Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3090DF76A0AD11EE9484AC30C4F9AE02.roa
File: 3090DF76A0AD11EE9484AC30C4F9AE02.roa (raw, json)
Hash identifier: FOoJEzSlO6c14Db4rKdsot2LAmvl/4XgI8ub1szQ7tA=
Subject key identifier: CC:5C:1F:14:3A:F6:61:F3:5C:87:94:58:48:79:DA:46:0F:38:2F:33
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 823A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3090DF76A0AD11EE9484AC30C4F9AE02.roa
Signing time: Wed 31 Jan 2024 03:50:27 +0000
ROA not before: Wed 31 Jan 2024 03:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140171
IP address blocks: 103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.147.93.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.159.162.0/24 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.163.126.0/23 maxlen: 24
103.163.158.0/24 maxlen: 24
103.169.154.0/24 maxlen: 24
103.169.155.0/24 maxlen: 24
103.169.167.0/24 maxlen: 24
103.175.0.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.187.166.0/23 maxlen: 24
103.190.100.0/23 maxlen: 24
103.191.202.0/23 maxlen: 24
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Apr 2024 04:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33338 (0x823a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 31 03:50:27 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b9c382-7559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:a2:0b:33:c2:3f:2d:ff:4f:93:81:c3:75:
98:e5:24:25:99:89:16:2a:e3:08:4f:e9:b3:bb:bd:
94:aa:2a:59:cb:7b:79:c3:2e:dc:16:4b:9f:e2:c8:
79:e8:15:5d:91:8b:07:43:1a:7e:d9:65:c6:e6:1e:
0c:8c:60:dd:8c:cf:bc:aa:c6:59:7c:f8:30:2c:77:
8f:23:ad:72:d8:7f:96:81:f7:be:2d:4b:0c:5b:cb:
fa:d1:3f:70:bc:29:89:78:87:b1:26:e2:46:9d:89:
3b:88:db:07:36:60:4f:aa:1d:68:2b:56:c2:b6:8a:
1e:43:13:3c:83:3d:b7:79:a0:9e:25:94:70:b1:11:
dd:e4:6d:ce:c7:7c:7d:39:b6:10:0b:cc:db:27:c1:
ac:fc:1b:8d:19:aa:08:ef:44:53:a2:59:b5:1d:1a:
b2:02:75:00:8c:93:7d:f7:dc:89:c7:f4:4a:7f:b2:
3c:f4:e0:7c:71:09:f8:5b:d9:e3:b0:25:02:d3:0d:
bd:db:9b:8b:72:14:b7:20:1c:a8:2e:08:35:55:da:
2d:85:e2:87:fb:16:c5:d7:6e:a0:c6:6f:69:88:10:
96:32:25:0d:1b:26:fe:1a:76:b0:8c:b8:d7:26:96:
8d:9e:7c:a0:26:3a:1c:5e:1d:1f:32:55:32:9f:3f:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5C:1F:14:3A:F6:61:F3:5C:87:94:58:48:79:DA:46:0F:38:2F:33
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3090DF76A0AD11EE9484AC30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.182.0/23
103.53.30.0/23
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.147.93.0/24
103.156.200.0/23
103.159.162.0/24
103.160.186.0/23
103.161.32.0/23
103.163.42.0/23
103.163.126.0/23
103.163.158.0/24
103.169.154.0/23
103.169.167.0/24
103.175.0.0/23
103.176.142.0/24
103.187.166.0/23
103.190.100.0/23
103.191.202.0/23
103.209.62.0/23
103.209.174.0/23
202.61.108.0/24
IPv6:
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
Signature Algorithm: sha256WithRSAEncryption
8a:4d:28:49:1b:dc:a1:be:b2:9b:91:67:06:7e:89:bd:cc:0e:
1c:b7:9b:67:a0:42:eb:28:3e:76:ec:f6:3a:4b:bf:c9:2b:10:
ac:60:0b:59:b0:30:6c:33:a0:47:10:b4:34:17:7c:0f:2c:d2:
a7:8f:ab:2d:5b:d2:e2:f1:42:8b:5f:50:a2:e6:06:62:e8:be:
9e:c2:75:9d:8d:f3:d7:d2:be:16:06:24:2e:82:dc:6d:0f:03:
86:f9:ba:6a:de:b3:af:42:81:38:37:4f:24:83:12:15:66:23:
4a:90:2a:15:ca:c2:d7:3b:00:2f:29:de:9e:ae:de:3c:fa:4b:
b9:ea:e5:55:a9:f6:bd:44:86:5f:49:a4:78:1f:28:07:54:45:
f7:07:ae:57:44:04:80:f7:45:e6:09:46:b8:db:3c:3a:46:77:
80:f4:41:8c:3a:ba:8e:2c:56:7d:f2:dc:77:7d:55:5e:7c:2a:
75:b7:e0:78:8f:c5:23:ea:20:88:d9:6d:8f:db:d2:83:b9:34:
31:75:97:aa:c8:1c:b1:c7:f8:af:06:ca:53:18:1c:e8:a7:a8:
ec:ad:1e:c6:47:90:1a:77:30:ae:a7:31:15:5a:0a:67:1d:5c:
d9:81:60:41:27:03:fe:ea:6f:71:d0:f5:f8:63:8d:ea:02:c5:
c4:57:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 07:24:58 2024 by rpki-client on console-ams.rpki-client.org