Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DB7B84C2F8E11EEADEA4028C4F9AE02.roa
File: 6DB7B84C2F8E11EEADEA4028C4F9AE02.roa (raw, json)
Hash identifier: dgeA+PEhHHNMFBd6SR2NEBz0Cdt9ipJ4g1EWSBZiKy0=
Subject key identifier: 66:D2:59:97:40:0F:ED:2D:80:B5:D5:80:BE:50:26:84:F2:90:B5:BE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7D64
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DB7B84C2F8E11EEADEA4028C4F9AE02.roa
Signing time: Thu 09 Nov 2023 11:03:37 +0000
ROA not before: Thu 09 Nov 2023 11:03:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
43.228.164.0/23 maxlen: 24
103.37.98.0/23 maxlen: 24
103.52.32.0/24 maxlen: 24
103.68.140.0/23 maxlen: 24
103.69.239.0/24 maxlen: 24
103.72.196.0/24 maxlen: 24
103.79.48.0/23 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.146.232.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.160.25.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.163.14.0/24 maxlen: 24
103.170.85.0/24 maxlen: 24
103.173.238.0/23 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.181.4.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.184.205.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.225.70.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2001:df3:1340::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2405:e100:1d::/48 maxlen: 48
2405:e100:1e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32100 (0x7d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 9 11:03:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=654cbc89-c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:1a:d1:54:d8:19:bd:88:7e:20:e9:7c:10:
e1:74:21:93:e4:f9:d0:dc:7b:35:f3:eb:25:b0:95:
af:28:4a:6e:3d:4b:b9:2c:0b:05:22:d1:b6:aa:24:
4b:89:0c:08:16:70:9e:ca:6f:50:d3:82:c0:a5:59:
cb:5c:e0:2f:ad:33:da:fc:eb:14:59:13:1c:b5:9f:
1b:35:b3:b5:0d:3d:92:94:68:de:a0:f3:db:2c:07:
16:ef:d5:49:3a:03:c2:e1:e6:38:e4:20:d5:55:b2:
ce:ce:b0:53:1a:79:04:bd:b1:87:07:3c:d1:e2:22:
75:29:37:30:3f:47:8b:46:00:09:7e:7a:b0:4e:c9:
61:5d:81:2a:51:78:d5:53:1b:60:41:f9:30:60:55:
31:3b:e1:3b:12:19:58:e4:98:95:af:41:e1:9b:3b:
a0:8f:36:d6:42:b5:bb:f0:c3:9b:14:d7:ce:7f:ee:
ea:46:df:46:54:90:66:8b:0c:50:d6:f8:68:eb:b5:
9f:b5:de:6d:b3:77:a5:2a:58:1c:e7:1e:6b:c7:21:
5d:45:95:83:34:c0:22:cd:15:55:74:be:a1:3b:bb:
32:af:3b:e9:08:48:38:c1:49:5b:ed:56:05:93:50:
4d:b3:9b:70:f6:aa:98:cf:3e:ac:f5:5a:fa:a4:68:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:59:97:40:0F:ED:2D:80:B5:D5:80:BE:50:26:84:F2:90:B5:BE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DB7B84C2F8E11EEADEA4028C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
43.228.164.0/23
103.37.98.0/23
103.52.32.0/24
103.68.140.0/23
103.69.239.0/24
103.72.196.0/24
103.79.48.0/23
103.91.72.0/21
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.120.152.0/23
103.124.174.0/24
103.138.9.0/24
103.146.232.0/24
103.154.8.0/23
103.158.41.0/24
103.160.25.0/24
103.160.222.0/24
103.163.14.0/24
