Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/C8642118032511ED86C03C22C4F9AE02.roa
File: C8642118032511ED86C03C22C4F9AE02.roa (raw, json)
Hash identifier: OnsaNgjO8g3+wNoKD/TWUpjf3Jf4Zt5/oExQM+aBuRQ=
Subject key identifier: BF:C6:97:FD:AB:DE:08:C9:78:EC:2B:D9:FD:C9:C2:34:2E:CD:6C:3F
Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial: 01C5
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/C8642118032511ED86C03C22C4F9AE02.roa
Signing time: Tue 19 Mar 2024 04:36:45 +0000
ROA not before: Tue 19 Mar 2024 04:36:45 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38197
IP address blocks: 43.248.174.0/24 maxlen: 24
43.248.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 08:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Validity
Not Before: Mar 19 04:36:45 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f9165c-ad6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:47:3e:84:81:c0:c3:0a:c7:a0:0e:b9:78:
87:73:11:8f:cc:fd:39:e8:02:42:fb:dc:43:c8:68:
1c:96:5e:38:af:db:8c:42:1d:29:df:34:99:53:c9:
a6:17:90:04:84:4a:04:1a:58:4b:4e:c8:a6:b2:a0:
45:4e:03:ee:94:88:62:f1:84:93:d3:1b:46:ed:26:
10:1b:6f:bb:13:c0:ba:bb:25:46:86:4d:49:ca:e2:
ac:5e:2b:f1:f6:60:86:da:20:cc:f8:9e:73:d5:cc:
45:22:74:85:de:3d:b5:83:4c:ae:bf:0d:6e:66:b2:
1b:f4:3e:9c:54:e4:85:39:e2:92:ba:b7:71:64:fb:
8e:c7:3e:52:0c:28:89:43:da:64:6f:89:42:3b:1c:
8f:76:6c:22:34:30:60:6d:c2:3a:e7:82:31:80:b7:
85:e7:0f:34:24:49:58:ec:7f:50:50:71:cb:26:5b:
05:b6:84:8a:68:09:b8:b4:9e:be:cd:2c:9c:a7:a3:
36:89:4c:57:9c:50:bf:71:71:8b:b7:34:da:0b:a7:
ce:56:f2:c9:c2:07:53:09:9a:9c:83:d4:ab:40:66:
c3:25:42:ac:71:d3:c0:12:bb:9b:c3:d3:b2:bd:1d:
7d:c4:f9:ae:d7:f1:43:a7:75:23:c6:a8:b0:fd:9b:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:97:FD:AB:DE:08:C9:78:EC:2B:D9:FD:C9:C2:34:2E:CD:6C:3F
X509v3 Authority Key Identifier:
keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/C8642118032511ED86C03C22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.174.0/23
Signature Algorithm: sha256WithRSAEncryption
86:ac:e7:c7:fd:60:de:28:4e:66:f3:d8:53:4f:fa:b9:4b:86:
b2:2f:e7:3e:7e:0e:48:a1:3d:3e:8b:2c:84:82:b6:ed:79:f9:
31:3e:1f:48:a1:3a:f0:ee:e8:31:7c:6d:59:4e:a6:c1:f5:41:
a3:7e:aa:99:63:fc:ff:d0:f5:23:11:c6:37:c7:ea:f6:ff:e3:
1c:98:41:65:09:e0:20:2e:67:9e:a3:40:86:92:bf:45:1f:16:
57:a2:82:13:ad:91:66:46:ac:6d:27:37:43:db:68:94:85:84:
d9:77:d9:22:d5:1f:da:83:62:1a:35:16:d4:11:f9:c6:18:d9:
dc:1d:75:6c:6a:8c:ea:f3:4f:3f:36:bb:63:27:e0:f8:3a:44:
8f:6d:f9:b4:f2:02:71:32:c1:2f:cb:d5:66:13:52:4f:e6:88:
4c:3f:ee:5d:32:a6:bd:20:c3:95:14:f6:ed:8c:cf:d5:1f:80:
7e:9d:21:da:0a:b6:a4:90:a3:28:24:e0:5c:7b:a8:1f:56:6d:
88:2a:43:39:15:1d:40:a6:23:aa:03:f9:e2:b5:e4:f0:5a:c9:
86:8e:b0:f0:f8:11:b0:94:74:6f:2b:47:8a:f8:53:4f:ed:ef:
75:3e:42:95:f9:ee:3a:e9:c4:e1:38:0c:1e:da:15:bc:5f:b6:
6d:2e:d1:1c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy
OEQ1MkEwRDUwHhcNMjQwMzE5MDQzNjQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWY5MTY1Yy1hZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApotHPoSBwMMKx6AOuXiHcxGPzP056AJC+9xDyGgcll44r9uMQh0p3zSZU8mm
F5AEhEoEGlhLTsimsqBFTgPulIhi8YST0xtG7SYQG2+7E8C6uyVGhk1JyuKsXivx
9mCG2iDM+J5z1cxFInSF3j21g0yuvw1uZrIb9D6cVOSFOeKSurdxZPuOxz5SDCiJ
Q9pkb4lCOxyPdmwiNDBgbcI654IxgLeF5w80JElY7H9QUHHLJlsFtoSKaAm4tJ6+
zSycp6M2iUxXnFC/cXGLtzTaC6fOVvLJwgdTCZqcg9SrQGbDJUKscdPAErubw9Oy
vR19xPmu1/FDp3Ujxqiw/ZsP8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFL/Gl/2r
3gjJeOwr2f3JwjQuzWw/MB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz
MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvQzg2NDIxMTgw
MzI1MTFFRDg2QzAzQzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEr+K4wDQYJKoZIhvcNAQELBQADggEBAIas58f9YN4oTmbz
2FNP+rlLhrIv5z5+DkihPT6LLISCtu15+TE+H0ihOvDu6DF8bVlOpsH1QaN+qplj
/P/Q9SMRxjfH6vb/4xyYQWUJ4CAuZ56jQIaSv0UfFleighOtkWZGrG0nN0PbaJSF
hNl32SLVH9qDYho1FtQR+cYY2dwddWxqjOrzTz82u2Mn4Pg6RI9t+bTyAnEywS/L
1WYTUk/miEw/7l0ypr0gw5UU9u2Mz9UfgH6dIdoKtqSQoygk4Fx7qB9WbYgqQzkV
HUCmI6oD+eK15PBayYaOsPD4EbCUdG8rR4r4U0/t73U+QpX57jrpxOE4DB7aFbxf
tm0u0Rw=
-----END CERTIFICATE-----
Generated at Wed Jul 3 11:19:22 2024 by rpki-client on console-ams.rpki-client.org