Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC08726276EE11EEBD284377C4F9AE02.roa
File: DC08726276EE11EEBD284377C4F9AE02.roa (raw, json)
Hash identifier: 3gWf8UnKpQ4gP8JnECr60S/xRER0/e/9bah4Xt1UZkc=
Subject key identifier: 85:E7:B6:EC:DA:80:2B:1F:1E:E9:E0:03:DE:05:B3:6A:D8:AB:CA:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7CB9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC08726276EE11EEBD284377C4F9AE02.roa
Signing time: Mon 30 Oct 2023 06:37:56 +0000
ROA not before: Mon 30 Oct 2023 06:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134042
IP address blocks: 103.61.196.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.68.32.0/22 maxlen: 24
103.69.224.0/22 maxlen: 22
103.69.224.0/24 maxlen: 24
103.69.225.0/24 maxlen: 24
103.69.226.0/24 maxlen: 24
103.69.227.0/24 maxlen: 24
103.78.150.0/24 maxlen: 24
103.78.151.0/24 maxlen: 24
103.138.78.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31929 (0x7cb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 30 06:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=653f4f44-6a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:9f:51:ef:ad:c6:b5:ce:d3:de:c4:34:df:
e6:3f:7c:aa:56:62:e8:72:d2:38:52:96:93:d0:38:
19:f7:f3:00:76:c2:4a:d8:2f:84:93:e7:cf:94:1d:
c7:75:6e:55:8d:6e:73:31:49:03:a1:84:81:7e:63:
8f:7a:c5:9f:5d:88:a6:e7:f6:f7:50:aa:16:e7:0e:
6c:5a:a4:30:8c:e1:be:5b:a3:3b:a4:be:b0:10:c2:
df:1a:cd:6a:4f:3a:2a:2e:82:40:cd:2e:95:f5:5e:
b5:5a:0f:a6:e7:78:be:41:4e:ed:42:97:bd:a2:67:
13:84:ce:e5:57:9d:d2:a2:cf:17:50:8f:f9:51:8d:
86:e2:61:bf:e6:9a:b6:2c:2d:1d:5f:c1:f2:88:cf:
2c:f9:4e:93:22:4e:97:52:b8:c3:c3:92:fd:7c:d2:
bd:b0:fd:f4:94:85:96:cd:a0:4a:23:53:c1:34:5d:
b4:14:9b:b0:ab:12:3d:08:9a:71:87:8e:fb:58:ca:
87:40:39:01:7c:77:98:4f:de:cb:b6:c1:f2:4b:7a:
83:d8:17:73:a0:2e:02:9a:f2:50:8c:86:c2:25:fe:
77:2d:48:03:76:aa:d9:4c:1a:14:f3:43:8f:df:6d:
98:5d:a5:28:12:67:f5:1d:78:a8:fe:29:7d:24:d6:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:B6:EC:DA:80:2B:1F:1E:E9:E0:03:DE:05:B3:6A:D8:AB:CA:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC08726276EE11EEBD284377C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.196.0/22
103.68.32.0/22
103.69.224.0/22
103.78.150.0/23
103.138.78.0/23
Signature Algorithm: sha256WithRSAEncryption
03:9b:d0:b2:ef:be:83:e5:2a:97:54:38:0e:ae:5c:d7:27:74:
71:36:d0:29:f5:e9:80:38:f8:c2:cd:b2:e9:06:50:4a:3d:6e:
6b:4e:b5:c1:52:81:b1:1e:50:c7:ac:f4:91:8c:66:f4:d4:49:
0d:50:81:5c:b7:79:74:f3:08:b9:1a:74:37:b2:ce:05:28:ab:
95:6b:21:aa:cf:38:b8:c1:77:65:58:92:20:e9:dc:c0:ae:3e:
56:a8:7e:d0:ab:8e:4c:ab:6e:f8:57:56:60:60:b9:e3:93:f9:
eb:3b:de:51:21:a9:b4:8c:09:8d:14:13:df:fa:73:63:c5:02:
d9:22:38:20:0e:9e:9c:ee:a4:9c:bf:6d:d2:7f:f4:78:ae:bf:
18:0a:27:ad:2b:4b:14:52:dc:df:1d:3a:fd:83:8c:56:11:73:
b7:0d:5d:f3:7e:3a:a2:be:cd:d7:19:fc:4c:76:d8:92:43:e9:
12:f1:fc:4f:84:16:1c:f0:16:78:59:94:ef:02:49:87:13:64:
43:ab:40:63:ac:62:c4:89:76:e8:b4:7f:b5:8e:cc:9f:73:3a:
c7:18:a9:6a:a6:76:8f:ec:28:ac:6a:67:4f:91:3f:3b:fa:9d:
1b:3f:6e:9b:bb:33:7c:49:11:58:95:99:be:b1:2a:0c:d3:a5:
48:3f:02:d6
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICfLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMDMwMDYzNzU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTNmNGY0NC02YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6xyfUe+txrXO097ENN/mP3yqVmLoctI4UpaT0DgZ9/MAdsJK2C+Ek+fPlB3H
dW5VjW5zMUkDoYSBfmOPesWfXYim5/b3UKoW5w5sWqQwjOG+W6M7pL6wEMLfGs1q
TzoqLoJAzS6V9V61Wg+m53i+QU7tQpe9omcThM7lV53Sos8XUI/5UY2G4mG/5pq2
LC0dX8HyiM8s+U6TIk6XUrjDw5L9fNK9sP30lIWWzaBKI1PBNF20FJuwqxI9CJpx
h477WMqHQDkBfHeYT97LtsHyS3qD2BdzoC4CmvJQjIbCJf53LUgDdqrZTBoU80OP
322YXaUoEmf1HXio/il9JNZ+owIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIXntuza
gCsfHungA94Fs2rYq8rLMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREMwODcyNjI3
NkVFMTFFRUJEMjg0Mzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAJnPcQDBAJnRCADBAJnReADBAFnTpYDBAFnik4wDQYJKoZI
hvcNAQELBQADggEBAAOb0LLvvoPlKpdUOA6uXNcndHE20Cn16YA4+MLNsukGUEo9
bmtOtcFSgbEeUMes9JGMZvTUSQ1QgVy3eXTzCLkadDeyzgUoq5VrIarPOLjBd2VY
kiDp3MCuPlaoftCrjkyrbvhXVmBgueOT+es73lEhqbSMCY0UE9/6c2PFAtkiOCAO
npzupJy/bdJ/9HiuvxgKJ60rSxRS3N8dOv2DjFYRc7cNXfN+OqK+zdcZ/Ex22JJD
6RLx/E+EFhzwFnhZlO8CSYcTZEOrQGOsYsSJdui0f7WOzJ9zOscYqWqmdo/sKKxq
Z0+RPzv6nRs/bpu7M3xJEViVmb6xKgzTpUg/AtY=
-----END CERTIFICATE-----
Generated at Mon Nov 6 08:34:06 2023 by rpki-client on console-fra.rpki-client.org