Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16A616162AE811EEBBD3A926C4F9AE02.roa
File: 16A616162AE811EEBBD3A926C4F9AE02.roa (raw, json)
Hash identifier: DYesh8pDq2C5EwhB8B3YJy/hIjx/I2W1IiF4lXgsoeg=
Subject key identifier: A1:86:86:70:89:19:18:D0:2D:16:2F:5C:F3:6E:72:48:2F:F8:E4:40
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7635
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16A616162AE811EEBBD3A926C4F9AE02.roa
Signing time: Tue 25 Jul 2023 12:38:00 +0000
ROA not before: Tue 25 Jul 2023 12:38:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.121.4.0/23 maxlen: 24
103.147.174.0/23 maxlen: 24
103.148.138.0/23 maxlen: 24
103.155.212.0/24 maxlen: 24
103.155.213.0/24 maxlen: 24
103.157.206.0/23 maxlen: 24
103.157.230.0/24 maxlen: 24
103.157.231.0/24 maxlen: 24
103.171.126.0/23 maxlen: 24
103.174.26.0/24 maxlen: 24
103.174.27.0/24 maxlen: 24
103.176.75.0/24 maxlen: 24
103.177.58.0/23 maxlen: 24
103.177.128.0/24 maxlen: 24
103.177.129.0/24 maxlen: 24
103.182.58.0/24 maxlen: 24
103.182.59.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.204.164.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2001:df5:ff80::/48 maxlen: 48
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30261 (0x7635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 25 12:38:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64bfc227-da7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:57:e1:3e:7c:36:7c:44:f3:c9:a9:46:22:
35:7f:cd:67:60:71:95:ee:6d:b0:54:06:95:4a:a0:
bb:21:78:cd:b5:08:83:d9:3f:55:f0:98:62:f7:3a:
9b:10:aa:cf:26:b5:1e:6e:48:b0:e4:08:59:87:74:
c5:a7:42:af:b1:af:ad:29:e1:c0:e3:c8:2d:ee:4c:
54:6c:2a:d1:82:cc:6f:c8:c2:2f:27:0d:9a:f1:59:
50:36:a1:64:6e:94:9c:d5:c0:3a:cc:23:ca:78:c2:
6b:6d:34:1e:fb:68:cd:8e:1f:39:34:3a:61:38:87:
19:a0:0d:c7:01:ee:d2:b4:82:cc:fa:22:50:11:5f:
91:a4:23:e9:f9:b6:38:fa:db:bc:48:14:cc:cd:70:
56:60:ab:64:35:06:50:44:27:06:4f:28:e7:6f:1c:
29:1a:87:02:0d:69:e3:cb:14:da:27:1b:99:73:94:
ea:f4:02:4c:04:e7:90:c2:6e:24:58:5b:ed:a3:2a:
d7:20:04:73:0d:e3:a5:8e:ea:45:5f:a2:ed:7f:28:
5f:7e:43:a5:7d:a6:8b:0f:d6:e3:6f:57:62:ff:04:
29:35:06:fe:4c:a4:b6:f2:2b:be:79:52:c8:36:56:
a6:fd:6d:85:e1:be:57:26:79:cb:44:dd:d7:b3:72:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:86:86:70:89:19:18:D0:2D:16:2F:5C:F3:6E:72:48:2F:F8:E4:40
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16A616162AE811EEBBD3A926C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.121.4.0/23
103.147.174.0/23
103.148.138.0/23
103.155.212.0/23
103.157.206.0/23
103.157.230.0/23
103.171.126.0/23
103.174.26.0/23
103.176.75.0/24
103.177.58.0/23
103.177.128.0/23
103.182.58.0/23
103.201.136.0/23
103.204.164.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2001:df5:ff80::/48
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:b5:8c:42:bb:89:ff:77:c5:35:30:ac:ec:2b:44:49:e1:7e:
e4:b8:ee:db:34:ce:42:fe:8f:0d:77:74:c1:cc:95:50:d9:c3:
38:58:7f:41:d1:18:3e:28:fd:0f:63:a9:77:d5:08:ff:db:fe:
5c:08:52:b6:f1:52:bd:2a:1e:22:96:89:10:db:38:73:4a:53:
d3:ac:c8:2c:80:58:a9:18:a2:2c:22:ff:0a:8a:92:e0:6b:04:
f4:71:c2:42:ff:fe:3a:f3:8a:b0:2f:7c:8b:6b:5c:c7:5a:24:
e6:de:75:ec:d4:7f:52:2c:c6:d9:18:0f:72:7e:f6:97:e7:f0:
a1:e3:7d:36:31:01:4c:9c:27:ff:5e:47:0e:bc:2b:46:08:17:
f6:60:49:98:17:f7:8e:9f:79:74:3e:5f:7b:cc:53:88:5a:07:
20:92:4c:f9:9e:a9:ce:c6:c2:c8:d7:f5:c9:0e:6e:63:f4:5b:
92:f4:5b:9e:bf:e9:26:d7:93:50:81:19:0b:45:73:45:90:7b:
2d:f8:63:41:71:84:65:b4:ac:2d:a3:65:50:1a:40:fc:05:7a:
91:8f:c4:ec:9e:e4:88:7c:9b:31:8d:61:c9:25:e7:23:ae:2d:
a1:b3:2b:34:03:d2:75:4d:9c:2c:8e:01:06:7e:c5:6f:7b:57:
f7:3c:22:83
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 5 05:06:01 2023 by rpki-client on console-fra.rpki-client.org