Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4541C38CA94011EDA3F51F0DC4F9AE02.roa
File: 4541C38CA94011EDA3F51F0DC4F9AE02.roa (raw, json)
Hash identifier: iiJXuM5r5zuUVj4uCFCm5M15NvtE7eBan5aP+wed7Do=
Subject key identifier: 37:59:55:4A:A6:80:AA:D0:EE:72:3E:27:F5:32:7D:44:69:BE:8E:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 76E3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4541C38CA94011EDA3F51F0DC4F9AE02.roa
Signing time: Fri 04 Aug 2023 00:27:21 +0000
ROA not before: Fri 04 Aug 2023 00:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149240
IP address blocks: 103.69.239.0/24 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.162.196.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.0.0/24 maxlen: 24
103.170.1.0/24 maxlen: 24
103.178.176.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/23 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:9340::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30435 (0x76e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 4 00:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64cc45e8-71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:99:45:d4:04:a0:15:c2:03:19:ba:0a:62:
b6:8e:59:5e:c2:3f:ad:63:10:62:ea:5c:3b:50:f1:
78:7b:28:ed:14:aa:80:bf:7d:05:43:b7:26:5a:f4:
9a:11:e4:11:50:4e:1a:93:13:7a:8b:92:2d:64:ab:
b2:61:dd:6e:31:d3:6a:bf:99:13:6b:01:ed:9b:9c:
d5:d6:e9:0c:1f:07:df:70:ef:a1:95:01:24:af:e6:
38:f7:f5:4c:27:d3:4d:1c:4d:02:62:25:04:f0:7b:
a7:5a:ba:b4:c7:94:7c:df:17:59:9f:9c:af:b9:03:
c8:e2:57:2d:aa:ab:9b:d9:a2:36:e5:6e:01:4a:15:
3e:18:89:29:10:10:84:f2:68:53:41:e1:d7:7e:89:
d2:a8:d1:3f:c3:18:f8:91:cf:e0:ee:61:9c:01:69:
8b:bf:4d:46:fe:df:c2:25:8b:4d:c6:89:53:ca:91:
89:25:d3:fb:6c:f0:71:8b:13:b4:ba:3c:03:c7:cc:
a2:9d:1f:3d:cf:a4:dc:18:78:7f:b2:cb:79:d4:b3:
a6:a0:a2:7e:68:10:bf:16:0e:8c:1f:92:89:74:3b:
e9:2b:ac:87:fb:85:4a:d3:e0:a4:64:4c:3e:5c:82:
6c:cc:05:f7:be:94:ee:44:a4:64:b5:9a:3b:34:34:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:55:4A:A6:80:AA:D0:EE:72:3E:27:F5:32:7D:44:69:BE:8E:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4541C38CA94011EDA3F51F0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.239.0/24
103.88.56.0/23
103.139.191.0/24
103.162.196.0/23
103.167.172.0/24
103.170.0.0/23
103.178.176.0/23
103.184.40.0/24
103.184.236.0/23
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:9340::/48
2001:df2:c3c0::/48
Signature Algorithm: sha256WithRSAEncryption
51:ef:dc:4e:db:01:45:30:a1:ed:c4:28:47:98:8e:a5:17:8a:
db:a8:5e:24:ab:4c:f0:ad:62:64:e5:de:d6:7b:03:c4:e1:ec:
fd:45:37:19:4a:94:3f:02:31:8a:53:95:a4:ba:8c:45:86:8a:
d8:11:c4:de:de:b2:e8:cb:4e:10:9f:0d:6e:2a:25:39:ef:ee:
df:a7:53:92:31:4f:bd:92:cb:14:5b:b5:bb:51:a8:33:bc:34:
77:65:a4:c2:fd:75:ce:04:f2:c2:62:25:b0:cf:5f:90:c0:4f:
e8:73:e0:07:bb:a2:9f:93:76:32:54:3b:cf:32:9b:17:d8:1b:
ba:42:d7:f0:b6:29:1b:c3:b9:22:9b:25:d7:07:57:dc:4b:3e:
8a:22:6e:56:12:e8:bd:c4:4e:9b:8c:b2:f0:28:4d:ba:ed:65:
85:61:3d:78:cd:19:f8:4f:c9:55:e5:72:e5:8e:d1:d8:fe:cb:
21:f0:db:b9:f6:1f:26:e0:44:7e:43:b3:43:4e:89:18:bf:fc:
d3:2f:d0:43:b5:45:aa:74:c6:63:15:23:7a:25:b9:f4:f1:ed:
9b:c3:85:45:c1:8b:d3:ae:d1:53:e5:df:37:a6:b7:dc:d3:d5:
cb:b5:43:c7:3d:1c:e0:ef:94:ab:a1:20:a6:54:4c:a1:70:42:
6a:ca:03:e9
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgICduMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwODA0MDAyNzIxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNjNDVlOC03MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNCZRdQEoBXCAxm6CmK2jllewj+tYxBi6lw7UPF4eyjtFKqAv30FQ7cmWvSa
EeQRUE4akxN6i5ItZKuyYd1uMdNqv5kTawHtm5zV1ukMHwffcO+hlQEkr+Y49/VM
J9NNHE0CYiUE8HunWrq0x5R83xdZn5yvuQPI4lctqqub2aI25W4BShU+GIkpEBCE
8mhTQeHXfonSqNE/wxj4kc/g7mGcAWmLv01G/t/CJYtNxolTypGJJdP7bPBxixO0
ujwDx8yinR89z6TcGHh/sst51LOmoKJ+aBC/Fg6MH5KJdDvpK6yH+4VK0+CkZEw+
XIJszAX3vpTuRKRktZo7NDRYywIDAQABo4IC7jCCAuowHQYDVR0OBBYEFDdZVUqm
gKrQ7nI+J/UyfURpvo59MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDU0MUMzOENB
OTQwMTFFREEzRjUxRjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweAYIKwYBBQUHAQcBAf8E
aTBnMEIEAgABMDwDBABnRe8DBAFnWDgDBABni78DBAFnosQDBABnp6wDBAFnqgAD
BAFnsrADBABnuCgDBAFnuOwDBABnv8swIQQCAAIwGwMHACABDfA7wAMHACABDfCT
QAMHACABDfLDwDANBgkqhkiG9w0BAQsFAAOCAQEAUe/cTtsBRTCh7cQoR5iOpReK
26heJKtM8K1iZOXe1nsDxOHs/UU3GUqUPwIxilOVpLqMRYaK2BHE3t6y6MtOEJ8N
biolOe/u36dTkjFPvZLLFFu1u1GoM7w0d2Wkwv11zgTywmIlsM9fkMBP6HPgB7ui
n5N2MlQ7zzKbF9gbukLX8LYpG8O5Ipsl1wdX3Es+iiJuVhLovcROm4yy8ChNuu1l
hWE9eM0Z+E/JVeVy5Y7R2P7LIfDbufYfJuBEfkOzQ06JGL/80y/QQ7VFqnTGYxUj
eiW59PHtm8OFRcGL067RU+XfN6a33NPVy7VDxz0c4O+Uq6EgplRMoXBCasoD6Q==
-----END CERTIFICATE-----
Generated at Tue Aug 22 11:16:27 2023 by rpki-client on console-ams.rpki-client.org