Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/DF5071B2951C11EE8F7EBD4EC4F9AE02.roa
File: DF5071B2951C11EE8F7EBD4EC4F9AE02.roa (raw, json)
Hash identifier: aBfIMa0MLVUB+1F7KSwPd+l8IYCjrlZY2l1zfmljXII=
Subject key identifier: 25:D5:41:E9:74:22:20:54:9B:9D:0A:84:10:80:EC:0A:4C:AE:3D:21
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 46
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/DF5071B2951C11EE8F7EBD4EC4F9AE02.roa
Signing time: Thu 07 Dec 2023 16:22:54 +0000
ROA not before: Thu 07 Dec 2023 16:22:54 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 395839
IP address blocks: 103.115.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Dec 7 16:22:54 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6571f15d-e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:50:2e:bc:53:2a:df:2c:e0:ca:cd:8b:07:
cd:2a:01:2a:e1:97:4e:08:68:b2:ed:f8:53:c5:46:
d8:22:07:2d:d3:2c:cf:b2:e1:92:6f:3e:77:fc:a7:
e3:76:2d:15:04:95:cb:80:ea:a6:fa:75:44:8b:0a:
7b:71:38:50:f3:d1:49:a4:2d:2e:af:71:2e:e9:7f:
f8:a7:39:ad:c4:cb:46:40:7b:71:37:99:b5:09:2e:
ad:e0:76:1d:5c:6f:a4:0a:d9:5e:fe:39:8f:60:45:
19:fc:00:f0:43:c4:84:a9:b8:aa:e7:02:6c:ea:ec:
a9:78:84:f4:79:ed:19:07:bb:ca:ac:c2:a0:5e:be:
ba:86:1f:9d:a8:35:94:00:fb:25:c5:53:0b:77:99:
d0:64:61:a9:5d:ea:57:ce:a3:1a:42:67:81:af:36:
62:e2:30:e2:47:32:21:96:73:8c:06:fd:a6:98:99:
f0:a8:bc:5d:ed:a8:45:2a:4a:3d:3c:51:7c:33:07:
41:c7:cc:a7:bd:80:25:19:8e:ae:48:45:24:b6:0e:
b6:f9:5f:55:ca:d8:70:73:b7:28:a0:db:3a:81:ab:
0c:e3:c5:5e:98:4f:d7:17:a7:70:a5:64:8e:95:92:
61:35:8d:e5:be:d7:3d:96:29:b5:89:4d:8e:4b:63:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:41:E9:74:22:20:54:9B:9D:0A:84:10:80:EC:0A:4C:AE:3D:21
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/DF5071B2951C11EE8F7EBD4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:97:36:42:86:a8:bf:d9:be:2c:be:31:45:89:5f:40:99:7d:
41:5d:4f:0c:68:be:8e:d2:de:e8:78:21:bf:7e:bc:2b:a5:61:
3b:b7:5d:13:f0:ef:d2:ce:f9:59:81:af:19:78:75:b9:da:48:
49:b5:d3:36:58:5d:bc:d1:89:8f:4e:03:14:a1:03:34:07:5c:
f0:79:c8:fc:b0:c2:c9:5b:9d:6f:0b:2b:db:23:d0:26:c2:7d:
55:ef:a9:e1:99:39:0a:49:2c:76:20:81:dd:6c:c3:d7:61:48:
bf:f3:bb:ed:1e:f8:71:d7:67:5d:29:af:3e:7e:cf:53:9c:44:
3b:e0:17:de:23:2a:be:4f:15:6c:af:d2:bc:0a:99:65:7c:0b:
06:31:f1:b7:8f:09:f7:ff:7b:d5:30:d2:a1:11:35:37:a5:13:
80:18:19:cc:1f:7a:91:b8:57:c4:b1:66:49:8a:e4:c1:d1:f9:
a5:1a:ae:8e:9c:31:d5:1c:87:88:06:8e:a1:e9:b2:1a:b4:a5:
3b:c3:2d:f3:8a:a7:72:78:53:06:b3:34:d4:9c:7a:f8:6a:a5:
0e:9d:c8:a3:d8:5b:76:0c:67:ed:40:f4:ef:6d:61:48:46:f8:
9d:83:d6:ea:88:52:8d:6c:68:f7:c9:56:01:f6:4f:ff:e6:36:
bb:8f:31:eb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QTA1RDExMC8GA1UEBRMoMEY1NDVFNjI3M0Q3Qzk3RTk5OTU0MTFGNzZENUM0RjAw
NkJCNTE4NjAeFw0yMzEyMDcxNjIyNTRaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1NzFmMTVkLWUxZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDi7FAuvFMq3yzgys2LB80qASrhl04IaLLt+FPFRtgiBy3TLM+y4ZJvPnf8p+N2
LRUElcuA6qb6dUSLCntxOFDz0UmkLS6vcS7pf/inOa3Ey0ZAe3E3mbUJLq3gdh1c
b6QK2V7+OY9gRRn8APBDxISpuKrnAmzq7Kl4hPR57RkHu8qswqBevrqGH52oNZQA
+yXFUwt3mdBkYald6lfOoxpCZ4GvNmLiMOJHMiGWc4wG/aaYmfCovF3tqEUqSj08
UXwzB0HHzKe9gCUZjq5IRSS2Drb5X1XK2HBztyig2zqBqwzjxV6YT9cXp3ClZI6V
kmE1jeW+1z2WKbWJTY5LY+sTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJdVB6XQi
IFSbnQqEEIDsCkyuPSEwHwYDVR0jBBgwFoAUD1ReYnPXyX6ZlUEfdtXE8Aa7UYYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMDVEL0MxRUZCMDgwNEUy
NTExRUVBQUFFNkQ0OUM0RjlBRTAyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZ
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRDFSZVluUFh5WDZabFVFZmR0WEU4QWE3VVlZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9ERjUwNzFCMjk1
MUMxMUVFOEY3RUJENEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdzEDANBgkqhkiG9w0BAQsFAAOCAQEALpc2Qoaov9m+LL4x
RYlfQJl9QV1PDGi+jtLe6Hghv368K6VhO7ddE/Dv0s75WYGvGXh1udpISbXTNlhd
vNGJj04DFKEDNAdc8HnI/LDCyVudbwsr2yPQJsJ9Ve+p4Zk5CkksdiCB3WzD12FI
v/O77R74cddnXSmvPn7PU5xEO+AX3iMqvk8VbK/SvAqZZXwLBjHxt48J9/971TDS
oRE1N6UTgBgZzB96kbhXxLFmSYrkwdH5pRqujpwx1RyHiAaOoemyGrSlO8Mt84qn
cnhTBrM01Jx6+GqlDp3Io9hbdgxn7UD0721hSEb4nYPW6ohSjWxo98lWAfZP/+Y2
u48x6w==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:42 2024 by rpki-client on console-ams.rpki-client.org