Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/BFB2C81C985711EE8EF53A0CC4F9AE02.roa
File: BFB2C81C985711EE8EF53A0CC4F9AE02.roa (raw, json)
Hash identifier: LtpHERhvUyt6zWewezLOOriVBvGeFooV0AmqYVqqgws=
Subject key identifier: 25:82:DA:48:B6:30:12:C7:04:75:CC:E0:D7:F5:2A:9B:2C:B8:BA:38
Certificate issuer: /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Certificate serial: 1110
Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/BFB2C81C985711EE8EF53A0CC4F9AE02.roa
Signing time: Mon 11 Dec 2023 19:01:54 +0000
ROA not before: Mon 11 Dec 2023 19:01:54 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 20473
IP address blocks: 43.224.32.0/22 maxlen: 24
103.43.72.0/22 maxlen: 32
202.182.96.0/20 maxlen: 23
202.182.96.0/25 maxlen: 32
202.182.96.128/25 maxlen: 32
202.182.97.0/25 maxlen: 32
202.182.97.128/25 maxlen: 32
202.182.98.0/24 maxlen: 32
202.182.99.0/25 maxlen: 32
202.182.99.128/25 maxlen: 32
202.182.100.0/24 maxlen: 32
202.182.101.0/25 maxlen: 32
202.182.101.128/25 maxlen: 32
202.182.102.0/25 maxlen: 32
202.182.102.128/25 maxlen: 32
202.182.103.0/25 maxlen: 32
202.182.103.128/25 maxlen: 32
202.182.104.0/25 maxlen: 32
202.182.104.128/25 maxlen: 32
202.182.105.0/25 maxlen: 32
202.182.105.128/25 maxlen: 32
202.182.106.0/25 maxlen: 32
202.182.106.128/25 maxlen: 32
202.182.107.0/25 maxlen: 32
202.182.107.128/25 maxlen: 32
202.182.108.0/25 maxlen: 32
202.182.108.128/25 maxlen: 32
202.182.109.0/25 maxlen: 32
202.182.109.128/25 maxlen: 32
202.182.110.0/25 maxlen: 32
202.182.110.128/25 maxlen: 32
202.182.111.0/25 maxlen: 32
202.182.111.128/25 maxlen: 32
202.182.112.0/20 maxlen: 24
2401:c080:1000::/38 maxlen: 38
2401:c080:1400::/38 maxlen: 38
2401:c080:1800::/38 maxlen: 38
2401:c080:18fb::/48 maxlen: 48
2401:c080:1c00::/38 maxlen: 38
2401:c080:2000::/38 maxlen: 38
2401:c080:2400::/38 maxlen: 38
2401:c080:3000::/38 maxlen: 38
2401:c080:3400::/38 maxlen: 38
2401:c080:3800::/38 maxlen: 38
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4368 (0x1110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Validity
Not Before: Dec 11 19:01:54 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65775ca2-2ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:4c:85:18:3b:fe:15:77:64:42:12:6d:9c:
13:a3:13:a4:01:a6:c9:7c:90:33:a9:e2:cb:64:c2:
39:d1:fb:1e:ce:f0:a1:1e:09:68:56:f2:2c:79:7f:
49:c9:e1:5e:0e:e4:89:e6:10:c3:b9:38:29:67:89:
7a:c7:19:02:b9:f5:f2:fa:9f:4d:09:be:88:d9:20:
ca:78:a4:c5:b7:74:64:54:0c:80:c2:cf:45:9b:8b:
90:53:32:80:7c:0d:69:41:bc:10:ae:1f:12:fd:6d:
bb:1b:db:13:f3:89:b1:29:7f:62:ad:ed:38:ac:3c:
6a:76:58:1f:53:94:ac:a9:8b:b7:30:6d:8e:c7:01:
d2:f3:ba:4c:b5:eb:ae:cf:64:9c:f3:e5:10:b7:48:
ab:b2:37:e5:45:ce:6d:79:68:a0:bd:96:28:5a:af:
e8:d2:c0:2b:e8:d9:d1:ac:c0:dc:12:55:e1:5c:65:
a5:84:38:b1:77:fb:2c:33:c3:57:57:12:31:44:0a:
1b:e8:55:57:f6:0d:68:c0:8f:62:00:68:9c:f1:64:
c2:17:a5:b9:8b:fc:f2:fc:21:13:d0:09:cc:71:ea:
9c:c2:34:07:c3:af:a6:f5:bc:be:24:3d:d4:e8:8d:
