Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/B50867848DBA11EEB52CED5EC4F9AE02.roa
File: B50867848DBA11EEB52CED5EC4F9AE02.roa (raw, json)
Hash identifier: 1Be2UBsbXTer/5D5M4sjWCPJDrMHWMHm8beqzQpF3eE=
Subject key identifier: AB:EA:8D:0D:CA:A3:31:07:AF:32:77:67:70:09:1B:3B:39:30:AB:BC
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 07AB
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/B50867848DBA11EEB52CED5EC4F9AE02.roa
Signing time: Tue 28 Nov 2023 06:56:52 +0000
ROA not before: Tue 28 Nov 2023 06:56:52 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Nov 28 06:56:52 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65658f33-da19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:b1:7d:38:c5:bf:ef:0e:ab:68:3b:8f:f1:
78:78:84:b3:d5:fd:c8:03:dd:f8:1a:ad:35:a3:cd:
c1:fe:60:80:fc:d2:ed:f7:3c:e7:b7:c6:7d:d6:42:
87:80:02:37:82:13:49:c9:c3:6a:fe:06:42:7f:98:
fb:e2:df:cc:95:7c:ae:36:bd:af:55:d3:01:70:cb:
83:8b:1e:2d:8c:e0:b3:f4:69:38:6d:e4:95:1d:9a:
58:c5:0f:01:6c:31:a6:60:ac:4f:aa:33:b8:2c:6e:
ea:f2:c1:29:43:f9:42:54:a0:a6:6b:61:33:8b:db:
e3:db:2d:6f:96:b4:2d:74:ca:f1:d9:6a:6d:0f:ef:
85:c5:8c:17:ac:fa:65:58:db:d2:32:1c:b2:ef:db:
12:ee:f9:58:3a:cb:db:72:f2:d8:6d:ff:88:e5:a8:
e9:9d:da:8d:05:89:12:38:7e:2c:70:df:2e:97:f3:
38:12:22:f1:2a:5e:1a:86:a3:bf:d2:3b:f1:7f:4c:
f4:ed:a7:5f:15:b4:c9:cb:6c:60:d1:fc:d3:43:99:
4c:c5:98:e3:8a:cd:42:e0:6b:39:10:d5:74:59:c2:
15:ad:17:2d:f4:31:fd:c4:c5:e9:93:c5:b9:73:f0:
56:21:d3:11:85:00:67:63:a8:76:8a:b7:fd:fe:7c:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EA:8D:0D:CA:A3:31:07:AF:32:77:67:70:09:1B:3B:39:30:AB:BC
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/B50867848DBA11EEB52CED5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
10:61:60:d2:6c:18:34:2d:fd:7a:13:a0:7d:82:46:0c:17:c8:
22:1d:71:7d:89:04:42:f6:20:17:75:86:bf:23:12:de:f5:ca:
35:d2:78:55:a8:d6:5c:3f:7c:3d:74:13:fa:16:75:c8:42:5d:
39:dc:ad:69:6a:b5:11:7d:c2:5c:d0:27:02:c2:61:e1:f6:d1:
0a:5e:cc:d7:14:3a:d7:10:f6:aa:85:27:0d:8b:3e:a9:0e:f8:
71:c7:da:d9:0a:a3:10:2a:82:b8:30:3d:56:96:5e:d6:8f:ad:
57:a3:cc:1a:79:7a:0d:7d:da:59:fb:76:85:7d:62:a4:a5:b5:
a8:ec:13:68:cd:53:5e:4c:77:bb:de:0a:67:2f:ce:2b:7c:d6:
78:24:6e:85:ec:b1:cf:0a:dd:56:f8:ea:01:0f:08:c0:9f:18:
8a:b6:bd:58:60:98:eb:fc:e6:45:c2:f4:08:30:66:bc:ad:8f:
b0:d0:05:5f:22:e9:7e:c8:50:11:bf:d6:6e:38:57:4d:37:44:
b8:1d:a5:59:26:9d:c0:5a:6b:ab:8d:83:d0:82:0d:07:78:4d:
ff:ed:29:45:a3:95:06:46:f9:84:4e:fe:42:69:46:e5:04:88:
27:5b:f5:88:c0:5a:82:08:24:5e:92:2e:1d:d8:37:63:77:a5:
00:7a:52:23
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjMxMTI4MDY1NjUyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY1OGYzMy1kYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy76xfTjFv+8Oq2g7j/F4eISz1f3IA934Gq01o83B/mCA/NLt9zznt8Z91kKH
gAI3ghNJycNq/gZCf5j74t/MlXyuNr2vVdMBcMuDix4tjOCz9Gk4beSVHZpYxQ8B
bDGmYKxPqjO4LG7q8sEpQ/lCVKCma2Ezi9vj2y1vlrQtdMrx2WptD++FxYwXrPpl
WNvSMhyy79sS7vlYOsvbcvLYbf+I5ajpndqNBYkSOH4scN8ul/M4EiLxKl4ahqO/
0jvxf0z07adfFbTJy2xg0fzTQ5lMxZjjis1C4Gs5ENV0WcIVrRct9DH9xMXpk8W5
c/BWIdMRhQBnY6h2irf9/nwTmwIDAQABo4IDWTCCA1UwHQYDVR0OBBYEFKvqjQ3K
ozEHrzJ3Z3AJGzs5MKu8MB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvQjUwODY3ODQ4
REJBMTFFRUI1MkNFRDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgeIGCCsGAQUFBwEHAQH/
BIHSMIHPMIGpBAIAATCBogMEAy11yAMEAi1+oAMEAmcYvDAMAwQCZznsAwQDZznw
AwQCZ0bQAwQCZ+GwAwQCZ/QEAwQBlmsKAwQCloF8AwQEyo5AAwQAyo5RAwQAyo5T
MAwDBADKjlUDBAPKjlAwDAMEAMqOWQMEAcqOXDAMAwQAyo5fAwQCyo5oAwQAyo5u
AwQCyo5wMAwDBAHKjnYDBADKjngwDAMEAMqOewMEB8qOADAhBAIAAjAbMBADBQck
BjyAAwcAJAY8gAAIAwcCJAY8gAQAMA0GCSqGSIb3DQEBCwUAA4IBAQAQYWDSbBg0
Lf16E6B9gkYMF8giHXF9iQRC9iAXdYa/IxLe9co10nhVqNZcP3w9dBP6FnXIQl05
3K1parURfcJc0CcCwmHh9tEKXszXFDrXEPaqhScNiz6pDvhxx9rZCqMQKoK4MD1W
ll7Wj61Xo8waeXoNfdpZ+3aFfWKkpbWo7BNozVNeTHe73gpnL84rfNZ4JG6F7LHP
Ct1W+OoBDwjAnxiKtr1YYJjr/OZFwvQIMGa8rY+w0AVfIul+yFARv9ZuOFdNN0S4
HaVZJp3AWmurjYPQgg0HeE3/7SlFo5UGRvmETv5CaUblBIgnW/WIwFqCCCReki4d
2Ddjd6UAelIj
-----END CERTIFICATE-----
Generated at Tue Nov 28 08:11:42 2023 by rpki-client on console-ams.rpki-client.org