Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D01A147464E711EE8A74AA67C4F9AE02.roa
File: D01A147464E711EE8A74AA67C4F9AE02.roa (raw, json)
Hash identifier: tbWsgQXH98/SNWJaNbmjy27eN+RpWbsGuBPU65tfUFI=
Subject key identifier: 91:71:90:60:37:56:06:56:8E:2E:FC:97:A3:53:E8:92:58:08:9E:B3
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 08C1
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D01A147464E711EE8A74AA67C4F9AE02.roa
Signing time: Tue 24 Oct 2023 11:44:30 +0000
ROA not before: Tue 24 Oct 2023 11:44:30 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 149495
IP address blocks: 43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
2403:7980:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 23 Mar 2024 16:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Oct 24 11:44:30 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6537ae1e-ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:f3:85:31:89:9a:43:c8:c8:7f:05:5f:3d:
90:2c:6d:ab:7a:99:ef:a1:59:a7:45:00:f1:77:8a:
19:e5:f6:67:b1:cb:4d:23:b0:5a:02:d4:56:fb:f3:
56:34:24:fc:4a:26:6f:e5:52:79:f3:59:48:57:11:
a8:f3:9e:3b:07:10:37:c0:b6:37:bc:9b:e2:97:12:
ed:65:ed:d2:17:84:da:e9:17:4b:3f:8a:2d:03:23:
f4:76:80:1d:ef:1c:ef:af:43:ad:c4:54:29:dc:8e:
4f:96:4c:08:ff:95:24:c6:47:d7:e7:c8:42:10:42:
13:e7:13:e3:66:09:72:18:f2:b6:47:b9:a3:83:c3:
d1:21:62:ec:69:fa:e1:bc:53:eb:19:f3:9a:d6:be:
54:26:16:83:15:b3:2e:64:87:1c:bb:a2:17:24:e9:
2d:24:c6:7e:ef:4d:eb:c3:46:06:19:9a:c7:4f:b9:
48:46:4e:dd:4b:03:6d:a7:b7:74:31:a3:db:1b:df:
d1:bd:6e:70:dd:9d:9f:8f:22:84:a0:1a:12:60:22:
ea:4a:f7:f0:c0:7c:d4:67:19:b4:b6:22:18:c0:aa:
28:4c:fe:e9:bf:52:9e:e5:bf:38:f3:a4:6c:53:76:
4a:e2:74:22:05:c6:de:a8:21:2f:4c:ff:9b:2d:c3:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:71:90:60:37:56:06:56:8E:2E:FC:97:A3:53:E8:92:58:08:9E:B3
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D01A147464E711EE8A74AA67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.120.0/22
IPv6:
2403:7980:f000::/36
Signature Algorithm: sha256WithRSAEncryption
9c:a2:99:75:65:66:bb:26:6c:6d:8d:11:04:e9:bc:75:5c:47:
ac:0d:9e:84:e9:77:af:52:e9:13:bf:8b:f8:42:13:69:ee:93:
2d:9e:a2:70:ef:de:f6:52:c0:67:ff:31:00:ce:ff:7a:16:1a:
5a:fb:a6:1c:8e:45:a4:1e:11:88:8b:d3:5a:6d:c0:bf:3c:a1:
95:ed:31:b3:ff:78:af:29:11:e2:18:7d:f3:bf:17:75:2e:07:
a3:b9:de:31:46:5d:57:37:b4:91:c9:7d:19:9e:3c:5e:d0:8f:
c8:cd:5a:26:f7:7a:67:a7:9a:7c:b4:f2:45:0f:84:65:be:89:
be:06:6b:43:1b:63:dc:5d:65:f7:01:3f:1f:92:9f:48:b7:6a:
b2:f5:48:f7:25:bc:e5:a6:bc:99:1b:21:a7:7a:19:12:3f:85:
b1:30:98:dd:22:14:ee:f6:91:f4:96:f0:86:70:e0:70:6d:c2:
70:fe:98:ab:c5:0a:df:ee:b2:a8:95:fc:ed:76:1a:8a:c2:70:
7a:97:b8:d6:cb:93:b6:58:68:81:32:c6:86:8c:e3:d8:09:92:
f7:a5:4c:50:d4:6d:28:4e:62:77:b7:46:c7:9c:a0:7a:f3:cb:
98:af:04:17:ae:4b:b0:82:59:f0:d9:6e:df:5b:a2:c1:46:d4:
4e:1a:6d:64
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjMxMDI0MTE0NDMwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTM3YWUxZS1hZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8DzhTGJmkPIyH8FXz2QLG2repnvoVmnRQDxd4oZ5fZnsctNI7BaAtRW+/NW
NCT8SiZv5VJ581lIVxGo8547BxA3wLY3vJvilxLtZe3SF4Ta6RdLP4otAyP0doAd
7xzvr0OtxFQp3I5PlkwI/5UkxkfX58hCEEIT5xPjZglyGPK2R7mjg8PRIWLsafrh
vFPrGfOa1r5UJhaDFbMuZIccu6IXJOktJMZ+703rw0YGGZrHT7lIRk7dSwNtp7d0
MaPbG9/RvW5w3Z2fjyKEoBoSYCLqSvfwwHzUZxm0tiIYwKooTP7pv1Ke5b8486Rs
U3ZK4nQiBcbeqCEvTP+bLcMb/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJFxkGA3
VgZWji78l6NT6JJYCJ6zMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvRDAxQTE0NzQ2
NEU3MTFFRThBNzRBQTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E
IDAeMAwEAgABMAYDBAIr93gwDgQCAAIwCAMGBCQDeYDwMA0GCSqGSIb3DQEBCwUA
A4IBAQCcopl1ZWa7JmxtjREE6bx1XEesDZ6E6XevUukTv4v4QhNp7pMtnqJw7972
UsBn/zEAzv96Fhpa+6YcjkWkHhGIi9NabcC/PKGV7TGz/3ivKRHiGH3zvxd1Lgej
ud4xRl1XN7SRyX0Znjxe0I/IzVom93pnp5p8tPJFD4Rlvom+BmtDG2PcXWX3AT8f
kp9It2qy9Uj3JbzlpryZGyGnehkSP4WxMJjdIhTu9pH0lvCGcOBwbcJw/pirxQrf
7rKolfztdhqKwnB6l7jWy5O2WGiBMsaGjOPYCZL3pUxQ1G0oTmJ3t0bHnKB688uY
rwQXrkuwglnw2W7fW6LBRtROGm1k
-----END CERTIFICATE-----
Generated at Sat Mar 23 17:33:13 2024 by rpki-client on console-ams.rpki-client.org