Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6EF98006BF011EE8CEC6185C4F9AE02.roa
File: C6EF98006BF011EE8CEC6185C4F9AE02.roa (raw, json)
Hash identifier: JMcTUU8T1l8c59eUw3bCUx6VQW+/EMttdaRpGR6jELE=
Subject key identifier: D3:ED:AD:78:44:8B:3E:6C:60:E2:8B:E1:39:D9:57:D2:70:F4:89:D0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7C86
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6EF98006BF011EE8CEC6185C4F9AE02.roa
Signing time: Wed 25 Oct 2023 12:20:11 +0000
ROA not before: Wed 25 Oct 2023 12:20:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.147.174.0/23 maxlen: 24
103.148.138.0/23 maxlen: 24
103.155.212.0/24 maxlen: 24
103.155.213.0/24 maxlen: 24
103.157.206.0/23 maxlen: 24
103.157.230.0/24 maxlen: 24
103.157.231.0/24 maxlen: 24
103.171.126.0/23 maxlen: 24
103.174.26.0/24 maxlen: 24
103.174.27.0/24 maxlen: 24
103.176.75.0/24 maxlen: 24
103.177.58.0/23 maxlen: 24
103.177.128.0/24 maxlen: 24
103.177.129.0/24 maxlen: 24
103.181.147.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.204.164.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2001:df5:ff80::/48 maxlen: 48
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31878 (0x7c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 25 12:20:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=653907fa-0053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:e7:cb:af:07:88:33:b2:8c:1b:d8:91:73:
4a:27:1e:20:63:31:66:7a:f6:49:0a:07:a8:03:cf:
ee:d7:b6:c9:e5:cb:59:4a:e9:31:b2:d0:1b:9c:d7:
12:a9:bc:ea:a9:4a:da:3a:b6:ae:59:d0:54:47:09:
94:cd:ab:d1:b9:6e:84:8a:9f:4e:e0:7e:60:09:8f:
2c:1d:1a:b1:ce:94:d7:ac:78:7a:fd:0c:6d:ae:f0:
16:05:8e:55:ce:92:eb:c7:ed:67:b9:2c:21:04:ba:
1b:c5:35:eb:3c:6f:48:89:18:4e:d6:99:b9:83:39:
22:05:e1:70:a9:d1:b9:9b:38:4d:96:0e:2b:52:9a:
a2:6c:5f:cc:07:97:29:c5:6c:3f:79:f2:24:31:87:
77:50:ed:d8:02:b9:df:40:d5:27:dd:8e:77:5a:23:
0d:bb:a7:df:94:db:5e:ed:b7:0c:d0:47:bb:5d:ac:
dd:ec:90:5b:9b:6d:81:36:e6:68:5f:f0:d0:54:dc:
14:b3:0f:b4:9b:4b:75:80:a0:36:69:d1:69:b9:67:
cd:21:9f:16:a2:38:a4:fc:fd:5e:38:d7:40:2f:01:
c2:d2:b2:5d:8d:fc:89:bc:96:79:f8:0b:6a:05:87:
ae:87:c0:cb:a9:b2:5f:30:03:65:72:96:d4:1c:6a:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:AD:78:44:8B:3E:6C:60:E2:8B:E1:39:D9:57:D2:70:F4:89:D0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6EF98006BF011EE8CEC6185C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.147.174.0/23
103.148.138.0/23
103.155.212.0/23
103.157.206.0/23
103.157.230.0/23
103.171.126.0/23
103.174.26.0/23
103.176.75.0/24
