EF:94:8B:D0:81:A8:F4:A5:BC:80:26:24:5D:F1:9C:D1:9C:2C:93:A6
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0AA3
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/78D11314564211EFAF1C7F69C4F9AE02.roa
Signing time: Tue 03 Sep 2024 07:41:14 +0000
ROA not before: Tue 03 Sep 2024 07:41:14 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 43260
IP address blocks: 14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 18:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Sep 3 07:41:14 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66d6bd9a-3fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:ea:a2:cf:c2:20:7e:e6:c2:36:06:4f:87:
19:64:33:53:78:0b:ef:e1:90:8c:bf:6d:71:05:7b:
b9:d7:ca:81:df:35:99:2e:4c:7b:be:9f:c5:7c:e1:
7f:4d:3b:80:e9:ea:e6:24:b3:0b:fb:a2:04:2d:d2:
a0:db:e8:f1:d5:86:d4:1f:41:f6:d3:46:aa:26:f8:
5c:b8:0d:0c:a4:17:60:2e:f5:55:17:2c:5a:a1:11:
bb:fb:b2:12:ee:ca:19:98:54:60:92:08:9f:17:ec:
80:06:e4:49:0c:97:9b:22:8d:3c:47:e0:e2:97:44:
3a:4e:48:3a:e9:77:a5:39:b0:9d:8a:99:1e:31:97:
5a:a6:68:10:27:48:cf:d4:fc:db:9f:6a:ca:bc:fd:
85:7e:ab:41:1c:2b:a8:cc:4d:14:b3:d5:36:82:10:
26:67:fe:f1:e9:1f:98:d8:ce:66:fd:e9:88:97:5e:
49:d2:06:cc:15:6f:87:ff:3b:c4:6b:cb:88:c2:67:
62:3b:02:ad:70:9c:c7:d0:ea:d8:05:a7:c2:b0:f9:
14:c2:d6:df:96:6f:8d:85:cc:1f:c9:02:a2:41:ec:
68:19:5e:f3:43:9c:ae:5b:c9:5f:0f:0f:ac:43:71:
38:72:a8:78:c2:ae:b7:25:5a:3e:db:5b:ca:18:69:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:94:8B:D0:81:A8:F4:A5:BC:80:26:24:5D:F1:9C:D1:9C:2C:93:A6
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/78D11314564211EFAF1C7F69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.151.0-14.192.153.255
14.192.156.0-14.192.158.255
103.20.134.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:ec:1a:99:01:87:08:0d:cc:73:a4:38:29:40:78:5f:7e:87:
b9:45:ff:85:51:56:42:68:a2:8f:f1:68:fb:1a:40:6a:5d:a9:
af:bf:1e:27:38:cc:66:68:e2:df:48:2e:01:90:43:a3:1e:eb:
bc:3b:0b:a8:5e:6e:69:8b:4d:fe:bb:1f:e2:3c:f4:e4:49:4b:
18:4f:11:2d:e1:41:cd:27:d9:a7:ee:7a:0f:1a:d5:27:6f:74:
1e:05:88:78:3c:8e:f5:fb:00:a8:f9:73:8e:b0:b1:4e:94:54:
2a:22:ec:06:c3:96:b7:2c:f3:b7:4f:50:4b:7a:08:a6:07:aa:
6e:34:21:c7:90:eb:dd:79:e6:5b:6b:d4:13:10:5a:61:ba:6d:
20:dd:c3:2e:b6:8d:e4:66:51:c5:e7:ec:7a:8c:0e:e4:de:4b:
f7:a5:10:83:e8:d2:e4:61:ee:f6:09:ff:d0:8e:5f:46:7f:2a:
75:93:a7:f1:db:c4:d5:92:04:75:85:0c:19:ef:56:7d:90:63:
1c:45:1c:e1:6a:32:c8:93:37:95:a5:95:93:30:da:c2:f7:74:
77:81:8b:f9:35:99:9e:be:6f:0f:9a:50:6f:d5:e1:ce:66:fa:
81:e3:4e:47:5f:90:78:cd:9f:7c:c7:e7:ba:39:12:3d:13:9c:
d4:c8:23:0a
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjQwOTAzMDc0MTE0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2YmQ5YS0zZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArirqos/CIH7mwjYGT4cZZDNTeAvv4ZCMv21xBXu518qB3zWZLkx7vp/FfOF/
TTuA6ermJLML+6IELdKg2+jx1YbUH0H200aqJvhcuA0MpBdgLvVVFyxaoRG7+7IS
7soZmFRgkgifF+yABuRJDJebIo08R+Dil0Q6Tkg66XelObCdipkeMZdapmgQJ0jP
1Pzbn2rKvP2FfqtBHCuozE0Us9U2ghAmZ/7x6R+Y2M5m/emIl15J0gbMFW+H/zvE
a8uIwmdiOwKtcJzH0OrYBafCsPkUwtbflm+NhcwfyQKiQexoGV7zQ5yuW8lfDw+s
Q3E4cqh4wq63JVo+21vKGGnWnQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFO+Ui9CB
qPSlvIAmJF3xnNGcLJOmMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNzhEMTEzMTQ1
NjQyMTFFRkFGMUM3RjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E
LDAqMCgEAgABMCIwDAMEAA7AlwMEAQ7AmDAMAwQCDsCcAwQADsCeAwQBZxSGMA0G
CSqGSIb3DQEBCwUAA4IBAQAf7BqZAYcIDcxzpDgpQHhffoe5Rf+FUVZCaKKP8Wj7
GkBqXamvvx4nOMxmaOLfSC4BkEOjHuu8OwuoXm5pi03+ux/iPPTkSUsYTxEt4UHN
J9mn7noPGtUnb3QeBYh4PI71+wCo+XOOsLFOlFQqIuwGw5a3LPO3T1BLegimB6pu
NCHHkOvdeeZba9QTEFphum0g3cMuto3kZlHF5+x6jA7k3kv3pRCD6NLkYe72Cf/Q
jl9Gfyp1k6fx28TVkgR1hQwZ71Z9kGMcRRzhajLIkzeVpZWTMNrC93R3gYv5NZme
vm8PmlBv1eHOZvqB405HX5B4zZ98x+e6ORI9E5zUyCMK
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:08 2025 by rpki-client