Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/C789B11C8D0D11EFB98F225AC4F9AE02.roa
File: C789B11C8D0D11EFB98F225AC4F9AE02.roa (raw, json)
Hash identifier: 6vI+ZFcy0hYA1NzoYAYjN8c2o2WU/WizQNZ2kMDnWg0=
Subject key identifier: 65:25:24:F2:8A:31:9D:D0:8C:D3:9A:F9:8D:45:D2:4E:8A:85:BE:D9
Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial: 072F
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/C789B11C8D0D11EFB98F225AC4F9AE02.roa
Signing time: Fri 18 Oct 2024 04:59:39 +0000
ROA not before: Fri 18 Oct 2024 04:59:39 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 55720
IP address blocks: 45.123.100.0/24 maxlen: 24
103.9.148.0/24 maxlen: 24
103.9.149.0/24 maxlen: 24
103.9.150.0/24 maxlen: 24
103.9.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 03:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Validity
Not Before: Oct 18 04:59:39 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6711eb3b-dbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:c6:78:a7:41:d9:ea:84:25:a8:d4:5a:74:
0a:3e:1a:96:0a:02:69:da:95:66:46:51:45:f9:24:
d7:78:a0:92:8f:fb:73:04:db:76:5b:f8:44:06:70:
b9:d7:69:e9:78:7a:83:90:29:d8:b8:fc:91:80:c2:
ac:70:c7:b1:5c:84:be:8a:9d:10:16:0b:85:fa:43:
3d:d0:4a:2d:b7:0f:79:09:31:17:da:de:74:fe:4e:
90:4a:63:29:5f:48:60:88:de:fe:81:da:32:ca:f9:
21:a3:bf:38:ab:45:1c:6d:71:5f:07:8a:35:73:76:
15:1d:65:8c:27:9c:da:ac:7e:19:9b:f3:49:75:b8:
3a:40:3b:a7:5c:61:1a:e5:52:a1:34:ed:77:3d:17:
b9:84:5a:32:9e:c1:a5:e2:fc:1e:3f:b7:4c:40:56:
2b:de:1c:d0:78:e2:a7:27:78:a0:c6:18:3f:47:e3:
b5:c3:50:06:44:21:a0:ca:40:8b:32:1f:93:45:be:
03:7d:0f:f0:18:1a:2a:b2:aa:2f:79:f9:6f:0e:ac:
a9:2e:56:b5:bc:30:53:e9:7c:1a:2f:be:b0:6b:2c:
b3:be:66:9b:6b:89:cc:40:e1:ca:a6:6e:2c:91:17:
11:b6:a7:01:b3:f4:98:39:23:35:3a:e7:f1:f8:82:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:24:F2:8A:31:9D:D0:8C:D3:9A:F9:8D:45:D2:4E:8A:85:BE:D9
X509v3 Authority Key Identifier:
keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/C789B11C8D0D11EFB98F225AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.100.0/24
103.9.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:4b:ec:d1:f0:99:a5:e3:b7:43:76:1f:c6:43:db:2f:4c:be:
f5:32:0a:68:5d:3b:e8:fa:31:ab:0f:c4:5a:e3:b2:10:5d:36:
81:13:d7:e6:52:da:b5:62:5e:84:04:e1:7b:26:65:71:9d:42:
32:1a:a8:45:a7:cc:7d:fc:49:41:da:dc:f6:45:43:97:bb:e9:
b6:b7:9b:1b:40:e2:a2:e8:69:f5:1c:54:35:60:66:79:51:cf:
c9:fd:50:dc:1f:0b:9e:51:8e:b7:81:b6:10:fd:43:84:c3:f8:
1c:95:da:dc:f3:15:d8:de:23:ed:c7:8e:19:b3:9d:fb:d3:c3:
ed:73:92:6b:e3:df:01:35:e7:99:fe:78:2d:e3:d7:d0:3b:b4:
07:2a:50:8c:b2:ca:d1:c8:f0:94:d2:a8:6f:34:9f:0e:94:0c:
96:fe:a8:b7:7f:c4:45:79:34:c7:5b:e5:84:85:ec:a0:cc:a9:
34:c8:b9:a8:5f:60:66:45:00:d6:d9:24:f3:1c:bf:a3:4e:12:
1f:4e:a8:83:90:81:8e:1a:c7:bb:21:b3:49:33:58:e4:97:14:
23:ba:5b:6e:29:ea:b8:b2:0a:f5:17:6b:f4:9e:51:ac:e5:cd:
15:c3:c1:6b:f9:fb:f2:0c:9a:98:a7:3e:06:ff:a4:be:1b:84:
2b:58:4c:bc
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUYyQ0YxMTAvBgNVBAUTKENCMzBEMzVDNzBERkM4NjZBODM3Q0FFREZFRkNFNkZF
Q0JGQzVCNUYwHhcNMjQxMDE4MDQ1OTM5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzExZWIzYi1kYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5jLGeKdB2eqEJajUWnQKPhqWCgJp2pVmRlFF+STXeKCSj/tzBNt2W/hEBnC5
12npeHqDkCnYuPyRgMKscMexXIS+ip0QFguF+kM90Eottw95CTEX2t50/k6QSmMp
X0hgiN7+gdoyyvkho784q0UcbXFfB4o1c3YVHWWMJ5zarH4Zm/NJdbg6QDunXGEa
5VKhNO13PRe5hFoynsGl4vweP7dMQFYr3hzQeOKnJ3igxhg/R+O1w1AGRCGgykCL
Mh+TRb4DfQ/wGBoqsqoveflvDqypLla1vDBT6XwaL76wayyzvmaba4nMQOHKpm4s
kRcRtqcBs/SYOSM1Oufx+IIGSwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGUlJPKK
MZ3QjNOa+Y1F0k6Khb7ZMB8GA1UdIwQYMBaAFMsw01xw38hmqDfK7f785v7L/Ftf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJDRi9GNUMxNEVEMjA3
MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhEZnlHYW9OOHJ0X3Z6bV9zdjhX
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l6RFRYSERmeUdhb044cnRfdnptX3N2OFcxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUYyQ0YvRjVDMTRFRDIwNzEwMTFFQjk3RjlGNTM3QzRGOUFFMDIvQzc4OUIxMUM4
RDBEMTFFRkI5OEYyMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAte2QDBAJnCZQwDQYJKoZIhvcNAQELBQADggEBAL1L7NHw
maXjt0N2H8ZD2y9MvvUyCmhdO+j6MasPxFrjshBdNoET1+ZS2rViXoQE4XsmZXGd
QjIaqEWnzH38SUHa3PZFQ5e76ba3mxtA4qLoafUcVDVgZnlRz8n9UNwfC55RjreB
thD9Q4TD+ByV2tzzFdjeI+3HjhmznfvTw+1zkmvj3wE155n+eC3j19A7tAcqUIyy
ytHI8JTSqG80nw6UDJb+qLd/xEV5NMdb5YSF7KDMqTTIuahfYGZFANbZJPMcv6NO
Eh9OqIOQgY4ax7shs0kzWOSXFCO6W24p6riyCvUXa/SeUazlzRXDwWv5+/IMmpin
Pgb/pL4bhCtYTLw=
-----END CERTIFICATE-----
Generated at Thu Nov 14 06:09:44 2024 by rpki-client on console-ams.rpki-client.org