Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/C20CAC2C6C0511EFAC661E0FC4F9AE02.roa
File: C20CAC2C6C0511EFAC661E0FC4F9AE02.roa (raw, json)
Hash identifier: gDxyyKWR4DFNGeOVA/HlAfyMWxTfcYUOV29Yt36LZlM=
Subject key identifier: 34:61:34:2D:38:A7:AD:71:2B:F7:CD:99:1A:10:52:B0:C0:05:1A:C6
Certificate issuer: /CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Certificate serial: 5C
Authority key identifier: 42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/C20CAC2C6C0511EFAC661E0FC4F9AE02.roa
Signing time: Fri 06 Sep 2024 04:09:06 +0000
ROA not before: Fri 06 Sep 2024 04:09:06 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 4608
IP address blocks: 203.176.189.0/24 maxlen: 25
Validation: Failed, certificate revoked on Wed 20 Nov 2024 02:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Validity
Not Before: Sep 6 04:09:06 2024 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=66da8062-6248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:c4:18:1e:0a:df:18:12:8a:5b:82:e6:e2:
76:3c:30:4f:eb:05:5a:1f:95:e9:67:28:e9:33:2f:
7e:79:d7:a7:f6:da:20:e4:80:44:75:8f:ec:6a:21:
dc:5d:9a:5a:42:a7:82:d2:64:09:37:04:05:25:15:
ea:f2:01:b1:88:86:3d:3b:8c:d8:c1:db:12:4c:8e:
d3:b9:9f:6b:14:aa:90:79:22:91:89:a1:50:7f:7b:
1b:f0:cb:c1:15:2b:b7:61:f9:e1:09:42:98:41:6c:
8d:a1:ae:c7:e6:0e:6e:56:e6:c8:d9:92:1f:4e:b7:
8a:e0:37:9b:4b:16:f5:5d:c8:96:46:62:18:04:0e:
50:a6:11:b0:c4:18:0a:e6:a0:ef:09:76:ca:b4:c4:
4b:14:54:c8:9d:8a:b7:7f:32:e2:ce:1c:4e:3a:6b:
e5:fe:33:95:15:b2:a6:27:03:8c:2e:60:8d:2a:95:
49:02:28:e2:13:ec:bd:8b:b5:65:f7:16:b6:52:4f:
42:73:3c:59:7f:5a:4e:04:76:d9:9f:5c:e1:66:c8:
79:ce:d1:25:5d:25:39:9e:fa:9d:90:d7:8c:22:bc:
0d:04:b4:7d:d9:fa:6a:32:bb:88:f9:c5:34:9d:3b:
f6:81:fa:09:e7:81:17:ad:9b:4e:f4:b6:b0:95:f9:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:34:2D:38:A7:AD:71:2B:F7:CD:99:1A:10:52:B0:C0:05:1A:C6
X509v3 Authority Key Identifier:
keyid:42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/C20CAC2C6C0511EFAC661E0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a6:9e:8a:e5:31:71:c3:af:24:9d:5d:e2:3a:0a:2e:84:b8:
d1:45:e3:b2:b9:05:f9:ce:ee:4c:ac:a2:fd:33:47:5d:df:f1:
00:03:0a:88:d3:89:b1:02:cf:75:b3:05:f5:e4:11:70:e9:77:
5f:f9:8d:0e:74:29:95:6c:40:eb:09:9e:6f:00:80:b8:81:87:
b5:e4:e2:d5:2f:bc:63:1e:f2:92:4d:23:42:8e:d8:1a:a5:9f:
44:f7:70:94:84:04:ef:e8:40:84:3b:f6:33:eb:f3:a1:d5:b5:
b5:e1:19:fe:a4:52:10:45:4d:2f:8e:64:68:e7:92:fb:cf:e6:
1e:7b:8c:8f:2e:e8:0b:da:a1:d9:f0:19:8d:32:0d:6e:c5:67:
80:bf:dd:ee:4b:28:28:42:9f:38:b5:31:6b:cd:67:fa:00:e0:
6c:f4:9e:02:3d:ef:ab:d6:66:2f:fe:98:81:6c:1c:a6:c2:cd:
0a:53:26:d7:5c:f5:37:ab:7b:81:1c:d5:50:05:10:1c:8f:6c:
87:e6:ae:1c:a2:31:0d:02:15:41:de:25:a4:48:9a:47:29:c8:
39:70:a8:7f:42:91:d2:e3:f3:fe:46:9b:4d:30:4d:7a:6e:b4:
cc:39:7f:5a:08:02:48:2f:21:ad:18:61:c4:06:93:f0:2c:ae:
14:10:d6:16
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QzI4NzExMC8GA1UEBRMoNDIzOTExN0EyNTU4MkQwMDY3REU0RDBDRURBNUFCQTVD
QzdFMzU2OTAeFw0yNDA5MDYwNDA5MDZaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZGE4MDYyLTYyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpT8QYHgrfGBKKW4Lm4nY8ME/rBVoflelnKOkzL35516f22iDkgER1j+xqIdxd
mlpCp4LSZAk3BAUlFeryAbGIhj07jNjB2xJMjtO5n2sUqpB5IpGJoVB/exvwy8EV
K7dh+eEJQphBbI2hrsfmDm5W5sjZkh9Ot4rgN5tLFvVdyJZGYhgEDlCmEbDEGArm
oO8Jdsq0xEsUVMidird/MuLOHE46a+X+M5UVsqYnA4wuYI0qlUkCKOIT7L2LtWX3
FrZST0JzPFl/Wk4EdtmfXOFmyHnO0SVdJTme+p2Q14wivA0EtH3Z+moyu4j5xTSd
O/aB+gnngRetm070trCV+WTfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNGE0LTin
rXEr982ZGhBSsMAFGsYwHwYDVR0jBBgwFoAUQjkReiVYLQBn3k0M7aWrpcx+NWkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzY4RDg4MTg0MjQ4
NTExRUY5NDIzNjU3MkM0RjlBRTAyL1Fqa1JlaVZZTFFCbjNrME03YVdycGN4LU5X
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUWprUmVpVllMUUJuM2swTTdhV3JwY3gtTldrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzI4Ny82OEQ4ODE4NDI0ODUxMUVGOTQyMzY1NzJDNEY5QUUwMi9DMjBDQUMyQzZD
MDUxMUVGQUM2NjFFMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMuwvTANBgkqhkiG9w0BAQsFAAOCAQEANKaeiuUxccOvJJ1d
4joKLoS40UXjsrkF+c7uTKyi/TNHXd/xAAMKiNOJsQLPdbMF9eQRcOl3X/mNDnQp
lWxA6wmebwCAuIGHteTi1S+8Yx7ykk0jQo7YGqWfRPdwlIQE7+hAhDv2M+vzodW1
teEZ/qRSEEVNL45kaOeS+8/mHnuMjy7oC9qh2fAZjTINbsVngL/d7ksoKEKfOLUx
a81n+gDgbPSeAj3vq9ZmL/6YgWwcpsLNClMm11z1N6t7gRzVUAUQHI9sh+auHKIx
DQIVQd4lpEiaRynIOXCof0KR0uPz/kabTTBNem60zDl/WggCSC8hrRhhxAaT8Cyu
FBDWFg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 04:42:25 2024 by rpki-client on console-ams.rpki-client.org