Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/AB05EB585B6111ED82731339C4F9AE02.roa
File: AB05EB585B6111ED82731339C4F9AE02.roa (raw, json)
Hash identifier: CT9mErvoqMILCniSYJuFkv3zI0AnK1vDme3HMN/2l34=
Subject key identifier: 50:F8:43:61:71:FF:C8:AC:BB:DF:E6:69:BA:8E:3B:EB:74:46:32:5D
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 12A4
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/AB05EB585B6111ED82731339C4F9AE02.roa
Signing time: Tue 04 Jul 2023 17:24:08 +0000
ROA not before: Tue 04 Jul 2023 17:24:08 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 139734
IP address blocks: 103.116.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 02:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4772 (0x12a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jul 4 17:24:08 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a455b8-6f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:c5:29:0e:11:72:2c:2f:45:82:1d:84:51:
af:58:ae:27:fa:a5:c6:48:27:b7:a6:eb:a3:d2:c9:
28:ce:81:58:b1:74:0c:33:9d:bd:8e:c0:74:e3:60:
aa:81:9a:00:e6:96:71:ad:bf:7e:2e:60:e0:8c:11:
44:9b:1a:38:d0:a2:ec:b0:bd:eb:41:96:f4:a0:5c:
d8:0e:cc:40:fb:5f:d4:99:f9:46:48:d8:0d:fe:f3:
5e:e4:c1:be:a1:4b:4e:2c:ec:c4:03:e2:c2:05:b9:
1d:20:39:cd:94:38:f2:87:24:43:d0:9e:40:f9:a0:
4b:37:1f:a1:0e:bd:e0:87:44:62:09:b9:3b:cf:cf:
4c:e5:55:dd:58:18:e8:d8:e9:60:4f:aa:6f:13:a0:
52:a6:fd:39:51:07:26:59:ad:aa:66:ef:4e:80:3e:
32:36:84:c2:5e:fc:55:99:b0:fd:9e:4c:b3:d0:9f:
ba:6d:09:42:79:29:d8:54:87:02:2b:e5:45:12:98:
82:d0:23:2f:6f:30:cc:e2:c7:8d:ea:7f:c2:62:1e:
e0:83:df:85:da:09:94:66:32:cf:7d:d1:44:d6:34:
bd:d1:b0:61:cc:57:3a:3d:bf:3b:55:61:fc:a5:08:
1b:e2:88:e6:30:80:db:cd:b0:cd:22:b9:79:92:2a:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:43:61:71:FF:C8:AC:BB:DF:E6:69:BA:8E:3B:EB:74:46:32:5D
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/AB05EB585B6111ED82731339C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:be:d6:17:df:8d:1a:c1:ee:4e:7a:6a:16:87:6d:95:b9:c9:
10:3f:28:83:57:06:89:b2:d4:02:e1:57:d2:51:e1:19:dc:06:
54:df:ca:08:a4:da:0d:4b:aa:f7:72:d1:5d:6d:7d:ca:2a:ff:
7f:a8:75:d1:9a:f4:86:c2:c2:26:fe:46:bc:a4:e0:b1:9b:83:
77:51:2d:0f:c2:30:ad:23:45:ba:86:34:4e:c5:95:90:72:f8:
43:4b:43:ce:d5:8a:6f:83:c2:7a:ac:69:06:67:b1:cb:f0:35:
da:c1:a5:b8:29:04:1b:d3:2d:4d:c6:18:9e:10:af:c0:2e:51:
74:e5:8f:a7:1c:4b:e1:88:b6:b5:94:e8:ae:06:55:4f:3f:2e:
38:f2:76:df:09:02:1a:13:80:16:b5:1e:86:a9:2f:db:48:fb:
ef:a7:70:90:44:12:e7:21:d7:d3:f8:8e:de:4d:ae:e0:29:91:
e0:a5:42:88:f7:40:ea:4a:91:80:f2:bb:77:8c:0e:d9:5d:53:
80:29:8f:f2:60:af:35:a5:7c:bb:58:bd:2f:3b:a3:ba:47:7c:
ef:af:6d:b1:ab:b7:10:7e:53:d0:b6:ac:2a:1f:4f:79:b7:53:
81:d3:87:5a:37:97:c3:94:ad:69:2b:25:9a:99:ae:93:28:9b:
ac:ad:28:f3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC
RDY0MDBFMDkwHhcNMjMwNzA0MTcyNDA4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE0NTViOC02ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAra3FKQ4RciwvRYIdhFGvWK4n+qXGSCe3puuj0skozoFYsXQMM529jsB042Cq
gZoA5pZxrb9+LmDgjBFEmxo40KLssL3rQZb0oFzYDsxA+1/UmflGSNgN/vNe5MG+
oUtOLOzEA+LCBbkdIDnNlDjyhyRD0J5A+aBLNx+hDr3gh0RiCbk7z89M5VXdWBjo
2OlgT6pvE6BSpv05UQcmWa2qZu9OgD4yNoTCXvxVmbD9nkyz0J+6bQlCeSnYVIcC
K+VFEpiC0CMvbzDM4seN6n/CYh7gg9+F2gmUZjLPfdFE1jS90bBhzFc6Pb87VWH8
pQgb4ojmMIDbzbDNIrl5kipjswIDAQABo4IClTCCApEwHQYDVR0OBBYEFFD4Q2Fx
/8isu9/mabqOO+t0RjJdMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw
MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvQUIwNUVCNTg1
QjYxMTFFRDgyNzMxMzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJndPQwDQYJKoZIhvcNAQELBQADggEBABq+1hffjRrB7k56
ahaHbZW5yRA/KINXBomy1ALhV9JR4RncBlTfygik2g1Lqvdy0V1tfcoq/3+oddGa
9IbCwib+Rryk4LGbg3dRLQ/CMK0jRbqGNE7FlZBy+ENLQ87Vim+DwnqsaQZnscvw
NdrBpbgpBBvTLU3GGJ4Qr8AuUXTlj6ccS+GItrWU6K4GVU8/Ljjydt8JAhoTgBa1
HoapL9tI+++ncJBEEuch19P4jt5NruApkeClQoj3QOpKkYDyu3eMDtldU4Apj/Jg
rzWlfLtYvS87o7pHfO+vbbGrtxB+U9C2rCofT3m3U4HTh1o3l8OUrWkrJZqZrpMo
m6ytKPM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org