Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A285EB785C0311EF93C27C70C4F9AE02.roa
File: A285EB785C0311EF93C27C70C4F9AE02.roa (raw, json)
Hash identifier: hAKRtKSwUb7BE8n9a4TJYYIPP6o49pegcSHA65lzWwQ=
Subject key identifier: 9D:C7:C7:47:35:B0:94:78:BB:25:34:E1:DE:9D:4D:BB:26:E1:12:FD
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A9C
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A285EB785C0311EF93C27C70C4F9AE02.roa
Signing time: Fri 30 Aug 2024 06:51:46 +0000
ROA not before: Fri 30 Aug 2024 06:51:46 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 208485
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 20:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2716 (0xa9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Aug 30 06:51:46 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66d16c02-4cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:1d:02:d9:37:c1:81:6b:5a:98:d1:a1:56:
82:4a:83:33:22:43:2f:42:f0:6d:69:39:29:23:e4:
f3:22:fe:da:5f:00:af:51:35:c7:d9:44:e5:6a:bb:
a1:05:52:b4:8a:44:38:36:6e:7c:62:e3:79:ea:41:
f0:5a:36:e7:ba:bf:9c:9c:ff:18:37:f3:5e:bb:1d:
41:8a:69:58:c0:ba:fa:a6:7f:78:e0:e7:a0:2a:a7:
ed:7f:6b:0f:4e:17:3c:eb:70:76:95:62:e9:9c:70:
57:5a:81:f2:71:ac:58:88:88:b6:2a:59:73:47:8d:
64:cb:82:a2:25:38:58:7d:83:e5:31:19:63:b2:4e:
3a:20:3f:73:d1:6f:d3:ca:03:c3:ce:c3:d4:02:36:
ac:97:ef:3d:66:56:00:12:ec:6f:eb:c9:5e:29:74:
6b:00:12:ae:e1:03:be:b8:1f:bf:29:48:d2:42:87:
7a:7b:9a:a6:dd:6b:ea:9d:80:21:4c:f5:dc:4e:db:
4a:b5:da:ab:42:5c:37:64:6f:49:db:4b:f8:85:43:
2e:23:ae:1b:f8:77:54:63:7e:40:9b:3c:4e:7f:82:
df:cd:05:46:29:c7:43:bc:eb:06:e8:ca:9b:ea:07:
68:89:b0:76:9a:47:31:48:e4:74:b8:4a:b1:f6:e8:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C7:C7:47:35:B0:94:78:BB:25:34:E1:DE:9D:4D:BB:26:E1:12:FD
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A285EB785C0311EF93C27C70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/24
14.192.137.0-14.192.138.255
14.192.142.0-14.192.144.255
14.192.148.0/24
103.20.132.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e6:2d:d1:2c:88:91:d3:eb:3b:43:fc:ae:30:b9:0f:aa:81:
de:16:84:82:c8:13:e3:87:20:06:be:4a:49:92:1d:17:dd:e6:
03:15:82:62:ff:76:a1:76:45:a8:fa:dd:d3:09:35:bb:af:b0:
29:02:ea:b7:3b:2b:38:88:74:ac:1e:72:2a:e2:31:7e:a4:dc:
b8:ad:d7:8a:9b:89:ed:fe:01:64:10:d7:78:ad:85:e4:06:cc:
8e:be:0c:a1:b0:91:a8:95:7f:04:91:4c:d6:21:9e:e3:71:1c:
56:71:0a:2d:3c:bc:11:51:69:ad:b3:e2:12:6b:2b:7e:32:aa:
b2:b0:61:03:dd:80:85:10:85:f5:1c:0c:81:79:f6:08:56:fa:
66:0c:11:e0:e3:78:af:f4:03:43:82:7f:3a:0a:49:57:fb:8f:
f8:c0:c3:c4:f2:66:d3:64:88:58:d6:91:da:70:84:1e:22:fa:
eb:7a:e5:12:03:e7:9e:d1:69:b0:85:a1:03:5a:9e:88:b7:7c:
c8:af:fd:9e:1f:ff:9b:db:1b:49:96:b4:47:a9:58:77:9b:ea:
a3:f6:33:6f:bc:f2:61:74:b5:78:85:75:eb:03:1b:93:2f:c8:
9b:dd:d8:bd:4a:0f:b4:4c:86:1a:e2:b3:3a:67:ba:c3:51:d0:
63:8f:83:2b
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjQwODMwMDY1MTQ2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQxNmMwMi00Y2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtOodAtk3wYFrWpjRoVaCSoMzIkMvQvBtaTkpI+TzIv7aXwCvUTXH2UTlaruh
BVK0ikQ4Nm58YuN56kHwWjbnur+cnP8YN/Neux1BimlYwLr6pn944OegKqftf2sP
Thc863B2lWLpnHBXWoHycaxYiIi2KllzR41ky4KiJThYfYPlMRljsk46ID9z0W/T
ygPDzsPUAjasl+89ZlYAEuxv68leKXRrABKu4QO+uB+/KUjSQod6e5qm3WvqnYAh
TPXcTttKtdqrQlw3ZG9J20v4hUMuI64b+HdUY35AmzxOf4LfzQVGKcdDvOsG6Mqb
6gdoibB2mkcxSOR0uEqx9uh00wIDAQABo4ICvTCCArkwHQYDVR0OBBYEFJ3Hx0c1
sJR4uyU04d6dTbsm4RL9MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQTI4NUVCNzg1
QzAzMTFFRjkzQzI3QzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E
ODA2MDQEAgABMC4DBAAOwIAwDAMEAA7AiQMEAA7AijAMAwQBDsCOAwQADsCQAwQA
DsCUAwQAZxSEMA0GCSqGSIb3DQEBCwUAA4IBAQBw5i3RLIiR0+s7Q/yuMLkPqoHe
FoSCyBPjhyAGvkpJkh0X3eYDFYJi/3ahdkWo+t3TCTW7r7ApAuq3Oys4iHSsHnIq
4jF+pNy4rdeKm4nt/gFkENd4rYXkBsyOvgyhsJGolX8EkUzWIZ7jcRxWcQotPLwR
UWmts+ISayt+MqqysGED3YCFEIX1HAyBefYIVvpmDBHg43iv9ANDgn86CklX+4/4
wMPE8mbTZIhY1pHacIQeIvrreuUSA+ee0WmwhaEDWp6It3zIr/2eH/+b2xtJlrRH
qVh3m+qj9jNvvPJhdLV4hXXrAxuTL8ib3di9Sg+0TIYa4rM6Z7rDUdBjj4Mr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:36 2025 by rpki-client