Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/7F1107A82EE611EFBAE5882DC4F9AE02.roa
File: 7F1107A82EE611EFBAE5882DC4F9AE02.roa (raw, json)
Hash identifier: 7nXEdrcmh7y4b/9mmWpin1Vzlkhj2PGIE5ZnbbMpXZI=
Subject key identifier: 1F:8F:9F:05:75:B4:A9:D5:2C:DB:8F:19:4F:2B:54:F0:A1:58:A9:95
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 18D2
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/7F1107A82EE611EFBAE5882DC4F9AE02.roa
Signing time: Thu 20 Jun 2024 09:21:38 +0000
ROA not before: Thu 20 Jun 2024 09:21:38 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 20940
IP address blocks: 43.249.213.0/24 maxlen: 24
43.254.120.0/22 maxlen: 22
59.151.128.0/18 maxlen: 18
60.254.128.0/18 maxlen: 18
60.254.143.0/24 maxlen: 24
60.254.148.0/24 maxlen: 24
60.254.173.0/24 maxlen: 24
103.238.148.0/22 maxlen: 22
118.214.0.0/16 maxlen: 16
118.214.1.0/24 maxlen: 24
118.214.167.0/24 maxlen: 24
118.214.171.0/24 maxlen: 24
118.214.178.0/24 maxlen: 24
118.214.181.0/24 maxlen: 24
118.214.182.0/24 maxlen: 24
118.214.185.0/24 maxlen: 24
118.214.186.0/24 maxlen: 24
118.214.187.0/24 maxlen: 24
118.214.188.0/23 maxlen: 23
118.214.190.0/24 maxlen: 24
118.215.0.0/17 maxlen: 17
118.215.32.0/21 maxlen: 21
118.215.128.0/18 maxlen: 18
122.252.32.0/19 maxlen: 19
122.252.40.0/21 maxlen: 21
122.252.128.0/20 maxlen: 20
125.56.128.0/17 maxlen: 17
125.56.184.0/24 maxlen: 24
125.56.185.0/24 maxlen: 24
125.56.186.0/24 maxlen: 24
125.56.199.0/24 maxlen: 24
125.56.201.0/24 maxlen: 24
125.56.205.0/24 maxlen: 24
125.56.218.0/24 maxlen: 24
125.56.219.0/24 maxlen: 24
125.56.222.0/24 maxlen: 24
125.252.192.0/18 maxlen: 18
125.252.224.0/24 maxlen: 24
2405:9600::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Sep 2024 10:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6354 (0x18d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Jun 20 09:21:38 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6673f4a2-af17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:fb:18:d5:5e:af:25:21:5f:3d:f1:d1:bc:
37:52:8f:4b:e5:c7:fe:8c:b1:c6:a1:a0:13:f0:e8:
83:53:fc:f8:7d:c5:c4:8d:29:55:df:45:8d:b4:f9:
ec:9b:e3:cb:6a:86:69:96:87:5c:9a:fe:d8:9e:aa:
e1:fd:e3:9b:33:07:45:e5:77:35:73:fd:55:ae:c6:
4c:bd:bf:69:47:cf:3a:65:9f:5e:71:18:3d:a3:aa:
01:c6:29:d1:2f:08:61:55:95:94:e6:34:8c:98:0b:
88:19:d6:38:e2:74:de:1e:e1:ce:c0:b9:c4:31:3d:
9b:93:58:63:4b:ef:12:47:d8:00:aa:b4:64:b3:16:
e0:ae:d1:90:5e:c9:83:c3:3d:fa:45:65:27:bd:6d:
9b:3d:1c:ce:60:b8:74:c8:02:5b:5a:45:a0:7b:c7:
51:a1:70:30:75:d8:c5:c8:66:1d:7a:80:66:17:0a:
cf:b4:d4:86:1a:3f:f0:6e:75:14:35:8e:06:4f:81:
1c:1f:3f:18:22:4f:92:ef:00:38:c5:f0:96:07:d9:
da:ca:45:4e:74:7f:ae:32:cc:60:0b:1e:89:21:71:
2d:0c:59:18:e8:5f:d2:45:83:bc:b5:a8:e5:a1:1e:
