Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C33DFA22262111EE80261B51C4F9AE02.roa
File: C33DFA22262111EE80261B51C4F9AE02.roa (raw, json)
Hash identifier: K4QEMaaSHLhluCPM16wW7e02lgUsfQcQnbmEOfrz7Mo=
Subject key identifier: 0B:7F:CF:0E:5A:56:09:53:BD:C1:BE:03:41:17:51:2C:C1:9F:1A:1C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7690
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C33DFA22262111EE80261B51C4F9AE02.roa
Signing time: Mon 31 Jul 2023 10:14:16 +0000
ROA not before: Mon 31 Jul 2023 10:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.52.32.0/24 maxlen: 24
103.68.140.0/23 maxlen: 24
103.72.196.0/24 maxlen: 24
103.79.48.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.160.25.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.173.238.0/23 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.225.70.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2405:e100:1e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30352 (0x7690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 31 10:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c78978-909f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:a1:2c:bf:1e:48:ef:8e:52:58:6d:ba:e2:
bf:69:01:cf:dd:7c:dc:a5:21:d3:8f:29:b0:97:82:
b0:99:ec:9d:88:79:4d:b0:b1:5a:bf:64:84:59:0c:
76:92:0b:af:e0:2a:83:85:88:bb:48:14:fb:15:4d:
38:82:ed:79:27:42:3c:7f:5a:66:f6:e1:d5:f0:1a:
5b:52:ec:ea:2b:ab:1d:f9:5c:4e:fc:1f:5f:bc:10:
5b:f7:77:2f:9e:92:e8:19:69:b8:7e:14:e5:4b:aa:
da:10:f1:2e:18:4a:a0:73:a6:d7:46:0e:55:37:1b:
16:a3:77:e0:7d:3c:20:35:0b:de:21:e7:bd:2c:c2:
2e:3a:2a:dc:7a:d9:4e:62:aa:c8:da:01:45:8d:e1:
d2:2a:4b:7c:b7:4c:07:a1:03:97:51:fd:42:ca:26:
83:ff:51:56:bb:98:04:f9:33:f5:d7:5f:0c:8b:c9:
60:6b:21:45:33:37:4b:ac:dc:3f:4d:9f:39:cb:ae:
c3:7f:21:1e:7a:64:9c:86:35:12:08:8c:66:73:c1:
f4:6c:03:b9:4a:6b:1d:08:51:8e:93:fc:c4:e1:f4:
58:c5:95:07:ea:fc:e7:e3:60:57:57:4d:8d:8e:eb:
58:e2:95:d3:4a:6f:a0:13:e2:ad:44:f8:eb:b5:e8:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7F:CF:0E:5A:56:09:53:BD:C1:BE:03:41:17:51:2C:C1:9F:1A:1C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C33DFA22262111EE80261B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
103.37.98.0/23
103.52.32.0/24
103.68.140.0/23
103.72.196.0/24
103.79.48.0/24
103.91.72.0/21
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.120.152.0/23
103.138.9.0/24
103.154.8.0/23
103.158.41.0/24
103.160.25.0/24
103.160.222.0/24
103.173.238.0/23
103.174.28.0/23
103.178.117.0/24
103.181.119.0/24
103.184.41.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.225.70.0/24
