Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7778CBED21911EE93AF0A60C4F9AE02.roa
File: A7778CBED21911EE93AF0A60C4F9AE02.roa (raw, json)
Hash identifier: eO/Sf912WYhX+sYQXMCHs39RFIRVrxSbKXTMM2Xox1s=
Subject key identifier: 05:BE:DB:A7:D7:0A:2E:9E:4A:C2:F2:8F:3E:BE:DD:7E:A7:A0:F7:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8376
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7778CBED21911EE93AF0A60C4F9AE02.roa
Signing time: Fri 23 Feb 2024 07:03:32 +0000
ROA not before: Fri 23 Feb 2024 07:03:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134014
IP address blocks: 45.126.168.0/22 maxlen: 24
103.59.200.0/22 maxlen: 24
103.66.232.0/22 maxlen: 24
103.137.94.0/24 maxlen: 24
103.185.178.0/24 maxlen: 24
103.185.236.0/23 maxlen: 23
103.185.237.0/24 maxlen: 24
103.198.102.0/23 maxlen: 23
103.198.103.0/24 maxlen: 24
182.54.148.0/22 maxlen: 24
2001:df0:99c0::/48 maxlen: 48
2402:fbc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Feb 2024 04:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33654 (0x8376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 23 07:03:32 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d84344-fd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:63:74:23:8f:c3:e3:e9:78:22:73:6a:6c:
e7:f3:c0:f0:f2:9c:1f:61:88:25:4e:20:4e:8c:6e:
f0:73:41:d5:be:19:72:9c:f2:49:a7:cd:70:92:0f:
4d:eb:15:21:5a:92:9a:b5:52:00:20:f6:6b:30:cc:
01:21:0d:0b:7a:81:93:c0:70:1f:87:98:0c:1b:8f:
67:7f:06:55:09:e6:6f:8b:bc:e1:b2:5d:bc:6a:77:
2d:33:a7:30:ed:4c:84:40:2d:23:10:61:7a:92:01:
19:73:51:19:81:76:c0:91:f2:0b:7b:25:59:97:e8:
d2:50:7f:81:26:ad:b1:34:cd:2e:a9:ae:04:28:fe:
f5:16:ba:cd:16:a5:aa:3e:22:20:c0:55:f7:1c:d7:
c2:bb:4f:50:45:d1:c3:84:50:16:2e:8e:04:51:6f:
b1:22:d0:35:6d:14:74:5a:4e:3c:ac:db:3d:a0:07:
85:73:d0:59:db:e1:7e:69:21:7c:cf:4f:ee:e4:55:
17:ea:43:57:1f:7d:21:84:35:64:d1:f8:d2:c6:20:
b4:9a:25:8a:28:83:49:6d:14:16:1d:70:98:31:b2:
21:f0:f1:dd:6d:a7:7b:d4:1e:13:a3:f3:0c:61:a0:
bd:14:9a:f2:f3:ce:ee:af:ae:a8:a3:c1:2d:9e:5e:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BE:DB:A7:D7:0A:2E:9E:4A:C2:F2:8F:3E:BE:DD:7E:A7:A0:F7:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7778CBED21911EE93AF0A60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.168.0/22
103.59.200.0/22
103.66.232.0/22
103.137.94.0/24
103.185.178.0/24
103.185.236.0/23
103.198.102.0/23
182.54.148.0/22
IPv6:
2001:df0:99c0::/48
2402:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:67:28:76:28:88:bd:c0:42:bd:65:bb:26:d5:b4:f0:cb:73:
1e:af:4a:fb:ce:6a:7e:e2:ae:57:4f:62:f9:33:2f:51:76:e7:
6b:8c:34:a5:f1:3b:dc:95:3f:48:2b:f2:c6:fc:96:ee:f1:1e:
6e:eb:79:a7:21:b0:c2:21:1a:b6:be:fa:c6:32:61:6d:52:cd:
f7:e9:43:41:d2:b8:e9:b9:8c:63:0d:d3:3f:ac:f1:c3:d4:3c:
4d:89:e7:f5:65:cf:69:36:6a:cd:60:a9:85:76:1c:13:b2:7c:
ff:c7:f8:39:bf:f3:67:98:5b:ad:07:04:b2:0b:72:42:da:45:
d9:22:e0:fa:68:2f:26:02:87:43:dc:b4:ca:f7:d4:ec:12:2d:
6b:d2:58:71:80:1c:54:26:6c:aa:12:92:31:74:73:ec:b4:b4:
8b:05:d2:07:bc:ce:8e:6f:07:21:f7:83:43:46:17:91:89:e8:
f4:00:30:7f:93:d2:1d:49:8c:2e:85:bb:c0:fa:e1:18:48:72:
f5:63:bd:63:60:01:31:db:95:61:7c:16:ce:52:64:ad:cc:46:
f4:2b:d1:e0:3c:be:85:9c:1d:a4:d0:7d:dd:11:a2:88:8a:a7:
6c:90:e5:d3:02:2e:e2:2e:18:5f:8c:7d:d6:95:a3:c7:14:42:
63:d6:fb:9a
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAIN2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDIyMzA3MDMzMloXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjVkODQzNDQtZmQ4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALK2Y3Qjj8Pj6Xgic2ps5/PA8PKcH2GIJU4gToxu8HNB1b4ZcpzySafNcJIP
TesVIVqSmrVSACD2azDMASENC3qBk8BwH4eYDBuPZ38GVQnmb4u84bJdvGp3LTOn
MO1MhEAtIxBhepIBGXNRGYF2wJHyC3slWZfo0lB/gSatsTTNLqmuBCj+9Ra6zRal
qj4iIMBV9xzXwrtPUEXRw4RQFi6OBFFvsSLQNW0UdFpOPKzbPaAHhXPQWdvhfmkh
fM9P7uRVF+pDVx99IYQ1ZNH40sYgtJoliiiDSW0UFh1wmDGyIfDx3W2ne9QeE6Pz
DGGgvRSa8vPO7q+uqKPBLZ5eBncCAwEAAaOCAtcwggLTMB0GA1UdDgQWBBQFvtun
1wounkrC8o8+vt1+p6D3zzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3Nzc4Q0JF
RDIxOTExRUU5M0FGMEE2MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGEGCCsGAQUFBwEHAQH/
BFIwUDA2BAIAATAwAwQCLX6oAwQCZzvIAwQCZ0LoAwQAZ4leAwQAZ7myAwQBZ7ns
AwQBZ8ZmAwQCtjaUMBYEAgACMBADBwAgAQ3wmcADBQAkAvvAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOZyh2KIi9wEK9Zbsm1bTwy3Mer0r7zmp+4q5XT2L5My9RdudrjDSl
8TvclT9IK/LG/Jbu8R5u63mnIbDCIRq2vvrGMmFtUs336UNB0rjpuYxjDdM/rPHD
1DxNief1Zc9pNmrNYKmFdhwTsnz/x/g5v/NnmFutBwSyC3JC2kXZIuD6aC8mAodD
3LTK99TsEi1r0lhxgBxUJmyqEpIxdHPstLSLBdIHvM6Obwch94NDRheRiej0ADB/
k9IdSYwuhbvA+uEYSHL1Y71jYAEx25VhfBbOUmStzEb0K9HgPL6FnB2k0H3dEaKI
iqdskOXTAi7iLhhfjH3WlaPHFEJj1vua
-----END CERTIFICATE-----
Generated at Mon Feb 26 05:45:18 2024 by rpki-client on console-fra.rpki-client.org