Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/C43CDF6C7A0C11EE9317F083C4F9AE02.roa
File: C43CDF6C7A0C11EE9317F083C4F9AE02.roa (raw, json)
Hash identifier: kEXapiBl0eQo11PEhn7wjrX2iX9fc+f3vHEfKaKEGcs=
Subject key identifier: 95:30:63:FC:A0:E9:1D:34:78:1F:44:9B:E2:97:D7:5A:BC:BC:3D:09
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 06D2
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/C43CDF6C7A0C11EE9317F083C4F9AE02.roa
Signing time: Fri 03 Nov 2023 05:50:40 +0000
ROA not before: Fri 03 Nov 2023 05:50:40 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Nov 3 05:50:40 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65448a30-5553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:16:fc:e7:b3:6c:99:8d:e7:ae:be:5b:fd:
95:0e:bf:15:f7:ca:09:aa:79:01:a2:df:17:29:38:
ea:29:63:06:24:d5:c2:d0:90:1d:b5:cb:21:0e:b5:
f4:b3:d0:4a:6e:42:9c:5d:c3:95:94:57:61:3a:06:
36:00:22:f2:ea:dc:45:6b:9b:67:de:b4:76:d6:e5:
66:e9:17:16:b4:8b:5d:8b:67:9b:25:72:91:2b:a7:
7e:b4:19:65:23:30:d0:84:ef:0d:88:09:fe:07:95:
40:17:41:9a:29:a0:11:2d:ac:ab:0c:97:a2:bb:5f:
eb:44:ff:af:6a:1d:83:00:4d:af:92:79:1d:92:e9:
c1:77:a0:e9:0c:70:b3:54:33:2a:5f:e5:3a:95:2c:
c3:05:22:7e:cd:f9:51:4f:f1:87:51:98:c3:b2:68:
bf:74:55:75:48:b3:d2:06:ad:cc:e4:90:cf:0e:46:
53:51:fc:5c:73:26:7d:24:29:38:87:96:01:d0:18:
20:15:f1:ec:0d:0d:45:7e:ca:8c:d1:fd:79:3c:a2:
fb:d0:c5:d0:31:8a:35:59:08:3b:eb:ce:4a:61:bf:
58:03:50:b1:94:41:d1:3b:19:71:13:b9:5c:61:c9:
8b:5d:50:fb:b3:df:ae:34:7f:c4:02:47:c2:a9:40:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:63:FC:A0:E9:1D:34:78:1F:44:9B:E2:97:D7:5A:BC:BC:3D:09
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/C43CDF6C7A0C11EE9317F083C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
73:f6:3b:ce:4d:45:37:0c:cb:64:b9:b5:46:07:0c:9a:e1:3c:
05:62:05:a9:7c:ad:2a:d6:35:09:7d:51:e7:31:f4:c9:72:ec:
8f:4e:b7:4e:5a:12:a8:86:3c:33:dc:2c:ca:90:0a:c8:1a:32:
26:1e:42:bc:42:c7:41:49:1c:22:5a:b6:56:2e:e5:bc:64:17:
b9:3a:e9:62:04:70:b7:7b:9d:50:b9:3a:3b:e7:f1:09:f7:5b:
63:c6:85:de:89:7b:2e:91:36:0c:91:5f:07:74:67:c5:9f:82:
46:6a:7d:dd:08:d2:cc:8e:30:4a:06:53:ed:ab:62:cc:22:a2:
a1:fa:cd:13:71:eb:5d:55:ce:53:34:87:cd:2d:91:6c:8a:bc:
eb:ef:f8:9f:93:df:90:a2:23:fc:2d:ef:30:39:bf:f7:0e:f4:
94:09:32:b8:7f:bc:b2:03:f4:b6:bd:6f:d4:5a:6a:22:ed:3d:
27:30:c3:6c:d4:b6:84:26:53:03:a1:22:d7:ae:79:03:dd:72:
af:52:84:9c:4c:44:e4:bd:bc:53:40:89:cf:37:c3:a2:8c:14:
3b:32:9f:20:2f:49:3c:5b:98:cf:75:14:7e:4d:07:c0:18:c7:
c2:6d:aa:46:33:10:29:a1:f5:e1:13:17:4f:7e:d4:2f:fd:74:
5d:0a:a7:af
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjMxMTAzMDU1MDQwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ0OGEzMC01NTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvKgW/OezbJmN566+W/2VDr8V98oJqnkBot8XKTjqKWMGJNXC0JAdtcshDrX0
s9BKbkKcXcOVlFdhOgY2ACLy6txFa5tn3rR21uVm6RcWtItdi2ebJXKRK6d+tBll
IzDQhO8NiAn+B5VAF0GaKaARLayrDJeiu1/rRP+vah2DAE2vknkdkunBd6DpDHCz
VDMqX+U6lSzDBSJ+zflRT/GHUZjDsmi/dFV1SLPSBq3M5JDPDkZTUfxccyZ9JCk4
h5YB0BggFfHsDQ1FfsqM0f15PKL70MXQMYo1WQg7685KYb9YA1CxlEHROxlxE7lc
YcmLXVD7s9+uNH/EAkfCqUAFSQIDAQABo4IDWTCCA1UwHQYDVR0OBBYEFJUwY/yg
6R00eB9Em+KX11q8vD0JMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvQzQzQ0RGNkM3
QTBDMTFFRTkzMTdGMDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgeIGCCsGAQUFBwEHAQH/
BIHSMIHPMIGpBAIAATCBogMEAy11yAMEAi1+oAMEAmcYvDAMAwQCZznsAwQDZznw
AwQCZ0bQAwQCZ+GwAwQCZ/QEAwQBlmsKAwQCloF8AwQEyo5AAwQAyo5RAwQAyo5T
MAwDBADKjlUDBAPKjlAwDAMEAMqOWQMEAcqOXDAMAwQAyo5fAwQCyo5oAwQAyo5u
AwQCyo5wMAwDBAHKjnYDBADKjngwDAMEAMqOewMEB8qOADAhBAIAAjAbMBADBQck
BjyAAwcAJAY8gAAIAwcCJAY8gAQAMA0GCSqGSIb3DQEBCwUAA4IBAQBz9jvOTUU3
DMtkubVGBwya4TwFYgWpfK0q1jUJfVHnMfTJcuyPTrdOWhKohjwz3CzKkArIGjIm
HkK8QsdBSRwiWrZWLuW8ZBe5OuliBHC3e51QuTo75/EJ91tjxoXeiXsukTYMkV8H
dGfFn4JGan3dCNLMjjBKBlPtq2LMIqKh+s0TcetdVc5TNIfNLZFsirzr7/ifk9+Q
oiP8Le8wOb/3DvSUCTK4f7yyA/S2vW/UWmoi7T0nMMNs1LaEJlMDoSLXrnkD3XKv
UoScTETkvbxTQInPN8OijBQ7Mp8gL0k8W5jPdRR+TQfAGMfCbapGMxApofXhExdP
ftQv/XRdCqev
-----END CERTIFICATE-----
Generated at Wed Nov 22 17:58:47 2023 by rpki-client on console-fra.rpki-client.org