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df1:d240::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df2:9640::/48
2400:d660::/32
2405:e100:1e::/48
Signature Algorithm: sha256WithRSAEncryption
21:48:1e:a9:80:19:0f:7f:f7:5f:30:6d:52:ec:63:b0:13:dc:
ca:cb:71:00:3f:b9:12:21:ee:df:c1:29:5a:55:e2:41:81:8c:
02:76:05:33:52:9a:09:45:22:15:ba:09:81:0e:0c:1a:01:b0:
0a:48:e3:b5:7f:27:42:2c:0c:ed:70:9a:bc:63:4a:86:df:e9:
b5:aa:3e:4a:0a:fc:5b:6f:40:d8:0c:3e:bd:f8:95:01:f9:89:
a8:f9:d2:00:7f:a7:a3:87:8c:dd:77:45:9a:83:84:11:ca:70:
c6:1b:57:a5:5e:45:bf:1e:93:ec:a5:82:83:0f:f6:10:ba:f6:
c8:dc:59:52:c4:88:76:90:17:05:4b:71:ba:8a:1a:dd:fe:c8:
a1:1d:eb:6d:3d:e0:83:7d:62:dd:f6:cb:08:d7:ee:d4:84:6e:
93:22:b9:3f:1a:9d:f9:ed:b8:c5:1d:84:cf:d0:ea:15:1d:a5:
f3:2d:67:e6:f1:39:eb:2c:29:26:f4:fe:5a:65:28:59:a2:81:
93:31:e8:a5:25:92:d0:85:4c:a9:c6:ba:71:97:92:5c:89:2f:
3c:45:dd:0b:06:ca:54:f7:1f:a1:5b:8c:67:1c:23:f2:ff:b3:
68:1e:ed:43:06:52:10:59:1c:70:45:f9:16:cc:e0:1f:81:a3:
0a:1d:2a:aa
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgICdpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNzMxMTAxNDE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGM3ODk3OC05MDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9mhLL8eSO+OUlhtuuK/aQHP3XzcpSHTjymwl4KwmeydiHlNsLFav2SEWQx2
kguv4CqDhYi7SBT7FU04gu15J0I8f1pm9uHV8BpbUuzqK6sd+VxO/B9fvBBb93cv
npLoGWm4fhTlS6raEPEuGEqgc6bXRg5VNxsWo3fgfTwgNQveIee9LMIuOircetlO
YqrI2gFFjeHSKkt8t0wHoQOXUf1CyiaD/1FWu5gE+TP1118Mi8lgayFFMzdLrNw/
TZ85y67DfyEeemSchjUSCIxmc8H0bAO5SmsdCFGOk/zE4fRYxZUH6vzn42BXV02N
jutY4pXTSm+gE+KtRPjrteiOGwIDAQABo4IDgjCCA34wHQYDVR0OBBYEFAt/zw5a
VglTvcG+A0EXUSzBnxocMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzMzREZBMjIy
NjIxMTFFRTgwMjYxQjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEKBggrBgEFBQcBBwEB
/wSB+jCB9zCBrwQCAAEwgagDBAEbe/ADBAIr4fgDBAFnJWIDBABnNCADBAFnRIwD
BABnSMQDBABnTzADBANnW0gDBABnXScDBAJnZXADBAFncW4DBAFneJgDBABnigkD
BAFnmggDBABnnikDBABnoBkDBABnoN4DBAFnre4DBAFnrhwDBABnsnUDBABntXcD
BABnuCkDBABnzEYDBABnzjMDBAFnzmADBABn4UYDBAJn6OgDBADKBKkwQwQCAAIw
PQMHACABDfHSQAMHACABDfHtQAMHACABDfI6wAMHACABDfI/QAMHACABDfKWQAMF
ACQA1mADBwAkBeEAAB4wDQYJKoZIhvcNAQELBQADggEBACFIHqmAGQ9/918wbVLs
Y7AT3MrLcQA/uRIh7t/BKVpV4kGBjAJ2BTNSmglFIhW6CYEODBoBsApI47V/J0Is
DO1wmrxjSobf6bWqPkoK/FtvQNgMPr34lQH5iaj50gB/p6OHjN13RZqDhBHKcMYb
V6VeRb8ek+ylgoMP9hC69sjcWVLEiHaQFwVLcbqKGt3+yKEd62094IN9Yt32ywjX
7tSEbpMiuT8anfntuMUdhM/Q6hUdpfMtZ+bxOessKSb0/lplKFmigZMx6KUlktCF
TKnGunGXklyJLzxF3QsGylT3H6FbjGccI/L/s2ge7UMGUhBZHHBF+RbM4B+Bowod
Kqo=
-----END CERTIFICATE-----
Generated at Mon Jul 31 11:25:36 2023 by rpki-client on console-ams.rpki-client.org