Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F3774AAA569A11EE87E02E14C4F9AE02.roa
File: F3774AAA569A11EE87E02E14C4F9AE02.roa (raw, json)
Hash identifier: uC1zSRgXohHZ7YOXO/TFgS7KDS0JNMd2OlpTbf0z6q4=
Subject key identifier: 5B:C8:B8:3A:8F:9B:F0:1D:F7:0F:D6:23:B3:C4:80:A6:C4:70:EA:85
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 0D
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F3774AAA569A11EE87E02E14C4F9AE02.roa
Signing time: Tue 19 Sep 2023 13:20:52 +0000
ROA not before: Tue 19 Sep 2023 13:20:52 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 42960
IP address blocks: 103.247.28.0/23 maxlen: 24
2401:1fe0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Sep 2023 21:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Sep 19 13:20:52 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6509a033-f2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:43:37:cb:14:00:ef:f5:38:ed:59:ee:0a:
89:5e:34:8f:eb:f6:9e:22:99:8b:0e:df:d3:54:76:
b5:04:a7:f5:01:f3:41:54:b1:89:16:e1:a1:cd:be:
3a:8c:1f:b2:0e:a4:fe:b7:7a:04:d4:a8:60:61:b8:
c8:6c:0a:35:c7:07:7c:6a:c6:8d:77:a3:53:01:72:
6b:c6:8b:04:fc:85:9e:d5:4e:c7:69:04:ea:9c:77:
2a:d6:b4:c7:32:02:c5:58:7f:02:cb:7e:a3:0f:53:
db:1c:29:af:38:bd:bb:9a:1e:76:4a:f7:f2:74:1f:
22:46:38:f6:53:1b:f2:9b:bf:cc:bd:c6:dd:8e:c7:
1b:1e:68:0e:67:14:22:47:27:c2:03:c2:58:49:52:
95:66:29:f1:ca:7c:8a:65:47:09:93:41:ef:64:69:
b4:2c:d6:21:00:21:36:da:da:8d:ea:15:25:e7:b6:
0f:c1:ea:22:ca:b0:3b:d3:5d:66:0d:6b:7f:f2:0b:
55:65:f9:b4:b7:fe:0c:ce:21:f0:b4:96:61:22:a4:
fd:7b:8a:45:bc:a2:ae:12:6d:21:01:5e:85:52:46:
4c:77:8d:6d:10:ba:6b:e8:d5:79:aa:2f:6a:ab:5e:
6b:50:3c:de:7c:a2:42:b1:57:c3:08:2f:6e:f9:59:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C8:B8:3A:8F:9B:F0:1D:F7:0F:D6:23:B3:C4:80:A6:C4:70:EA:85
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F3774AAA569A11EE87E02E14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.28.0/23
IPv6:
2401:1fe0::/48
Signature Algorithm: sha256WithRSAEncryption
19:11:43:4f:cf:35:d5:9e:d5:4b:56:45:34:38:86:29:e0:6b:
5b:18:84:c8:fa:f3:83:c9:8e:22:1f:e2:0b:4b:5b:8a:8b:25:
5a:51:0c:0f:63:c5:c1:a8:39:6d:18:4a:fb:d3:75:05:9d:07:
eb:b3:5b:03:d2:55:b7:d1:0e:3d:4d:ac:95:b5:73:90:0f:0b:
d7:8d:90:9b:a5:a8:0e:04:e8:77:36:82:88:c4:22:b0:78:5b:
cb:b2:54:f2:5a:ce:da:6f:20:50:9d:41:b1:4e:39:16:e1:18:
a8:a5:b5:bb:f4:8f:45:2c:22:f6:57:66:e3:72:08:0c:65:80:
7f:b0:7a:43:0c:48:e1:50:95:a5:e5:34:cf:aa:64:40:e2:ee:
9c:f5:84:6c:52:57:14:35:2c:2b:b8:d5:a3:f4:6d:e5:cc:b2:
ca:be:4b:83:0c:80:02:57:5f:b2:5b:e6:02:d0:d6:31:ed:10:
b7:57:29:be:97:bd:63:6c:d1:a4:5a:38:a9:d8:83:8a:4d:9c:
aa:23:9b:cc:2f:9b:14:88:f8:69:98:59:61:42:94:97:4f:28:
2a:77:76:df:c0:44:70:af:16:2c:2e:d1:9a:d4:d9:c7:f5:db:
f3:d4:63:92:ab:13:36:92:d4:20:49:b9:5f:91:fc:1d:f3:29:
ce:65:9d:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Q0EzMTExMC8GA1UEBRMoMUVGMzBDNEM1NjA0QTU2RUNCM0VBRUU3RjJDQTk3RUI3
ODEwNTA3MDAeFw0yMzA5MTkxMzIwNTJaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MDlhMDMzLWYyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcL0M3yxQA7/U47VnuColeNI/r9p4imYsO39NUdrUEp/UB80FUsYkW4aHNvjqM
H7IOpP63egTUqGBhuMhsCjXHB3xqxo13o1MBcmvGiwT8hZ7VTsdpBOqcdyrWtMcy
AsVYfwLLfqMPU9scKa84vbuaHnZK9/J0HyJGOPZTG/Kbv8y9xt2OxxseaA5nFCJH
J8IDwlhJUpVmKfHKfIplRwmTQe9kabQs1iEAITba2o3qFSXntg/B6iLKsDvTXWYN
a3/yC1Vl+bS3/gzOIfC0lmEipP17ikW8oq4SbSEBXoVSRkx3jW0Qumvo1XmqL2qr
XmtQPN58okKxV8MIL275WdI3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUW8i4Oo+b
8B33D9Yjs8SApsRw6oUwHwYDVR0jBBgwFoAUHvMMTFYEpW7LPq7n8sqX63gQUHAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDQTMxLzA5MEYxNEZBNTAw
QzExRUU4MkIyNjg2M0M0RjlBRTAyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVI
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSHZNTVRGWUVwVzdMUHE3bjhzcVg2M2dRVUhBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9GMzc3NEFBQTU2
OUExMUVFODdFMDJFMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAWf3HDAPBAIAAjAJAwcAJAEf4AAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAZEUNPzzXVntVLVkU0OIYp4GtbGITI+vODyY4iH+ILS1uKiyVaUQwPY8XB
qDltGEr703UFnQfrs1sD0lW30Q49TayVtXOQDwvXjZCbpagOBOh3NoKIxCKweFvL
slTyWs7abyBQnUGxTjkW4RiopbW79I9FLCL2V2bjcggMZYB/sHpDDEjhUJWl5TTP
qmRA4u6c9YRsUlcUNSwruNWj9G3lzLLKvkuDDIACV1+yW+YC0NYx7RC3Vym+l71j
bNGkWjip2IOKTZyqI5vML5sUiPhpmFlhQpSXTygqd3bfwERwrxYsLtGa1NnH9dvz
1GOSqxM2ktQgSblfkfwd8ynOZZ2+
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org