103.177.58.0/23
103.177.128.0/23
103.181.147.0/24
103.201.136.0/23
103.204.164.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2001:df5:ff80::/48
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:71:2c:8b:86:ed:78:6d:46:a1:a0:38:07:e0:6b:02:67:50:
23:38:d2:b5:6a:f6:8f:b8:ab:3f:63:26:07:9c:a4:3a:cc:6a:
b6:8e:e7:78:ad:08:1b:17:16:2e:33:8d:15:a0:ab:fe:1e:74:
40:69:82:6d:df:fb:3a:ce:7a:97:68:30:68:30:55:d3:b7:27:
8c:26:87:e1:e2:66:e2:4f:15:93:e4:f7:c6:38:c0:07:e8:7d:
cd:27:3a:92:6d:19:37:d2:e1:17:d0:22:a2:1c:7e:47:f5:32:
2e:3f:75:35:f1:ab:eb:91:d3:06:76:18:3c:3e:9d:b7:9b:71:
6a:36:22:da:e4:3a:ac:c1:8b:ed:d4:be:cc:12:2a:d8:33:6d:
8f:22:b0:a4:95:d5:31:25:a5:cc:f2:c7:c2:a3:dd:4e:d9:eb:
8a:a5:03:23:e4:e8:07:be:68:58:23:fa:21:c9:0f:95:cb:56:
b4:56:87:fc:20:52:ee:66:1c:d8:59:b0:ea:7d:3e:97:2e:62:
49:0b:0c:65:b0:69:b1:44:4d:e5:51:96:41:f2:bb:02:f3:78:
5c:03:7e:fe:0c:0a:b6:20:89:ea:1f:33:ae:ae:a1:04:13:d9:
5f:2c:00:f9:6e:6c:0b:c1:ca:ff:83:6f:82:38:89:51:38:94:
f8:5d:6c:a2
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgICfIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMDI1MTIyMDExWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTM5MDdmYS0wMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRTny68HiDOyjBvYkXNKJx4gYzFmevZJCgeoA8/u17bJ5ctZSukxstAbnNcS
qbzqqUraOrauWdBURwmUzavRuW6Eip9O4H5gCY8sHRqxzpTXrHh6/QxtrvAWBY5V
zpLrx+1nuSwhBLobxTXrPG9IiRhO1pm5gzkiBeFwqdG5mzhNlg4rUpqibF/MB5cp
xWw/efIkMYd3UO3YArnfQNUn3Y53WiMNu6fflNte7bcM0Ee7Xazd7JBbm22BNuZo
X/DQVNwUsw+0m0t1gKA2adFpuWfNIZ8Wojik/P1eONdALwHC0rJdjfyJvJZ5+Atq
BYeuh8DLqbJfMANlcpbUHGqWfQIDAQABo4IDIzCCAx8wHQYDVR0OBBYEFNPtrXhE
iz5sYOKL4TnZV9Jw9InQMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzZFRjk4MDA2
QkYwMTFFRThDRUM2MTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgawGCCsGAQUFBwEHAQH/
BIGcMIGZMHgEAgABMHIDBAIr+EQDBAItdwwDBAJnOfwDBABndKkDBAFnk64DBAFn
lIoDBAFnm9QDBAFnnc4DBAFnneYDBAFnq34DBAFnrhoDBABnsEsDBAFnsToDBAFn
sYADBABntZMDBAFnyYgDBABnzKQDBABnzKYDBAJn/yQwHQQCAAIwFwMHACABDfX/
gAMFACQCXIADBQAkB2/AMA0GCSqGSIb3DQEBCwUAA4IBAQAKcSyLhu14bUahoDgH
4GsCZ1AjONK1avaPuKs/YyYHnKQ6zGq2jud4rQgbFxYuM40VoKv+HnRAaYJt3/s6
znqXaDBoMFXTtyeMJofh4mbiTxWT5PfGOMAH6H3NJzqSbRk30uEX0CKiHH5H9TIu
P3U18avrkdMGdhg8Pp23m3FqNiLa5DqswYvt1L7MEirYM22PIrCkldUxJaXM8sfC
o91O2euKpQMj5OgHvmhYI/ohyQ+Vy1a0Vof8IFLuZhzYWbDqfT6XLmJJCwxlsGmx
RE3lUZZB8rsC83hcA37+DAq2IInqHzOurqEEE9lfLAD5bmwLwcr/g2+COIlROJT4
XWyi
-----END CERTIFICATE-----
Generated at Sat Dec 2 09:05:31 2023 by rpki-client on console-fra.rpki-client.org