76:86:04:6d:e4:67:19:4d:73:15:cc:c7:9b:05:d7:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:DA:48:B6:30:12:C7:04:75:CC:E0:D7:F5:2A:9B:2C:B8:BA:38
X509v3 Authority Key Identifier:
keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/BFB2C81C985711EE8EF53A0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.32.0/22
103.43.72.0/22
202.182.96.0/19
IPv6:
2401:c080:1000::-2401:c080:27ff:ffff:ffff:ffff:ffff:ffff
2401:c080:3000::-2401:c080:3bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cd:74:05:54:4a:dd:70:69:0f:e8:0f:5e:7a:dd:96:08:28:2f:
fd:61:5f:c6:ae:02:59:5b:c7:d8:a0:da:1f:e6:68:e7:ed:35:
ac:4a:7c:e6:ab:91:59:b3:62:f3:a1:ca:dd:8c:7c:03:c2:fe:
41:1a:bc:4d:f3:20:c9:ab:f5:0e:d6:b7:ce:cc:78:df:c1:29:
ba:7c:16:c0:0b:96:41:c2:ec:22:0f:9c:6b:91:b0:99:97:6e:
e3:2a:6b:34:a5:27:e1:6f:7a:b4:41:39:e6:ec:b7:27:6a:44:
44:d5:d0:ed:41:e8:4b:ed:53:29:34:3f:28:bf:65:4a:90:55:
4d:b4:68:79:72:fb:73:d4:32:14:d9:df:18:cc:2b:ff:3d:67:
e9:b4:44:c1:73:f4:c6:72:f7:c2:d3:25:21:86:cf:ae:59:8a:
17:87:be:5e:51:7c:e6:3d:cb:ef:0c:b3:30:c3:f6:1f:19:55:
f1:34:06:16:0b:aa:8b:d6:81:ac:92:03:e6:4a:a1:5b:48:1b:
a6:7e:ae:09:d8:51:c0:d3:f7:90:08:bd:64:84:eb:1b:f3:b8:
09:02:a4:4a:68:ed:8f:5e:26:c0:f1:0a:9f:1c:07:16:d0:4a:
42:d4:9d:89:12:65:cb:33:be:4d:59:9d:47:39:e8:fe:db:9b:
0b:52:ee:c7
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgICERAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDUxQUFBQzdGNkY1OEY3NDcwNzJDODdFQzJGNDg3OEVG
MUNCOEY0Q0UwHhcNMjMxMjExMTkwMTU0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTc3NWNhMi0yYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAru5MhRg7/hV3ZEISbZwToxOkAabJfJAzqeLLZMI50fsezvChHgloVvIseX9J
yeFeDuSJ5hDDuTgpZ4l6xxkCufXy+p9NCb6I2SDKeKTFt3RkVAyAws9Fm4uQUzKA
fA1pQbwQrh8S/W27G9sT84mxKX9ire04rDxqdlgfU5SsqYu3MG2OxwHS87pMteuu
z2Sc8+UQt0irsjflRc5teWigvZYoWq/o0sAr6NnRrMDcElXhXGWlhDixd/ssM8NX
VxIxRAob6FVX9g1owI9iAGic8WTCF6W5i/zy/CET0AnMceqcwjQHw6+m9by+JD3U
6I12hgRt5GcZTXMVzMebBddrpQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFCWC2ki2
MBLHBHXM4Nf1KpssuLo4MB8GA1UdIwQYMBaAFFGqrH9vWPdHByyH7C9IeO8cuPTO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9GODU4MzQ0RUUz
NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkwY0hMSWZzTDBoNDd4eTQ5
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VhcXNmMjlZOTBjSExJZnNMMGg0N3h5NDlNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJDREYvRjg1ODM0NEVFMzZEMTFFODk1NkYzNTE2QzRGOUFFMDIvQkZCMkM4MUM5
ODU3MTFFRThFRjUzQTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E
SDBGMBgEAgABMBIDBAIr4CADBAJnK0gDBAXKtmAwKgQCAAIwJDAQAwYEJAHAgBAD
BgMkAcCAIDAQAwYEJAHAgDADBgIkAcCAODANBgkqhkiG9w0BAQsFAAOCAQEAzXQF
VErdcGkP6A9eet2WCCgv/WFfxq4CWVvH2KDaH+Zo5+01rEp85quRWbNi86HK3Yx8
A8L+QRq8TfMgyav1Dta3zsx438EpunwWwAuWQcLsIg+ca5GwmZdu4yprNKUn4W96
tEE55uy3J2pERNXQ7UHoS+1TKTQ/KL9lSpBVTbRoeXL7c9QyFNnfGMwr/z1n6bRE
wXP0xnL3wtMlIYbPrlmKF4e+XlF85j3L7wyzMMP2HxlV8TQGFguqi9aBrJID5kqh
W0gbpn6uCdhRwNP3kAi9ZITrG/O4CQKkSmjtj14mwPEKnxwHFtBKQtSdiRJlyzO+
TVmdRzno/tubC1Luxw==
-----END CERTIFICATE-----
Generated at Mon Dec 11 20:39:50 2023 by rpki-client on console-fra.rpki-client.org