Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D5825F54651B11EF93181719C4F9AE02.roa
File: D5825F54651B11EF93181719C4F9AE02.roa (raw, json)
Hash identifier: hq5wClcRWuQ2+V2ClL/NZSgro9yLUcftTQPuyTa06lA=
Subject key identifier: DB:62:B3:77:EA:70:75:9E:42:F2:AE:C7:56:1B:34:9E:7B:89:E2:0F
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A96
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D5825F54651B11EF93181719C4F9AE02.roa
Signing time: Wed 28 Aug 2024 08:59:30 +0000
ROA not before: Wed 28 Aug 2024 08:59:30 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 30 Aug 2024 06:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2710 (0xa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Aug 28 08:59:30 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66cee6f1-c081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:b9:3b:e9:e2:f6:40:79:02:c4:4f:15:04:
07:8c:21:4f:87:50:5e:9a:45:f7:41:88:05:15:f6:
fb:a0:2b:4d:74:a1:3c:04:da:03:a6:1f:62:76:d2:
29:62:61:36:bc:6b:4d:75:74:9e:c0:9d:48:90:58:
42:70:a1:d9:98:73:3d:41:76:66:c6:93:d1:50:85:
9a:73:14:b1:6f:76:59:e1:8f:17:f1:77:12:2e:5f:
2c:1d:a1:90:ad:d3:14:ad:c9:b9:38:76:d3:3d:a7:
a2:ce:81:f3:b6:13:03:65:4a:ac:e3:41:53:34:50:
09:16:32:b1:11:2a:96:4f:0d:d9:70:cd:b0:ad:48:
10:a5:e7:6f:2c:0f:f2:a9:9c:01:85:fa:45:eb:57:
2f:99:d6:78:7b:b2:11:04:ef:56:0f:f6:61:48:16:
2f:1e:39:15:9a:37:18:c9:b0:61:c7:3e:5e:49:7e:
ed:ba:46:eb:b3:3c:b2:ed:01:44:e4:84:58:8d:33:
19:3a:c8:24:e9:54:7c:13:46:d1:a1:be:8e:3a:f4:
fb:52:11:f5:9a:c5:db:a7:07:a6:87:52:b6:7b:05:
57:2f:6c:b5:d2:a7:77:dc:4b:16:f3:f2:53:f8:91:
fe:dd:73:b4:ef:32:74:21:fb:b0:3e:49:4f:06:1a:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:62:B3:77:EA:70:75:9E:42:F2:AE:C7:56:1B:34:9E:7B:89:E2:0F
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D5825F54651B11EF93181719C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.129.0/24
14.192.131.0/24
14.192.133.0/24
14.192.135.0-14.192.136.255
14.192.139.0/24
14.192.142.0/23
14.192.145.0-14.192.147.255
14.192.149.0-14.192.150.255
14.192.155.0/24
14.192.159.0/24
43.247.120.0/22
103.20.133.0-103.20.135.255
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
6b:9c:90:76:d1:5e:9a:d6:65:2b:25:11:a7:e5:3d:1b:39:1b:
0f:64:39:08:86:10:6b:e3:3c:96:a3:ed:b3:b0:33:89:48:2f:
5f:90:ea:84:91:d5:69:5c:75:36:ea:f0:bb:98:1d:9c:ad:ae:
d1:94:69:b4:08:dd:8c:1d:a9:b9:5b:01:6e:61:67:0b:fc:e4:
9d:af:75:73:3a:2b:9a:97:27:b7:1f:95:31:e3:10:06:ab:20:
3f:03:53:c1:3a:d0:35:27:c6:bd:eb:1d:e2:62:00:51:a7:4a:
f7:aa:0b:17:1a:51:11:fd:1e:11:7a:77:af:a8:1f:31:38:96:
65:fe:8a:bb:d9:d2:96:db:82:78:66:cf:3d:60:ae:73:80:ef:
15:e6:d2:73:85:8f:77:21:e4:2a:91:30:a9:b3:1f:42:63:22:
64:c4:32:c8:93:d1:e5:a8:39:d6:2a:22:90:44:a1:df:1b:d3:
2e:74:23:c3:ee:d4:8c:45:de:30:a6:be:24:e1:a7:ce:43:0f:
dc:45:7e:e2:80:91:c4:73:7f:27:30:bd:2f:f3:20:d3:e7:4a:
64:22:dd:1e:8b:8f:62:ab:a4:d3:d7:ac:9d:86:e4:f4:b6:33:
95:f1:ae:65:cd:0d:a2:92:ce:f5:d2:3d:f9:34:c9:99:7f:81:
60:2d:b4:63
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjQwODI4MDg1OTMwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNlZTZmMS1jMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYW5O+ni9kB5AsRPFQQHjCFPh1BemkX3QYgFFfb7oCtNdKE8BNoDph9idtIp
YmE2vGtNdXSewJ1IkFhCcKHZmHM9QXZmxpPRUIWacxSxb3ZZ4Y8X8XcSLl8sHaGQ
rdMUrcm5OHbTPaeizoHzthMDZUqs40FTNFAJFjKxESqWTw3ZcM2wrUgQpedvLA/y
qZwBhfpF61cvmdZ4e7IRBO9WD/ZhSBYvHjkVmjcYybBhxz5eSX7tukbrszyy7QFE
5IRYjTMZOsgk6VR8E0bRob6OOvT7UhH1msXbpwemh1K2ewVXL2y10qd33EsW8/JT
+JH+3XO07zJ0IfuwPklPBhoA/QIDAQABo4IDDzCCAwswHQYDVR0OBBYEFNtis3fq
cHWeQvKux1YbNJ57ieIPMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvRDU4MjVGNTQ2
NTFCMTFFRjkzMTgxNzE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZgGCCsGAQUFBwEHAQH/
BIGIMIGFMHQEAgABMG4DBAAOwIEDBAAOwIMDBAAOwIUwDAMEAA7AhwMEAA7AiAME
AA7AiwMEAQ7AjjAMAwQADsCRAwQCDsCQMAwDBAAOwJUDBAAOwJYDBAAOwJsDBAAO
wJ8DBAIr93gwDAMEAGcUhQMEA2cUgAMEBW9cgDANBAIAAjAHAwUAJAN5gDANBgkq
hkiG9w0BAQsFAAOCAQEAa5yQdtFemtZlKyURp+U9GzkbD2Q5CIYQa+M8lqPts7Az
iUgvX5DqhJHVaVx1Nurwu5gdnK2u0ZRptAjdjB2puVsBbmFnC/zkna91czormpcn
tx+VMeMQBqsgPwNTwTrQNSfGvesd4mIAUadK96oLFxpREf0eEXp3r6gfMTiWZf6K
u9nSltuCeGbPPWCuc4DvFebSc4WPdyHkKpEwqbMfQmMiZMQyyJPR5ag51ioikESh
3xvTLnQjw+7UjEXeMKa+JOGnzkMP3EV+4oCRxHN/JzC9L/Mg0+dKZCLdHouPYquk
09esnYbk9LYzlfGuZc0NopLO9dI9+TTJmX+BYC20Yw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:32 2025 by rpki-client