Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C726CC69B0411EEA7ED4162C4F9AE02.roa
File: 0C726CC69B0411EEA7ED4162C4F9AE02.roa (raw, json)
Hash identifier: FwHst8i1d8QPOXIrOg3I9iZMjrfDAAGEPS1gwtoFWhY=
Subject key identifier: 31:21:B8:5A:46:AC:14:85:9F:7D:B9:7C:1B:D5:8A:48:34:5C:1B:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7FF5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C726CC69B0411EEA7ED4162C4F9AE02.roa
Signing time: Fri 15 Dec 2023 04:40:19 +0000
ROA not before: Fri 15 Dec 2023 04:40:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132974
IP address blocks: 43.230.36.0/22 maxlen: 24
103.72.6.0/23 maxlen: 24
103.77.186.0/23 maxlen: 24
103.84.212.0/22 maxlen: 24
103.243.54.0/24 maxlen: 24
103.243.55.0/24 maxlen: 24
2001:df4:b000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Apr 2024 11:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32757 (0x7ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 15 04:40:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657bd8b2-1c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:08:91:69:d4:fb:07:44:85:74:ee:b7:b0:
fa:ba:68:72:4f:aa:04:5c:e0:bd:26:7e:63:c5:fa:
1c:e5:cc:1d:cc:a1:6f:77:da:3b:4b:6b:1c:bc:f9:
d3:7f:a8:d8:9d:76:b4:2d:1f:f9:17:29:15:f1:db:
0a:5d:9d:67:70:35:e9:c8:4d:01:67:75:ab:04:b0:
32:c6:cf:54:f3:8e:5e:72:4c:9f:12:c9:06:75:6a:
bb:71:f1:bb:b5:90:0a:26:b8:ba:d1:31:ad:20:01:
bc:5f:13:6a:1c:8a:a1:77:c8:78:3a:c4:61:8a:f2:
f5:7f:cc:6c:5c:19:e3:3a:0e:ef:52:5f:c8:83:10:
4b:49:b7:c3:45:1a:21:02:99:c8:70:47:40:ef:7e:
3c:29:fc:d2:3e:ec:06:15:87:0d:14:cb:e7:bd:c7:
1d:62:4c:f1:4e:98:d6:82:81:ba:38:03:ae:40:f0:
a6:5b:d9:61:1a:c5:6b:61:84:8b:28:23:b8:9a:d3:
37:a5:45:e0:5b:15:8d:1b:f3:3e:52:bd:a1:f5:04:
82:fb:9a:ca:50:40:f5:a2:d8:d6:4a:8c:cc:7b:2f:
5a:b8:fc:ed:89:66:c8:3b:a5:ff:00:0c:5a:05:29:
84:69:91:8f:c0:1c:23:09:64:1e:f4:b4:22:d7:bd:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:B8:5A:46:AC:14:85:9F:7D:B9:7C:1B:D5:8A:48:34:5C:1B:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C726CC69B0411EEA7ED4162C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.36.0/22
103.72.6.0/23
103.77.186.0/23
103.84.212.0/22
103.243.54.0/23
IPv6:
2001:df4:b000::/48
Signature Algorithm: sha256WithRSAEncryption
b8:7e:36:76:5b:a9:1d:6f:82:ee:5e:8a:2f:d5:ed:b3:f4:32:
a9:be:61:71:10:d1:4d:2c:88:f8:e0:d4:06:74:bf:c6:1c:5f:
c0:08:da:8f:da:6b:a7:fb:76:4c:5f:e3:29:1e:ab:5b:48:e5:
0e:3f:23:0c:8f:4c:b4:15:39:72:44:27:6f:af:fb:41:9b:86:
d1:9d:c6:50:74:f9:b6:a8:e8:29:fa:5d:ce:f6:01:b6:07:dc:
8e:25:81:dc:7a:4e:30:35:dc:dc:51:1e:e6:e7:2b:4e:78:37:
41:e0:1c:44:c8:96:1d:62:83:97:5d:d6:1a:c1:61:3c:6c:62:
68:13:a5:20:8c:71:ac:d0:69:81:7c:21:68:38:5e:42:3a:d5:
d5:fe:51:7f:b2:18:a8:a3:fd:52:97:ca:a0:ca:29:5a:65:84:
bf:77:e5:30:71:2c:77:71:92:23:37:be:5a:be:eb:07:be:c0:
a0:dd:49:d5:ca:55:15:a6:8f:e2:6e:16:75:1e:da:a2:59:5c:
a7:18:3b:34:ff:62:90:33:aa:f8:56:f0:bf:9f:ba:86:9f:6c:
c8:1f:8d:9d:8a:f1:ec:d8:d2:ea:4c:c8:7a:e9:91:5a:50:62:
b2:d1:fd:71:98:4e:28:15:83:a4:4c:79:86:54:5d:9c:83:12:
39:59:96:4a
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgICf/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMjE1MDQ0MDE5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTdiZDhiMi0xYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4YEIkWnU+wdEhXTut7D6umhyT6oEXOC9Jn5jxfoc5cwdzKFvd9o7S2scvPnT
f6jYnXa0LR/5FykV8dsKXZ1ncDXpyE0BZ3WrBLAyxs9U845eckyfEskGdWq7cfG7
tZAKJri60TGtIAG8XxNqHIqhd8h4OsRhivL1f8xsXBnjOg7vUl/IgxBLSbfDRRoh
ApnIcEdA7348KfzSPuwGFYcNFMvnvccdYkzxTpjWgoG6OAOuQPCmW9lhGsVrYYSL
KCO4mtM3pUXgWxWNG/M+Ur2h9QSC+5rKUED1otjWSozMey9auPztiWbIO6X/AAxa
BSmEaZGPwBwjCWQe9LQi173L+wIDAQABo4ICvjCCArowHQYDVR0OBBYEFDEhuFpG
rBSFn325fBvVikg0XBtYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEM3MjZDQzY5
QjA0MTFFRUE3RUQ0MTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E
OTA3MCQEAgABMB4DBAIr5iQDBAFnSAYDBAFnTboDBAJnVNQDBAFn8zYwDwQCAAIw
CQMHACABDfSwADANBgkqhkiG9w0BAQsFAAOCAQEAuH42dlupHW+C7l6KL9Xts/Qy
qb5hcRDRTSyI+ODUBnS/xhxfwAjaj9prp/t2TF/jKR6rW0jlDj8jDI9MtBU5ckQn
b6/7QZuG0Z3GUHT5tqjoKfpdzvYBtgfcjiWB3HpOMDXc3FEe5ucrTng3QeAcRMiW
HWKDl13WGsFhPGxiaBOlIIxxrNBpgXwhaDheQjrV1f5Rf7IYqKP9UpfKoMopWmWE
v3flMHEsd3GSIze+Wr7rB77AoN1J1cpVFaaP4m4WdR7aollcpxg7NP9ikDOq+Fbw
v5+6hp9syB+NnYrx7NjS6kzIeumRWlBistH9cZhOKBWDpEx5hlRdnIMSOVmWSg==
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:49:14 2024 by rpki-client on console-ams.rpki-client.org