103.170.85.0/24
103.173.238.0/23
103.174.28.0/23
103.178.117.0/24
103.181.4.0/24
103.181.119.0/24
103.184.41.0/24
103.184.205.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.225.70.0/24
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df1:d240::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df2:9640::/48
2001:df3:1340::/48
2400:d660::/32
2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3c:6c:c2:01:16:88:e6:88:3a:54:61:87:0e:08:26:5d:93:53:
1e:6a:2e:88:6a:6f:31:8c:b4:97:4f:59:a1:d1:dc:de:6e:9d:
53:09:2d:46:f1:03:88:05:eb:ef:e7:59:07:da:48:e4:dd:f7:
68:8c:06:ef:5e:d5:3c:b1:92:10:60:d0:d6:db:b4:04:3c:aa:
39:84:1f:74:48:da:f8:66:02:f2:4d:7d:05:5a:50:51:d7:ea:
10:de:18:a0:74:eb:c3:49:06:1f:a2:1d:70:a4:dc:7f:e4:63:
7f:67:44:a7:7b:6e:18:14:f0:e4:03:46:6a:5a:96:cd:c4:76:
01:fc:2c:8e:bd:b2:a3:20:16:87:c6:9f:14:9e:85:16:81:27:
36:12:ea:93:61:79:04:5d:07:1a:8d:9d:88:94:ba:3c:6f:53:
ac:c5:fb:13:a1:b8:8c:60:61:71:99:97:b6:33:b3:6a:f7:dd:
2f:8c:72:5f:a8:fb:b2:71:97:b8:af:9b:7f:98:1a:7f:3b:d1:
6c:8b:cb:c1:d3:19:68:86:1a:9f:de:32:51:ad:a0:7c:93:48:
db:5f:8a:ef:6f:0e:39:a9:40:9f:2d:54:0c:31:a1:ba:5d:f7:
35:d1:60:34:e3:24:bd:95:f0:c6:4e:2f:17:1a:af:8d:f3:c3:
50:26:1d:15
-----BEGIN CERTIFICATE-----
MIIGpDCCBYygAwIBAgICfWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMTA5MTEwMzM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRjYmM4OS1jODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAob4a0VTYGb2IfiDpfBDhdCGT5PnQ3Hs18+slsJWvKEpuPUu5LAsFItG2qiRL
iQwIFnCeym9Q04LApVnLXOAvrTPa/OsUWRMctZ8bNbO1DT2SlGjeoPPbLAcW79VJ
OgPC4eY45CDVVbLOzrBTGnkEvbGHBzzR4iJ1KTcwP0eLRgAJfnqwTslhXYEqUXjV
UxtgQfkwYFUxO+E7EhlY5JiVr0HhmzugjzbWQrW78MObFNfOf+7qRt9GVJBmiwxQ
1vho67Wftd5ts3elKlgc5x5rxyFdRZWDNMAizRVVdL6hO7syrzvpCEg4wUlb7VYF
k1BNs5tw9qqYzz6s9Vr6pGhaDQIDAQABo4IDyDCCA8QwHQYDVR0OBBYEFGbSWZdA
D+0tgLXVgL5QJoTykLW+MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkRCN0I4NEMy
RjhFMTFFRUFERUE0MDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFQBggrBgEFBQcBBwEB
/wSCAT8wggE7MIHfBAIAATCB2AMEARt78AMEAivh+AMEASvkpAMEAWclYgMEAGc0
IAMEAWdEjAMEAGdF7wMEAGdIxAMEAWdPMAMEA2dbSAMEAGddJwMEAmdlcAMEAWdx
bgMEAWd4mAMEAGd8rgMEAGeKCQMEAGeS6AMEAWeaCAMEAGeeKQMEAGegGQMEAGeg
3gMEAGejDgMEAGeqVQMEAWet7gMEAWeuHAMEAGeydQMEAGe1BAMEAGe1dwMEAGe4
KQMEAGe4zQMEAGfMRgMEAGfOMwMEAWfOYAMEAGfhRgMEAmfo6AMEAMoEqTBXBAIA
AjBRAwcAIAEN8dJAAwcAIAEN8e1AAwcAIAEN8jrAAwcAIAEN8j9AAwcAIAEN8pZA
AwcAIAEN8xNAAwUAJADWYDASAwcAJAXhAAAdAwcAJAXhAAAeMA0GCSqGSIb3DQEB
CwUAA4IBAQA8bMIBFojmiDpUYYcOCCZdk1Meai6Iam8xjLSXT1mh0dzebp1TCS1G
8QOIBevv51kH2kjk3fdojAbvXtU8sZIQYNDW27QEPKo5hB90SNr4ZgLyTX0FWlBR
1+oQ3higdOvDSQYfoh1wpNx/5GN/Z0Sne24YFPDkA0ZqWpbNxHYB/CyOvbKjIBaH
xp8UnoUWgSc2EuqTYXkEXQcajZ2IlLo8b1OsxfsTobiMYGFxmZe2M7Nq990vjHJf
qPuycZe4r5t/mBp/O9Fsi8vB0xlohhqf3jJRraB8k0jbX4rvbw45qUCfLVQMMaG6
Xfc10WA04yS9lfDGTi8XGq+N88NQJh0V
-----END CERTIFICATE-----
Generated at Mon Nov 20 06:53:20 2023 by rpki-client on console-ams.rpki-client.org