Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/1B89820E029711EEB8410455C4F9AE02.roa
File: 1B89820E029711EEB8410455C4F9AE02.roa (raw, json)
Hash identifier: AGau+tPS8b4DXZWi676BaAA0855EnGqkoVzVYSJCyQg=
Subject key identifier: 78:16:1B:1E:7B:F8:07:E9:DC:2E:67:5B:BE:BD:A5:3D:AC:55:F0:97
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: D4
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/1B89820E029711EEB8410455C4F9AE02.roa
Signing time: Thu 27 Jun 2024 05:47:16 +0000
ROA not before: Thu 27 Jun 2024 05:47:16 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 140612
IP address blocks: 103.139.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 18:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Jun 27 05:47:16 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667cfce4-047a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:2b:40:4f:52:bc:fc:a6:72:eb:f5:cc:5f:
40:31:5b:03:1b:ca:20:63:be:90:eb:a7:14:20:5a:
6a:3a:c2:70:26:36:9c:9a:1c:b8:67:9f:4d:d6:08:
a4:07:ab:91:b9:32:24:0f:3d:54:8e:1f:96:ee:8f:
35:a5:ad:39:b1:80:49:5c:34:7f:bb:48:34:c2:ae:
c0:39:1f:24:38:f9:65:39:ab:11:fa:ca:6d:1b:8b:
f4:e8:1d:f6:dd:ef:8a:69:52:01:1e:e0:3e:a6:59:
7a:c0:0f:77:58:81:00:b3:e2:84:18:47:c2:97:54:
b0:68:87:50:f9:75:cc:50:5a:dc:07:6f:d9:d9:3f:
06:57:f5:57:00:f3:54:73:cf:70:5b:26:73:c4:28:
4f:b2:f3:8a:27:5d:7a:97:11:43:54:26:40:22:3e:
94:9e:31:9a:82:51:64:b7:bc:e4:95:d6:8f:15:13:
73:8a:cc:7e:cf:c0:d5:ce:ba:0b:8a:71:38:e5:27:
bf:bc:44:30:ed:67:24:5a:c8:5b:51:f7:1c:62:b6:
53:6f:07:06:0c:d9:57:63:c5:64:a9:e8:47:11:5a:
c0:19:24:23:6e:cd:e3:d1:8f:9b:73:07:04:14:05:
3e:e9:04:c2:03:28:b4:d3:28:3b:f7:56:ae:0e:84:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:1B:1E:7B:F8:07:E9:DC:2E:67:5B:BE:BD:A5:3D:AC:55:F0:97
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/1B89820E029711EEB8410455C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.53.0/24
Signature Algorithm: sha256WithRSAEncryption
86:98:10:af:48:91:f7:1a:2f:43:30:aa:ca:ff:34:c6:1d:80:
d7:19:1d:69:b0:50:25:30:37:39:43:fd:25:e0:bc:d9:8c:b3:
ee:31:c8:7a:54:c7:76:35:21:b0:9d:c7:93:f4:15:45:6e:b7:
35:31:f9:f7:4d:18:ba:06:5a:19:8a:2c:3f:ab:61:6f:cc:d1:
36:66:3d:10:dc:9a:d1:4e:a1:6f:d8:c9:33:c5:aa:32:eb:fe:
34:7e:03:d6:26:8b:61:4e:5e:a7:f6:56:fe:ce:3f:98:e5:1a:
a4:b3:94:22:cf:2a:bd:85:eb:e3:b2:30:a0:fc:1f:d5:cc:95:
49:e0:28:7c:2b:a2:f0:ff:5a:01:58:8f:ea:b3:bb:56:fd:85:
92:35:86:da:e2:17:44:54:b2:9b:1c:a7:ee:28:1c:1a:6d:10:
42:34:3e:1a:23:68:91:70:9a:59:ca:e7:51:de:74:d6:1f:b0:
fd:c4:77:62:99:35:9b:d5:05:c5:75:57:f7:42:f4:d9:fc:82:
3a:6b:41:3f:b8:a0:fc:a3:94:a1:f6:30:51:02:28:e5:58:e6:
5c:e2:29:0e:4a:bb:cc:b9:f6:f0:19:04:2d:08:25:d0:76:de:
7f:25:4b:cb:9c:58:49:b3:b0:78:a1:b5:ef:0b:79:83:55:f9:
0d:c9:95:8a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE
NTEwM0YwOTAwHhcNMjQwNjI3MDU0NzE2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdjZmNlNC0wNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzf8rQE9SvPymcuv1zF9AMVsDG8ogY76Q66cUIFpqOsJwJjacmhy4Z59N1gik
B6uRuTIkDz1Ujh+W7o81pa05sYBJXDR/u0g0wq7AOR8kOPllOasR+sptG4v06B32
3e+KaVIBHuA+pll6wA93WIEAs+KEGEfCl1SwaIdQ+XXMUFrcB2/Z2T8GV/VXAPNU
c89wWyZzxChPsvOKJ116lxFDVCZAIj6UnjGaglFkt7zkldaPFRNzisx+z8DVzroL
inE45Se/vEQw7WckWshbUfccYrZTbwcGDNlXY8VkqehHEVrAGSQjbs3j0Y+bcwcE
FAU+6QTCAyi00yg791auDoRvjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHgWGx57
+Afp3C5nW769pT2sVfCXMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2
N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU4OTYvRTEyMjcyN0NGNjdDMTFFREExQzUzOTg2QzRGOUFFMDIvMUI4OTgyMEUw
Mjk3MTFFRUI4NDEwNDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnizUwDQYJKoZIhvcNAQELBQADggEBAIaYEK9IkfcaL0Mw
qsr/NMYdgNcZHWmwUCUwNzlD/SXgvNmMs+4xyHpUx3Y1IbCdx5P0FUVutzUx+fdN
GLoGWhmKLD+rYW/M0TZmPRDcmtFOoW/YyTPFqjLr/jR+A9Ymi2FOXqf2Vv7OP5jl
GqSzlCLPKr2F6+OyMKD8H9XMlUngKHwrovD/WgFYj+qzu1b9hZI1htriF0RUspsc
p+4oHBptEEI0PhojaJFwmlnK51HedNYfsP3Ed2KZNZvVBcV1V/dC9Nn8gjprQT+4
oPyjlKH2MFECKOVY5lziKQ5Ku8y59vAZBC0IJdB23n8lS8ucWEmzsHihte8LeYNV
+Q3JlYo=
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:22:30 2024 by rpki-client on console-ams.rpki-client.org