Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/DA99FC3A6C3811EFA590B451C4F9AE02.roa
File: DA99FC3A6C3811EFA590B451C4F9AE02.roa (raw, json)
Hash identifier: 68wyxWxLmNNx1Epiz3yjDjOPB5tFDf1iDWwftdu77Ts=
Subject key identifier: 6C:07:9F:8E:96:D2:3D:A1:37:32:7C:45:D5:18:B2:DF:EF:53:D5:B6
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1901
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/DA99FC3A6C3811EFA590B451C4F9AE02.roa
Signing time: Fri 06 Sep 2024 10:14:51 +0000
ROA not before: Fri 06 Sep 2024 10:14:51 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 20940
IP address blocks: 43.249.213.0/24 maxlen: 24
43.254.120.0/22 maxlen: 22
59.151.128.0/18 maxlen: 18
60.254.128.0/18 maxlen: 18
60.254.143.0/24 maxlen: 24
60.254.148.0/24 maxlen: 24
60.254.173.0/24 maxlen: 24
103.238.148.0/22 maxlen: 22
118.214.0.0/16 maxlen: 16
118.214.1.0/24 maxlen: 24
118.214.167.0/24 maxlen: 24
118.214.171.0/24 maxlen: 24
118.214.178.0/24 maxlen: 24
118.214.181.0/24 maxlen: 24
118.214.182.0/24 maxlen: 24
118.214.185.0/24 maxlen: 24
118.214.186.0/24 maxlen: 24
118.214.187.0/24 maxlen: 24
118.214.188.0/23 maxlen: 23
118.214.190.0/24 maxlen: 24
118.215.0.0/17 maxlen: 17
118.215.128.0/18 maxlen: 18
122.252.32.0/19 maxlen: 19
122.252.128.0/20 maxlen: 20
125.56.128.0/17 maxlen: 17
125.56.184.0/24 maxlen: 24
125.56.185.0/24 maxlen: 24
125.56.186.0/24 maxlen: 24
125.56.199.0/24 maxlen: 24
125.56.201.0/24 maxlen: 24
125.56.205.0/24 maxlen: 24
125.56.218.0/24 maxlen: 24
125.56.219.0/24 maxlen: 24
125.56.222.0/24 maxlen: 24
125.252.192.0/18 maxlen: 18
125.252.224.0/24 maxlen: 24
2405:9600::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 08 Oct 2024 11:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6401 (0x1901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Sep 6 10:14:51 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66dad61b-4a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:ea:b8:cb:43:20:6d:dd:45:cf:bb:6c:b5:
6d:d3:56:bc:68:ca:bf:dc:e5:d7:1f:b1:09:35:a8:
e3:c2:f8:4b:1f:a1:e1:91:c7:e5:4d:eb:ad:25:11:
83:97:3a:07:11:50:d6:e7:f8:8a:85:84:df:b3:e5:
ab:d6:68:f5:64:11:46:39:0b:d2:5a:68:29:e5:61:
d8:57:cc:4b:c0:15:76:5e:5e:2d:85:61:25:7f:45:
d1:f6:e8:13:4c:e0:e1:28:75:f0:18:1c:b5:24:e1:
5c:a8:b8:a6:92:c3:37:7d:9f:0a:fe:e3:bc:c3:22:
90:76:44:0a:13:6b:a2:11:32:f0:6d:b5:ce:5d:98:
62:fc:cf:34:6a:2b:1c:ef:f6:37:ea:91:a7:4a:ed:
17:c9:c1:60:ad:bc:2a:2c:c5:f7:33:fe:ea:b3:21:
4d:e0:1d:64:12:1e:9f:ff:79:7d:c5:9c:f7:2a:dc:
41:e0:a3:e3:b7:c7:20:9f:fc:a6:95:c3:34:c1:3f:
1a:19:0d:09:05:62:c8:b7:f2:17:11:60:df:0d:c3:
06:86:08:5d:af:0d:13:c9:5e:34:a4:91:92:31:4c:
64:b9:9e:0a:b4:46:ce:21:d9:dd:6d:16:3b:92:69:
b9:67:88:21:16:a3:eb:d6:79:7c:36:02:e6:e0:43:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:9F:8E:96:D2:3D:A1:37:32:7C:45:D5:18:B2:DF:EF:53:D5:B6
