Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/78BC98FA4E0C11EF8C6EA27EC4F9AE02.roa
File: 78BC98FA4E0C11EF8C6EA27EC4F9AE02.roa (raw, json)
Hash identifier: FRlMB+V+JKyGATiXsCDvPYQhU+v1/lwvQ77hdAz+auc=
Subject key identifier: F5:43:8F:28:4F:86:51:72:53:11:59:94:88:AE:F2:27:80:5A:91:1E
Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
Certificate serial: 06
Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/78BC98FA4E0C11EF8C6EA27EC4F9AE02.roa
Signing time: Tue 30 Jul 2024 00:42:25 +0000
ROA not before: Tue 30 Jul 2024 00:42:25 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 17819
IP address blocks: 103.9.164.0/24 maxlen: 24
103.9.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 03:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
Validity
Not Before: Jul 30 00:42:25 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a836f1-45ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:74:eb:ee:60:65:09:cd:34:d3:bf:3c:ba:
27:14:66:e5:15:cc:b0:cd:28:eb:a8:83:39:5f:a2:
46:51:97:ad:cd:09:d6:4b:37:cb:d4:08:13:c7:79:
ed:e9:e4:af:9e:9b:e7:b4:ae:cc:b4:b3:b0:45:e5:
7a:ed:e4:f0:c7:ce:55:59:9e:c0:69:45:25:5d:9a:
74:9e:b0:c1:b7:bb:98:a1:d7:3e:78:d0:fb:9a:38:
b1:cf:6c:ad:4d:58:2d:b0:26:35:ec:13:73:52:14:
f9:96:83:7d:9d:e9:c3:61:bc:e2:4d:50:c6:6d:0a:
93:35:84:25:d5:5b:96:28:47:cc:7a:7c:78:d9:6b:
7f:1c:ae:cc:01:54:7a:ce:d4:ea:fe:f8:3c:d7:12:
ed:55:34:a5:54:2f:78:e6:bf:b4:ec:72:6c:f6:65:
f6:9a:7f:8b:37:5c:31:0b:56:9b:73:d6:ce:92:ab:
a1:f3:cc:d9:c8:1c:ad:ed:41:c9:d0:fe:22:f9:a6:
d8:ae:3e:79:a7:7c:f1:a9:df:88:40:50:49:f9:b6:
b4:ec:90:ab:95:10:e2:d6:ce:16:1f:d2:8c:21:ea:
34:bd:54:b7:f5:64:36:b1:1d:91:47:cf:a0:7d:15:
0d:3c:67:a2:5d:58:05:73:c3:fc:10:40:aa:72:01:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:8F:28:4F:86:51:72:53:11:59:94:88:AE:F2:27:80:5A:91:1E
X509v3 Authority Key Identifier:
keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/78BC98FA4E0C11EF8C6EA27EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:f5:ae:8f:71:af:d7:6b:38:d1:16:3f:9d:18:49:d4:9e:88:
d7:b2:b3:a1:f3:b0:c3:75:91:62:82:ba:47:2e:bb:1e:3d:3b:
6d:10:a8:6b:90:a3:e0:02:81:dc:8f:b1:eb:b2:99:70:96:90:
fa:a4:27:53:a9:cf:6d:c6:a0:0a:ed:2e:8d:0a:c2:80:4e:32:
12:a3:d9:de:7f:6c:e7:bf:6b:f9:a8:32:94:c8:1f:d2:32:4a:
8c:5a:ae:cc:8b:27:8e:a9:04:2d:ad:67:f4:06:f6:c5:e1:81:
a2:c6:e6:73:df:24:65:0e:83:21:ec:c5:80:81:0b:bd:f1:4d:
dd:de:ec:7c:b8:89:5e:06:19:77:df:7c:ec:07:7b:2c:bf:26:
a8:89:8f:5e:03:40:4c:1a:3a:d5:e5:48:a9:b8:63:11:8d:8a:
9c:64:b0:ab:06:7e:9e:e5:2a:d8:c6:d6:4b:8f:30:12:bd:89:
04:2a:d6:55:05:ee:fe:7b:fb:36:19:6c:04:76:79:23:2b:ec:
8b:09:94:93:65:41:23:20:79:0d:c2:a4:59:53:f9:21:5e:7c:
df:32:96:83:a0:d4:fc:24:98:a0:7f:37:4c:8f:24:b4:e3:d3:
52:4e:1d:5b:6a:22:d5:84:11:b9:e4:58:21:70:37:7b:60:a7:
a7:c5:be:3f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTM1NDExMC8GA1UEBRMoQ0VDOUIxQjM1OUZFNThFOTAyM0E4NENGQzI2NzRDMTYx
ODI4Rjk5OTAeFw0yNDA3MzAwMDQyMjVaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YTgzNmYxLTQ1ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8MHTr7mBlCc000788uicUZuUVzLDNKOuogzlfokZRl63NCdZLN8vUCBPHee3p
5K+em+e0rsy0s7BF5Xrt5PDHzlVZnsBpRSVdmnSesMG3u5ih1z540PuaOLHPbK1N
WC2wJjXsE3NSFPmWg32d6cNhvOJNUMZtCpM1hCXVW5YoR8x6fHjZa38crswBVHrO
1Or++DzXEu1VNKVUL3jmv7Tscmz2Zfaaf4s3XDELVptz1s6Sq6HzzNnIHK3tQcnQ
/iL5ptiuPnmnfPGp34hAUEn5trTskKuVEOLWzhYf0owh6jS9VLf1ZDaxHZFHz6B9
FQ08Z6JdWAVzw/wQQKpyAWQHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9UOPKE+G
UXJTEVmUiK7yJ4BakR4wHwYDVR0jBBgwFoAUzsmxs1n+WOkCOoTPwmdMFhgo+Zkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMzU0LzhENEVDRjg0NEQ4
NzExRUZCOTFDQjgzNUM0RjlBRTAyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1a
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvenNteHMxbi1XT2tDT29UUHdtZE1GaGdvLVprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi83OEJDOThGQTRF
MEMxMUVGOEM2RUEyN0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcJpDANBgkqhkiG9w0BAQsFAAOCAQEAj/Wuj3Gv12s40RY/
nRhJ1J6I17KzofOww3WRYoK6Ry67Hj07bRCoa5Cj4AKB3I+x67KZcJaQ+qQnU6nP
bcagCu0ujQrCgE4yEqPZ3n9s579r+agylMgf0jJKjFquzIsnjqkELa1n9Ab2xeGB
osbmc98kZQ6DIezFgIELvfFN3d7sfLiJXgYZd9987Ad7LL8mqImPXgNATBo61eVI
qbhjEY2KnGSwqwZ+nuUq2MbWS48wEr2JBCrWVQXu/nv7NhlsBHZ5IyvsiwmUk2VB
IyB5DcKkWVP5IV583zKWg6DU/CSYoH83TI8ktOPTUk4dW2oi1YQRueRYIXA3e2Cn
p8W+Pw==
-----END CERTIFICATE-----
Generated at Mon Oct 7 06:34:34 2024 by rpki-client on console-fra.rpki-client.org