Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E905187825E311EE96CD9358C4F9AE02.roa
File: E905187825E311EE96CD9358C4F9AE02.roa (raw, json)
Hash identifier: WIKVQaZ3ER3xKB+J1GVfGn28U5Oe/EV+ICfRZH+X5MM=
Subject key identifier: 69:DF:84:EE:EB:98:B3:D7:55:24:33:61:CD:49:8B:88:C2:CD:81:CD
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 339E
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E905187825E311EE96CD9358C4F9AE02.roa
Signing time: Fri 10 Nov 2023 15:41:03 +0000
ROA not before: Fri 10 Nov 2023 15:41:03 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.21.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13214 (0x339e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Nov 10 15:41:03 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=654e4f0f-e0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:d0:17:f6:b8:c7:0b:4e:60:08:6e:f9:a6:
bf:44:1c:fa:18:10:f7:c1:33:36:52:a1:f5:69:7c:
3c:fe:49:6f:ff:7a:f6:93:28:be:1a:fc:18:e4:5b:
d4:28:80:5f:67:27:ff:db:b5:c5:75:d0:43:8c:8a:
7f:06:1e:10:32:a7:1f:60:45:d0:23:91:4f:bc:b0:
63:3e:01:26:d4:c4:d5:97:f9:c8:5d:7c:f7:fa:12:
42:35:71:0d:a4:39:1b:84:a0:a9:ad:f9:29:46:17:
2f:52:03:dc:91:e1:40:5f:4b:5b:e4:0c:fe:12:d8:
5d:0f:fb:78:58:27:a4:5d:50:41:31:f7:ec:b8:58:
6e:6b:a0:4e:f1:bd:5b:0d:6b:64:dd:d2:10:f5:cc:
f8:c5:d7:b4:a0:75:74:45:95:c8:01:66:65:a5:25:
df:a0:06:f1:ec:3d:77:3d:e1:59:b6:42:f6:0d:e9:
69:21:37:3a:82:e5:3b:d6:b3:be:6a:9b:33:33:e2:
a0:19:f0:53:ff:16:f5:e2:4f:f5:fd:9d:dd:bc:20:
2a:83:2c:21:04:05:9e:e6:cd:c7:e7:5d:f7:6d:88:
fc:91:33:41:6a:ea:04:9e:b5:4a:0a:2c:0c:29:a8:
18:97:61:9f:1e:9f:ff:b5:3b:d9:8e:56:88:db:d7:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:84:EE:EB:98:B3:D7:55:24:33:61:CD:49:8B:88:C2:CD:81:CD
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E905187825E311EE96CD9358C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.137.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a7:f8:63:4a:a9:0b:18:97:98:00:37:2d:0f:a6:29:40:31:
57:29:97:27:02:ab:92:1f:65:e6:0d:03:dc:7f:73:1a:76:bc:
ec:68:00:99:63:eb:04:f7:15:4c:7e:93:e2:f4:62:14:a4:35:
af:9a:f7:1d:6e:19:b7:aa:15:2d:67:4d:3c:02:88:fc:78:a9:
81:cc:5c:59:d9:39:8f:60:00:4e:25:a9:56:cf:e3:21:fd:ab:
4f:d9:5e:16:4e:3a:39:df:e7:47:57:04:15:10:ce:09:d2:25:
34:65:90:d3:04:19:41:dc:6b:50:45:d7:32:38:6b:d0:fa:1b:
52:d5:60:05:22:dd:5a:09:33:91:3c:03:6c:7e:8e:10:60:35:
12:6a:9f:09:ce:51:64:af:95:fd:98:e6:e6:fe:e8:ad:a5:97:
60:2a:c5:d9:01:cf:0e:6b:72:56:0e:07:75:60:df:e2:2f:3a:
4d:aa:c4:36:83:e2:2a:ad:52:21:d2:c0:29:7a:f0:72:36:54:
d0:91:22:b8:c4:d0:2c:6a:ab:0d:1b:6a:a0:fe:d6:7b:16:4a:
76:93:bb:2c:1f:27:a2:f0:76:74:bc:74:db:32:ff:34:64:85:
8b:41:60:c5:a8:c9:b2:92:c4:97:87:e2:1f:4e:19:fd:c1:07:
f9:85:ad:18
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjMxMTEwMTU0MTAzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRlNGYwZi1lMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqELQF/a4xwtOYAhu+aa/RBz6GBD3wTM2UqH1aXw8/klv/3r2kyi+GvwY5FvU
KIBfZyf/27XFddBDjIp/Bh4QMqcfYEXQI5FPvLBjPgEm1MTVl/nIXXz3+hJCNXEN
pDkbhKCprfkpRhcvUgPckeFAX0tb5Az+EthdD/t4WCekXVBBMffsuFhua6BO8b1b
DWtk3dIQ9cz4xde0oHV0RZXIAWZlpSXfoAbx7D13PeFZtkL2DelpITc6guU71rO+
apszM+KgGfBT/xb14k/1/Z3dvCAqgywhBAWe5s3H5133bYj8kTNBauoEnrVKCiwM
KagYl2GfHp//tTvZjlaI29flYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGnfhO7r
mLPXVSQzYc1Ji4jCzYHNMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJGNzYvOTQ0RTM4OTIxREFCMTFFMkJCMzBDQUE5MDhCMDJDRDIvRTkwNTE4Nzgy
NUUzMTFFRTk2Q0Q5MzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnFYkwDQYJKoZIhvcNAQELBQADggEBABmn+GNKqQsYl5gA
Ny0PpilAMVcplycCq5IfZeYNA9x/cxp2vOxoAJlj6wT3FUx+k+L0YhSkNa+a9x1u
GbeqFS1nTTwCiPx4qYHMXFnZOY9gAE4lqVbP4yH9q0/ZXhZOOjnf50dXBBUQzgnS
JTRlkNMEGUHca1BF1zI4a9D6G1LVYAUi3VoJM5E8A2x+jhBgNRJqnwnOUWSvlf2Y
5ub+6K2ll2AqxdkBzw5rclYOB3Vg3+IvOk2qxDaD4iqtUiHSwCl68HI2VNCRIrjE
0Cxqqw0baqD+1nsWSnaTuywfJ6LwdnS8dNsy/zRkhYtBYMWoybKSxJeH4h9OGf3B
B/mFrRg=
-----END CERTIFICATE-----
Generated at Thu Dec 28 09:58:03 2023 by rpki-client on console-fra.rpki-client.org