05:0f:93:df:02:b6:6b:3a:8e:1c:14:3c:28:7b:8a:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:9F:05:75:B4:A9:D5:2C:DB:8F:19:4F:2B:54:F0:A1:58:A9:95
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/7F1107A82EE611EFBAE5882DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.213.0/24
43.254.120.0/22
59.151.128.0/18
60.254.128.0/18
103.238.148.0/22
118.214.0.0-118.215.191.255
122.252.32.0/19
122.252.128.0/20
125.56.128.0/17
125.252.192.0/18
IPv6:
2405:9600::/32
Signature Algorithm: sha256WithRSAEncryption
18:76:b3:70:c0:80:bf:05:78:06:4c:d8:4d:1d:9e:68:3f:83:
4d:4e:4e:fb:fb:40:3e:d7:bd:9e:05:57:ed:c0:20:1f:f3:ba:
8d:09:e5:7a:5f:94:0d:57:2d:a8:a6:81:8a:fd:4e:77:41:f2:
f4:29:a4:a6:84:cf:35:0f:8a:89:23:e1:57:2d:8f:14:8c:29:
05:e6:a1:a7:35:46:ef:95:ac:c8:8c:9c:82:82:32:ab:e7:8d:
33:d7:d4:69:02:9d:86:68:1c:ad:86:ee:c2:21:df:e7:48:ef:
4f:5b:21:03:de:90:e8:cd:c6:47:ab:b2:f3:e5:ce:22:8b:f9:
d2:16:c3:f3:c2:c8:09:8d:46:4b:a1:b1:87:a7:a6:ed:ed:8b:
43:5d:f0:bc:61:c6:22:0f:59:ce:df:d6:33:08:bb:e8:e7:7c:
18:43:b8:c3:46:6d:85:c3:37:94:35:dc:5f:17:83:69:d5:58:
01:a5:ef:5a:58:2d:aa:8c:e6:6d:8e:1a:76:77:5e:ad:84:7f:
61:50:d3:41:0a:1b:28:c3:d6:90:6a:09:0d:26:a3:eb:5c:10:
83:5a:53:bd:bf:a5:c4:fb:73:af:29:0d:f1:a4:2f:cc:4d:71:
b2:62:b3:ac:95:ed:f5:bd:36:9a:fe:00:f4:e8:fa:e3:f3:d8:
48:29:7c:80
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgICGNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD
NTQyQTBEOTEwHhcNMjQwNjIwMDkyMTM4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjczZjRhMi1hZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJX7GNVeryUhXz3x0bw3Uo9L5cf+jLHGoaAT8OiDU/z4fcXEjSlV30WNtPns
m+PLaoZplodcmv7Ynqrh/eObMwdF5Xc1c/1VrsZMvb9pR886ZZ9ecRg9o6oBxinR
LwhhVZWU5jSMmAuIGdY44nTeHuHOwLnEMT2bk1hjS+8SR9gAqrRksxbgrtGQXsmD
wz36RWUnvW2bPRzOYLh0yAJbWkWge8dRoXAwddjFyGYdeoBmFwrPtNSGGj/wbnUU
NY4GT4EcHz8YIk+S7wA4xfCWB9naykVOdH+uMsxgCx6JIXEtDFkY6F/SRYO8tajl
oR4FD5PfArZrOo4cFDwoe4rhfwIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFB+PnwV1
tKnVLNuPGU8rVPChWKmVMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky
NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvN0YxMTA3QTgy
RUU2MTFFRkJBRTU4ODJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwawYIKwYBBQUHAQcBAf8E
XDBaMEkEAgABMEMDBAAr+dUDBAIr/ngDBAY7l4ADBAY8/oADBAJn7pQwCwMDAXbW
AwQGdteAAwQFevwgAwQEevyAAwQHfTiAAwQGffzAMA0EAgACMAcDBQAkBZYAMA0G
CSqGSIb3DQEBCwUAA4IBAQAYdrNwwIC/BXgGTNhNHZ5oP4NNTk77+0A+172eBVft
wCAf87qNCeV6X5QNVy2opoGK/U53QfL0KaSmhM81D4qJI+FXLY8UjCkF5qGnNUbv
lazIjJyCgjKr540z19RpAp2GaBythu7CId/nSO9PWyED3pDozcZHq7Lz5c4ii/nS
FsPzwsgJjUZLobGHp6bt7YtDXfC8YcYiD1nO39YzCLvo53wYQ7jDRm2FwzeUNdxf
F4Np1VgBpe9aWC2qjOZtjhp2d16thH9hUNNBChsow9aQagkNJqPrXBCDWlO9v6XE
+3OvKQ3xpC/MTXGyYrOsle31vTaa/gD06Prj89hIKXyA
-----END CERTIFICATE-----
Generated at Fri Sep 6 12:37:50 2024 by rpki-client on console-ams.rpki-client.org