Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/6DAF87AA21BA11ECB2027C56C4F9AE02.roa
File: 6DAF87AA21BA11ECB2027C56C4F9AE02.roa (raw, json)
Hash identifier: qwkFPw4Rc2+jY6s2aO6HPfgbL0rdxDEn0Izi2UbjB9s=
Subject key identifier: DE:B7:98:E6:90:97:8D:6D:40:46:D2:35:CC:6F:E6:38:FD:93:FF:8F
Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial: 06AE
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/6DAF87AA21BA11ECB2027C56C4F9AE02.roa
Signing time: Sat 02 Sep 2023 21:48:38 +0000
ROA not before: Sat 02 Sep 2023 21:48:38 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 21859
IP address blocks: 43.249.10.0/24 maxlen: 24
43.249.11.0/24 maxlen: 24
103.40.102.0/24 maxlen: 24
103.40.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Validity
Not Before: Sep 2 21:48:38 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f3adb6-6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:d4:fc:c9:7e:a5:aa:e4:e8:87:84:13:c8:
a0:f5:c3:d9:d0:15:a8:24:be:38:3e:78:9f:a6:a3:
0c:94:92:ca:11:6f:c0:97:d5:9f:d9:a9:41:ad:5a:
a2:87:98:80:d4:f9:93:6e:9b:72:f5:69:43:eb:ea:
69:8f:3a:80:ef:4a:67:cd:f1:73:38:57:cb:94:70:
ad:06:b8:c9:7c:54:2c:6b:54:59:48:b8:d4:91:ad:
9c:44:07:88:1f:08:87:a7:df:ef:76:72:d9:8c:ac:
14:81:65:9c:b9:02:a7:87:f2:a4:82:9c:06:c8:a3:
02:8d:c7:03:58:e9:8b:80:da:78:7e:2f:fc:4a:0f:
28:32:d6:e5:33:61:c3:20:19:e8:0e:16:7e:44:bb:
7a:e6:dc:f7:35:69:59:11:42:b0:3d:05:ea:2f:13:
27:e4:d3:8e:04:9d:f3:26:2a:b8:94:70:b0:79:e3:
5d:1c:1b:96:e3:6e:3e:86:61:fc:84:3e:2a:2c:90:
14:c9:a0:9b:6f:05:c8:27:a1:f8:d3:5f:08:a2:17:
96:e7:ac:09:6c:15:1c:dc:44:dd:3c:84:bb:16:30:
41:83:b9:ae:35:5f:3d:e7:52:b2:97:b9:05:ea:c9:
94:b7:61:ad:2c:49:8f:08:15:e3:e0:71:11:16:38:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:98:E6:90:97:8D:6D:40:46:D2:35:CC:6F:E6:38:FD:93:FF:8F
X509v3 Authority Key Identifier:
keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/6DAF87AA21BA11ECB2027C56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.10.0/23
103.40.102.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:c3:94:f3:81:a8:9a:89:fe:d7:e3:8c:8c:06:b2:43:51:b8:
14:aa:d0:75:fc:07:48:ca:4b:1d:59:2a:15:51:78:99:17:fd:
16:fc:76:83:eb:31:4c:97:06:77:ad:94:52:7e:57:d9:c9:68:
86:d2:e2:0a:24:ca:a3:61:c4:df:e7:99:b6:e6:a6:b2:be:f9:
77:eb:32:94:f2:68:0f:ed:4a:d7:16:96:49:79:b6:36:4c:e0:
23:a8:96:68:94:9c:3b:da:c5:53:9d:4c:50:18:e2:86:e6:82:
75:f8:b6:14:45:f6:87:0a:f3:05:38:35:06:4a:e2:3b:52:54:
a1:7a:02:a5:f0:e9:8e:96:6f:3f:4b:41:bc:9b:ba:35:91:e4:
ac:7c:93:75:e5:22:19:09:5b:54:8a:64:ee:b9:71:07:98:05:
bb:76:c9:33:22:9d:6a:bb:cb:31:e2:eb:ad:7b:2d:c0:a9:3a:
73:0d:f6:2d:e5:4c:85:20:0c:4a:c9:7c:84:b8:b2:f3:22:d4:
e6:76:69:8a:17:26:52:eb:88:f5:b1:e5:56:95:7f:5f:7a:25:
c4:df:05:57:fc:ca:a6:c1:fb:fa:0f:28:b2:96:60:67:f5:c0:
41:b8:11:5f:03:6e:f9:99:4e:4d:ae:ba:c8:3c:b8:e3:24:5f:
3a:d9:e0:89
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3
MzVGNEU0NzAwHhcNMjMwOTAyMjE0ODM4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGYzYWRiNi02MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3CzU/Ml+park6IeEE8ig9cPZ0BWoJL44PnifpqMMlJLKEW/Al9Wf2alBrVqi
h5iA1PmTbpty9WlD6+ppjzqA70pnzfFzOFfLlHCtBrjJfFQsa1RZSLjUka2cRAeI
HwiHp9/vdnLZjKwUgWWcuQKnh/KkgpwGyKMCjccDWOmLgNp4fi/8Sg8oMtblM2HD
IBnoDhZ+RLt65tz3NWlZEUKwPQXqLxMn5NOOBJ3zJiq4lHCweeNdHBuW424+hmH8
hD4qLJAUyaCbbwXIJ6H4018IoheW56wJbBUc3ETdPIS7FjBBg7muNV8951Kyl7kF
6smUt2GtLEmPCBXj4HERFjjK3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN63mOaQ
l41tQEbSNcxv5jj9k/+PMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB
MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvNkRBRjg3QUEy
MUJBMTFFQ0IyMDI3QzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAEr+QoDBAFnKGYwDQYJKoZIhvcNAQELBQADggEBADzDlPOB
qJqJ/tfjjIwGskNRuBSq0HX8B0jKSx1ZKhVReJkX/Rb8doPrMUyXBnetlFJ+V9nJ
aIbS4gokyqNhxN/nmbbmprK++XfrMpTyaA/tStcWlkl5tjZM4COolmiUnDvaxVOd
TFAY4obmgnX4thRF9ocK8wU4NQZK4jtSVKF6AqXw6Y6Wbz9LQbybujWR5Kx8k3Xl
IhkJW1SKZO65cQeYBbt2yTMinWq7yzHi6617LcCpOnMN9i3lTIUgDErJfIS4svMi
1OZ2aYoXJlLriPWx5VaVf196JcTfBVf8yqbB+/oPKLKWYGf1wEG4EV8DbvmZTk2u
usg8uOMkXzrZ4Ik=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:07:46 2024 by rpki-client on console-fra.rpki-client.org