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/DA99FC3A6C3811EFA590B451C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.213.0/24
43.254.120.0/22
59.151.128.0/18
60.254.128.0/18
103.238.148.0/22
118.214.0.0-118.215.191.255
122.252.32.0/19
122.252.128.0/20
125.56.128.0/17
125.252.192.0/18
IPv6:
2405:9600::/32
Signature Algorithm: sha256WithRSAEncryption
42:20:5b:93:fd:4a:ba:43:18:0b:f9:49:8e:c2:31:83:2d:6f:
dd:ef:b5:7c:43:9c:ca:da:34:3f:59:e8:0b:a6:ce:7e:1a:f6:
7d:46:d4:43:5c:f5:89:c0:35:15:ae:e5:11:11:ec:ca:b3:21:
f8:37:4e:3e:dd:d2:eb:9b:fa:c1:01:d0:69:56:52:89:55:a8:
e9:29:97:28:b3:97:a2:7c:00:6b:e3:64:f1:f8:d3:4c:75:d6:
25:cf:64:52:3c:0f:57:58:d8:30:71:b3:94:5a:ee:c4:ba:2b:
fe:fd:df:60:27:09:fd:12:4e:e7:86:8e:30:1e:22:c8:48:41:
bd:91:f8:d3:60:f3:1d:a5:97:13:4a:e1:e5:a2:4e:09:86:73:
61:ab:64:1a:86:4b:aa:97:ad:99:30:1c:a6:64:43:91:ea:68:
d7:cc:ee:ed:09:4f:40:c8:28:20:6e:32:88:6f:cf:d0:49:90:
2f:4d:7c:ed:58:15:f3:19:51:65:0f:34:f4:1a:a6:3c:f2:10:
ec:7c:7a:f7:67:6c:9b:74:7a:aa:a9:90:b9:ae:f5:ab:c0:47:
31:5d:09:85:69:53:98:5b:4f:d9:c7:c0:42:24:85:e1:2e:b5:
3b:69:95:14:fb:d2:79:56:8e:0b:57:e0:51:86:53:31:c4:1a:
24:ae:34:b8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgICGQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD
NTQyQTBEOTEwHhcNMjQwOTA2MTAxNDUxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmRhZDYxYi00YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PPquMtDIG3dRc+7bLVt01a8aMq/3OXXH7EJNajjwvhLH6HhkcflTeutJRGD
lzoHEVDW5/iKhYTfs+Wr1mj1ZBFGOQvSWmgp5WHYV8xLwBV2Xl4thWElf0XR9ugT
TODhKHXwGBy1JOFcqLimksM3fZ8K/uO8wyKQdkQKE2uiETLwbbXOXZhi/M80aisc
7/Y36pGnSu0XycFgrbwqLMX3M/7qsyFN4B1kEh6f/3l9xZz3KtxB4KPjt8cgn/ym
lcM0wT8aGQ0JBWLIt/IXEWDfDcMGhghdrw0TyV40pJGSMUxkuZ4KtEbOIdndbRY7
kmm5Z4ghFqPr1nl8NgLm4ENQ4QIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFGwHn46W
0j2hNzJ8RdUYst/vU9W2MB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky
NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvREE5OUZDM0E2
QzM4MTFFRkE1OTBCNDUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwawYIKwYBBQUHAQcBAf8E
XDBaMEkEAgABMEMDBAAr+dUDBAIr/ngDBAY7l4ADBAY8/oADBAJn7pQwCwMDAXbW
AwQGdteAAwQFevwgAwQEevyAAwQHfTiAAwQGffzAMA0EAgACMAcDBQAkBZYAMA0G
CSqGSIb3DQEBCwUAA4IBAQBCIFuT/Uq6QxgL+UmOwjGDLW/d77V8Q5zK2jQ/WegL
ps5+GvZ9RtRDXPWJwDUVruUREezKsyH4N04+3dLrm/rBAdBpVlKJVajpKZcos5ei
fABr42Tx+NNMddYlz2RSPA9XWNgwcbOUWu7Euiv+/d9gJwn9Ek7nho4wHiLISEG9
kfjTYPMdpZcTSuHlok4JhnNhq2Qahkuql62ZMBymZEOR6mjXzO7tCU9AyCggbjKI
b8/QSZAvTXztWBXzGVFlDzT0GqY88hDsfHr3Z2ybdHqqqZC5rvWrwEcxXQmFaVOY
W0/Zx8BCJIXhLrU7aZUU+9J5Vo4LV+BRhlMxxBokrjS4
-----END CERTIFICATE-----
Generated at Tue Oct 8 18:03:46 2024 by rpki-client on console-ams.rpki-client.org