Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/4C2C75DE701811EFA0E8A02AC4F9AE02.roa
File: 4C2C75DE701811EFA0E8A02AC4F9AE02.roa (raw, json)
Hash identifier: TX7Fdu9kD8HiHZVkQAf0gFE4rhJY04oFVItZOt7sCHU=
Subject key identifier: 7C:61:4E:3A:64:7E:03:82:BB:96:C9:EE:6B:D9:6F:F2:59:66:11:73
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0349
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/4C2C75DE701811EFA0E8A02AC4F9AE02.roa
Signing time: Wed 11 Sep 2024 08:31:53 +0000
ROA not before: Wed 11 Sep 2024 08:31:53 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 64021
IP address blocks: 43.230.11.0/24 maxlen: 24
43.255.117.0/24 maxlen: 24
103.235.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 08:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Sep 11 08:31:53 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66e15579-9873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:c5:ae:e0:c5:78:73:98:ae:37:b8:5d:95:
65:b4:3c:d6:51:04:9f:f7:83:1c:e6:d8:b0:a6:dc:
85:0c:62:4b:eb:7f:13:1e:44:76:9c:3e:be:31:8b:
9c:6e:58:4f:8d:4c:0d:89:dc:8a:58:36:ec:3c:c8:
80:5a:65:c9:19:1c:c7:0b:c9:ca:eb:8e:7b:db:02:
64:24:07:66:e9:8b:d3:e5:32:f1:19:11:11:3e:92:
8d:66:dd:9a:af:e9:bd:d5:e2:91:3d:74:fd:52:fd:
7a:b5:c7:3a:06:cf:32:c9:e3:64:9d:ae:30:8f:3a:
53:4e:fa:e6:9b:d9:ad:3b:82:c0:2a:bf:73:39:82:
a7:16:ac:25:b1:a9:7d:f6:eb:26:9d:e6:e1:52:fa:
d0:d9:ab:89:1b:71:70:b6:68:c0:9f:b1:77:cb:64:
a8:e2:7c:7c:bd:66:42:3e:1e:a1:61:6d:5a:5b:51:
53:b8:2c:8f:75:62:8f:40:9c:9e:0c:68:fc:73:82:
a3:35:f2:4a:45:f9:b6:8d:ef:99:ff:19:07:aa:e9:
2e:5d:3c:24:1f:69:a0:95:00:2d:4f:51:d3:6a:fd:
21:8d:e7:19:7a:b9:d3:da:32:5c:e3:64:3d:27:2a:
c3:a7:f2:82:96:d2:a4:9c:3f:e9:a9:ba:2c:0d:d3:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:4E:3A:64:7E:03:82:BB:96:C9:EE:6B:D9:6F:F2:59:66:11:73
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/4C2C75DE701811EFA0E8A02AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.11.0/24
43.255.117.0/24
103.235.19.0/24
Signature Algorithm: sha256WithRSAEncryption
01:42:e0:97:dc:a0:3c:21:44:7f:68:78:3e:16:ff:3f:ef:8b:
81:58:8c:4d:b4:ea:10:f2:a7:2b:64:f0:e9:88:5f:41:ff:57:
87:86:23:ad:a8:ae:16:bd:4e:32:93:e4:42:7d:1f:49:56:77:
3d:dd:b9:25:5d:ab:ab:42:be:7c:79:a0:9b:4e:59:c3:d1:39:
5a:97:9b:83:38:d7:76:ff:31:18:ad:a6:e5:a1:f3:6e:a1:b7:
43:cb:43:7c:02:6a:78:2f:35:db:9f:6c:db:8a:64:0e:ac:87:
17:27:28:17:e2:f7:34:d2:a4:e6:fe:46:b6:5a:af:d5:14:ee:
4c:b7:40:a9:41:3b:29:8d:9f:2a:28:65:39:bb:a0:ee:5f:53:
26:35:9b:0c:a5:d5:86:98:ff:0d:df:cc:5a:74:e4:db:85:56:
43:00:5d:20:0b:ea:85:fd:ac:ab:cf:15:73:73:3d:bb:4c:89:
2e:d7:59:99:0b:f0:27:5d:a6:e2:e3:8d:dc:45:1b:46:6f:92:
b0:8f:0b:10:7b:d1:bb:84:fc:5a:63:36:4e:b6:48:22:6b:e7:
01:ce:68:e4:c6:00:b7:67:db:07:16:23:dd:53:ca:e8:c3:9c:
00:6f:d2:03:ba:fd:16:2a:0d:60:f4:ad:64:99:3b:03:0a:b0:
1d:f3:d7:8a
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjQwOTExMDgzMTUzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUxNTU3OS05ODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lvFruDFeHOYrje4XZVltDzWUQSf94Mc5tiwptyFDGJL638THkR2nD6+MYuc
blhPjUwNidyKWDbsPMiAWmXJGRzHC8nK64572wJkJAdm6YvT5TLxGRERPpKNZt2a
r+m91eKRPXT9Uv16tcc6Bs8yyeNkna4wjzpTTvrmm9mtO4LAKr9zOYKnFqwlsal9
9usmnebhUvrQ2auJG3FwtmjAn7F3y2So4nx8vWZCPh6hYW1aW1FTuCyPdWKPQJye
DGj8c4KjNfJKRfm2je+Z/xkHqukuXTwkH2mglQAtT1HTav0hjecZernT2jJc42Q9
JyrDp/KCltKknD/pqbosDdPrNwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHxhTjpk
fgOCu5bJ7mvZb/JZZhFzMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvNEMyQzc1REU3
MDE4MTFFRkEwRThBMDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAAr5gsDBAAr/3UDBABn6xMwDQYJKoZIhvcNAQELBQADggEB
AAFC4JfcoDwhRH9oeD4W/z/vi4FYjE206hDypytk8OmIX0H/V4eGI62orha9TjKT
5EJ9H0lWdz3duSVdq6tCvnx5oJtOWcPROVqXm4M413b/MRitpuWh826ht0PLQ3wC
angvNdufbNuKZA6shxcnKBfi9zTSpOb+RrZar9UU7ky3QKlBOymNnyooZTm7oO5f
UyY1mwyl1YaY/w3fzFp05NuFVkMAXSAL6oX9rKvPFXNzPbtMiS7XWZkL8CddpuLj
jdxFG0ZvkrCPCxB70buE/FpjNk62SCJr5wHOaOTGALdn2wcWI91TyujDnABv0gO6
/RYqDWD0rWSZOwMKsB3z14o=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:28 2025 by rpki-client