Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/81A4F8ECCCA111ED8E5D7E35C4F9AE02.roa
File: 81A4F8ECCCA111ED8E5D7E35C4F9AE02.roa (raw, json)
Hash identifier: hZTTpnzP6+cfMVdWDAHurS6uTIsWqxH+I3WbtKJe4PM=
Subject key identifier: 20:DD:F3:BA:8D:AF:E2:A9:41:D4:C9:5C:6D:5E:C7:51:C8:04:7B:A2
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 0287
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/81A4F8ECCCA111ED8E5D7E35C4F9AE02.roa
Signing time: Mon 27 Mar 2023 13:15:56 +0000
ROA not before: Mon 27 Mar 2023 13:15:56 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 137449
IP address blocks: 103.179.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Mar 27 13:15:56 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=6421970b-6f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:b1:f2:e7:17:01:3b:d6:87:93:16:e3:80:
a5:c2:97:60:e3:11:12:1b:a5:81:a6:b9:f8:88:c4:
e2:1a:09:42:e8:e0:e6:15:3d:e2:37:12:3c:84:7d:
84:61:5c:20:e3:46:1e:57:bd:a5:f2:1c:84:72:8c:
5b:02:eb:86:cc:26:26:04:26:75:f0:2c:4a:61:85:
75:a1:f6:9b:f1:ba:58:c4:7f:f8:29:e7:ad:4d:89:
87:3d:c6:b8:4c:e9:bb:f1:67:79:07:4e:b4:85:89:
92:53:01:08:07:07:f6:82:6c:bf:20:49:ee:8e:40:
cd:cf:f8:e8:d3:1d:c1:6e:df:b8:f9:f5:70:99:4a:
15:1f:ad:68:1b:72:6c:41:7a:50:9e:9e:7a:d9:4d:
f5:2a:84:ea:a7:9e:6b:cb:31:f7:bf:d1:e3:d4:c1:
2b:7c:0b:72:a3:a7:37:1e:a0:1d:3a:00:6f:24:00:
8e:57:05:5e:03:27:ea:88:f6:36:5e:51:ed:8f:40:
22:33:c2:e9:85:ec:f7:3a:81:a5:38:a3:cb:29:05:
1d:cb:0f:1d:52:7e:47:cd:b6:ed:de:c9:7d:e5:10:
12:2a:6c:4b:a2:fb:4a:0a:33:b9:d5:56:65:52:76:
14:53:19:9c:51:7f:07:fd:ea:27:e1:76:4b:76:cf:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:F3:BA:8D:AF:E2:A9:41:D4:C9:5C:6D:5E:C7:51:C8:04:7B:A2
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/81A4F8ECCCA111ED8E5D7E35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.14.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fe:0c:49:a7:b9:a4:e9:03:bf:59:b2:6f:bb:34:0c:7f:ed:
68:a1:32:5c:3a:79:05:f5:5d:12:63:93:3d:26:63:57:22:c3:
dd:44:f6:88:7b:cd:1f:e8:66:76:e6:f6:cf:f3:15:17:d4:b7:
85:46:c2:fc:34:f3:80:84:9d:ec:72:b9:7e:d8:15:29:01:99:
9a:80:c7:dd:a9:a1:cc:42:ac:d2:10:19:58:7d:88:66:7f:4e:
eb:a2:86:b1:15:d5:37:54:a5:95:08:3e:83:5c:2d:bc:b1:0f:
46:5d:61:51:04:b2:25:bf:f3:b7:4c:6b:48:a2:ba:0d:34:52:
4b:c7:06:53:38:8e:59:65:2f:db:fc:1d:bb:f6:de:83:73:a3:
11:ca:d2:ad:cf:44:a7:90:bc:3c:e5:bb:79:9f:fa:bd:ce:b1:
9c:9a:f8:ed:a3:a7:79:2e:44:c9:39:d1:95:e8:0d:52:b6:45:
6a:6d:a8:cd:b8:e3:d4:05:43:f3:b6:15:be:41:80:9c:eb:c7:
3f:37:0a:15:c7:f0:ca:b7:3d:60:09:c8:93:81:99:c8:65:65:
cf:c7:17:2b:17:f7:24:55:ae:f4:b7:28:5e:ff:dd:67:b3:72:
e4:71:73:ed:6a:45:6f:89:28:6c:e2:3a:35:4a:1e:dc:d1:30:
52:b8:d6:23
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx
MkE1NTFDMzgwHhcNMjMwMzI3MTMxNTU2WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDIxOTcwYi02ZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0MOx8ucXATvWh5MW44Clwpdg4xESG6WBprn4iMTiGglC6ODmFT3iNxI8hH2E
YVwg40YeV72l8hyEcoxbAuuGzCYmBCZ18CxKYYV1ofab8bpYxH/4KeetTYmHPca4
TOm78Wd5B060hYmSUwEIBwf2gmy/IEnujkDNz/jo0x3Bbt+4+fVwmUoVH61oG3Js
QXpQnp562U31KoTqp55ryzH3v9Hj1MErfAtyo6c3HqAdOgBvJACOVwVeAyfqiPY2
XlHtj0AiM8Lphez3OoGlOKPLKQUdyw8dUn5Hzbbt3sl95RASKmxLovtKCjO51VZl
UnYUUxmcUX8H/eon4XZLds+7LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCDd87qN
r+KpQdTJXG1ex1HIBHuiMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF
MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODIwNDcvMzNBREIzRTY2RTAwMTFFQzlBNjNCRDZBQzRGOUFFMDIvODFBNEY4RUND
Q0ExMTFFRDhFNUQ3RTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsw4wDQYJKoZIhvcNAQELBQADggEBAAP+DEmnuaTpA79Z
sm+7NAx/7WihMlw6eQX1XRJjkz0mY1ciw91E9oh7zR/oZnbm9s/zFRfUt4VGwvw0
84CEnexyuX7YFSkBmZqAx92pocxCrNIQGVh9iGZ/TuuihrEV1TdUpZUIPoNcLbyx
D0ZdYVEEsiW/87dMa0iiug00UkvHBlM4jlllL9v8Hbv23oNzoxHK0q3PRKeQvDzl
u3mf+r3OsZya+O2jp3kuRMk50ZXoDVK2RWptqM2449QFQ/O2Fb5BgJzrxz83ChXH
8Mq3PWAJyJOBmchlZc/HFysX9yRVrvS3KF7/3WezcuRxc+1qRW+JKGziOjVKHtzR
MFK41iM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org