Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/CD04784A7DA711EFBFB35726C4F9AE02.roa
File: CD04784A7DA711EFBFB35726C4F9AE02.roa (raw, json)
Hash identifier: 5V1MS4yrm+RlD3PlX7QcJwLKokuYiV/awA2RQGC+DZo=
Subject key identifier: B3:06:FA:EB:10:DF:7D:14:AF:D9:FD:27:3E:C7:37:BB:AC:2B:45:A4
Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial: 0322
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/CD04784A7DA711EFBFB35726C4F9AE02.roa
Signing time: Sat 28 Sep 2024 14:41:52 +0000
ROA not before: Sat 28 Sep 2024 14:41:52 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 133793
IP address blocks: 103.43.20.0/24 maxlen: 24
103.43.21.0/24 maxlen: 24
103.43.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 14:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802 (0x322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Validity
Not Before: Sep 28 14:41:52 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66f815b0-6231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:fd:95:2e:5e:ec:8b:b5:18:9e:b0:a7:e2:
fb:12:44:ef:3f:f0:22:34:a8:d2:06:98:71:8d:5c:
51:9c:8e:2b:f4:ce:67:9c:7f:4c:ca:7a:86:2a:29:
4a:27:ce:0e:a4:f6:9e:40:02:af:e1:48:9a:26:3b:
1e:c4:54:e9:3f:ca:99:7d:4b:02:ba:7d:de:ec:f0:
62:b7:e2:88:17:a3:62:4f:c4:00:6d:c6:b2:ac:31:
84:f2:9f:62:a9:7d:85:2a:1c:58:74:6c:d7:55:7e:
94:ba:5f:35:dc:b1:70:e5:98:08:92:76:13:7f:20:
a1:9c:1c:27:13:f7:51:54:d6:d3:fc:99:db:48:b7:
04:99:e3:71:e0:2f:91:60:f6:e1:dc:19:e5:c7:f0:
c1:06:e7:eb:7d:3c:63:0e:4f:9a:d5:19:fe:d5:64:
36:e2:6a:65:ac:ba:0a:4f:ef:8f:4f:5c:b3:03:7c:
de:2d:7d:a3:e3:ff:91:e1:73:99:fe:dc:87:20:28:
41:82:4e:60:97:02:cd:a4:cd:80:d5:e3:3e:1f:85:
c6:40:0c:a3:e0:90:72:8e:e8:b8:3a:07:84:76:b3:
dd:68:eb:26:85:62:93:b4:93:ec:a2:b3:9f:ac:74:
83:3d:d5:d1:3e:ea:45:c7:0f:84:7a:da:55:a0:d3:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:06:FA:EB:10:DF:7D:14:AF:D9:FD:27:3E:C7:37:BB:AC:2B:45:A4
X509v3 Authority Key Identifier:
keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/CD04784A7DA711EFBFB35726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.20.0-103.43.22.255
Signature Algorithm: sha256WithRSAEncryption
19:8a:37:f1:91:da:be:5e:bb:e0:24:e1:99:ba:7f:69:52:79:
e4:6e:c9:a5:c6:4a:20:69:5f:fa:08:8c:47:a8:16:ec:89:8d:
8b:08:af:56:70:63:75:c4:a8:48:d9:44:13:2f:d6:ed:da:d9:
09:5c:97:93:a7:79:fe:fd:ca:7a:bd:7d:2f:7e:87:c3:8f:82:
d9:17:eb:f3:a7:fa:5b:9d:a8:c8:95:d5:9a:fb:c7:10:30:ed:
2e:ea:49:29:38:50:90:f0:bf:57:28:20:96:b1:8d:b0:03:a0:
f3:45:17:35:0d:1d:24:02:7c:06:01:b1:ef:a3:9f:e2:9c:85:
8b:4d:c6:1d:f4:6d:f9:9b:92:29:11:c9:04:10:8b:53:0e:ef:
29:5a:6b:ac:ca:1a:d4:5e:2d:e2:89:53:f3:2d:69:ef:27:78:
d5:94:1e:86:b6:ee:9d:34:07:75:b1:f2:85:7e:c1:13:ba:e4:
94:aa:4b:bd:a6:4d:f7:bc:9a:75:fc:ec:bf:fb:4e:c9:a0:f7:
07:15:c1:5f:6a:bb:4f:84:2c:b0:11:55:87:66:0a:4b:3e:9d:
ab:89:ec:95:61:3c:2c:61:28:de:4e:69:eb:df:0e:c9:c5:bb:
20:0e:1f:48:b2:c4:4f:ae:a0:eb:5b:3e:13:04:76:5f:e2:73:
44:54:06:42
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw
Q0E3MDQ1RjgwHhcNMjQwOTI4MTQ0MTUyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY4MTViMC02MjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+79lS5e7Iu1GJ6wp+L7EkTvP/AiNKjSBphxjVxRnI4r9M5nnH9MynqGKilK
J84OpPaeQAKv4UiaJjsexFTpP8qZfUsCun3e7PBit+KIF6NiT8QAbcayrDGE8p9i
qX2FKhxYdGzXVX6Uul813LFw5ZgIknYTfyChnBwnE/dRVNbT/JnbSLcEmeNx4C+R
YPbh3Bnlx/DBBufrfTxjDk+a1Rn+1WQ24mplrLoKT++PT1yzA3zeLX2j4/+R4XOZ
/tyHIChBgk5glwLNpM2A1eM+H4XGQAyj4JByjui4OgeEdrPdaOsmhWKTtJPsorOf
rHSDPdXRPupFxw+EetpVoNMEnQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFLMG+usQ
330Ur9n9Jz7HN7usK0WkMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB
RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvQ0QwNDc4NEE3
REE3MTFFRkJGQjM1NzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAmcrFAMEAGcrFjANBgkqhkiG9w0BAQsFAAOCAQEAGYo3
8ZHavl674CThmbp/aVJ55G7JpcZKIGlf+giMR6gW7ImNiwivVnBjdcSoSNlEEy/W
7drZCVyXk6d5/v3Ker19L36Hw4+C2Rfr86f6W52oyJXVmvvHEDDtLupJKThQkPC/
VygglrGNsAOg80UXNQ0dJAJ8BgGx76Of4pyFi03GHfRt+ZuSKRHJBBCLUw7vKVpr
rMoa1F4t4olT8y1p7yd41ZQehrbunTQHdbHyhX7BE7rklKpLvaZN97yadfzsv/tO
yaD3BxXBX2q7T4QssBFVh2YKSz6dq4nslWE8LGEo3k5p698OycW7IA4fSLLET66g
61s+EwR2X+JzRFQGQg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:53 2024 by rpki-client on console-fra.rpki-client.org