Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/38A8C602296011EEA8C6E645C4F9AE02.roa
File: 38A8C602296011EEA8C6E645C4F9AE02.roa (raw, json)
Hash identifier: 7iSRAuuGUowQHuYkrt9kMhGQ/KkLrZ5lfcWCt+JN0bI=
Subject key identifier: 18:F1:59:CD:CE:DF:96:CE:57:E7:05:57:8B:1D:24:B6:B8:1D:F2:AB
Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial: A1
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/38A8C602296011EEA8C6E645C4F9AE02.roa
Signing time: Sat 11 May 2024 07:10:29 +0000
ROA not before: Sat 11 May 2024 07:10:29 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 394844
IP address blocks: 103.115.186.0/24 maxlen: 24
103.115.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 03:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Validity
Not Before: May 11 07:10:29 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=663f19e5-ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:11:7b:fd:ef:5b:3b:53:4e:21:84:d1:40:
40:b9:83:99:b5:ad:b9:30:59:16:8b:9a:58:d6:f2:
b2:ca:20:6c:fa:22:b6:eb:dc:09:c3:ef:66:82:f3:
1b:c1:3c:78:50:f2:fc:7a:78:0c:51:26:99:79:a7:
f6:77:1e:1f:8f:42:a5:d5:cb:63:9c:41:04:e5:24:
fc:3b:c8:1b:01:72:86:71:46:76:8e:fa:c4:30:08:
b6:b7:c4:f3:74:8a:b5:74:67:0f:29:d1:1a:ed:eb:
a1:46:aa:6e:02:85:e2:bc:6b:ca:2a:f9:d6:ce:9a:
16:2d:cd:6f:20:17:c7:42:dd:67:eb:e3:bd:df:d9:
2f:5a:6b:a2:7c:68:f7:b9:16:4c:1b:42:90:af:72:
b1:f4:7e:ec:6a:4f:20:47:bb:20:b3:fe:3e:62:3c:
c8:3e:da:bf:1f:da:d9:9f:52:7d:8d:af:b8:a0:01:
c8:d8:76:cd:15:9b:27:13:89:3f:0d:2a:41:4b:d7:
d6:8f:d6:79:d8:46:60:a9:63:f5:f8:7a:b1:db:af:
37:22:a2:35:d3:02:48:59:77:b8:3c:54:1a:dc:5d:
43:05:e1:ef:d3:33:65:72:a2:00:34:01:4c:93:da:
2d:b5:2c:2f:c2:98:33:45:97:e4:f1:96:9f:14:b6:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:59:CD:CE:DF:96:CE:57:E7:05:57:8B:1D:24:B6:B8:1D:F2:AB
X509v3 Authority Key Identifier:
keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/38A8C602296011EEA8C6E645C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.186.0/23
Signature Algorithm: sha256WithRSAEncryption
69:3e:2e:f3:37:54:f3:0b:90:d9:91:30:f4:80:02:65:b8:8e:
0b:5e:9c:fa:90:99:a9:2a:f6:c1:57:08:6b:7a:3f:c4:14:49:
8c:81:b4:60:fb:fc:db:4b:2a:7c:89:63:bc:6d:14:2e:9c:6a:
1c:af:6c:a1:cd:f8:5f:0e:42:2d:1a:be:42:6f:ac:08:0a:72:
23:ac:b6:cf:b4:98:1f:b2:62:7c:af:3b:4c:a6:cf:aa:7b:3f:
ea:91:83:5c:35:95:24:00:ae:3a:26:41:55:95:5d:76:dc:92:
9c:50:a6:66:91:6e:56:1f:8e:d1:db:7b:06:00:79:9b:03:89:
46:47:c4:ff:67:c6:99:a3:e4:a7:db:c9:b0:f1:ac:bf:61:e5:
03:9b:52:ae:d6:ef:b0:46:2e:90:b6:d1:6c:18:15:f4:aa:9b:
ff:7c:c9:31:a1:34:44:68:35:c3:2e:f7:73:dd:16:c4:b1:57:
97:25:48:b5:ac:88:9a:3e:11:d7:ad:e1:e1:20:fe:60:ea:21:
51:52:84:67:45:7c:19:d4:e6:1e:dd:e0:53:c2:93:de:ba:54:
e9:44:c5:4a:78:44:1c:6b:89:90:b2:1a:6e:13:bf:38:a5:c7:
db:8d:c3:05:35:d3:b1:1e:94:d7:fc:87:05:fa:3b:cc:90:7a:
78:15:b2:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB
NDk2RjQ0OTkwHhcNMjQwNTExMDcxMDI5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjNmMTllNS1lYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzm4Re/3vWztTTiGE0UBAuYOZta25MFkWi5pY1vKyyiBs+iK269wJw+9mgvMb
wTx4UPL8engMUSaZeaf2dx4fj0Kl1ctjnEEE5ST8O8gbAXKGcUZ2jvrEMAi2t8Tz
dIq1dGcPKdEa7euhRqpuAoXivGvKKvnWzpoWLc1vIBfHQt1n6+O939kvWmuifGj3
uRZMG0KQr3Kx9H7sak8gR7sgs/4+YjzIPtq/H9rZn1J9ja+4oAHI2HbNFZsnE4k/
DSpBS9fWj9Z52EZgqWP1+Hqx2683IqI10wJIWXe4PFQa3F1DBeHv0zNlcqIANAFM
k9ottSwvwpgzRZfk8ZafFLYp0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBjxWc3O
35bOV+cFV4sdJLa4HfKrMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3
MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTU0QTAvOTBCN0E3OUEyNzBFMTFFRUFBQTVCNzZGQzRGOUFFMDIvMzhBOEM2MDIy
OTYwMTFFRUE4QzZFNjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnc7owDQYJKoZIhvcNAQELBQADggEBAGk+LvM3VPMLkNmR
MPSAAmW4jgtenPqQmakq9sFXCGt6P8QUSYyBtGD7/NtLKnyJY7xtFC6cahyvbKHN
+F8OQi0avkJvrAgKciOsts+0mB+yYnyvO0ymz6p7P+qRg1w1lSQArjomQVWVXXbc
kpxQpmaRblYfjtHbewYAeZsDiUZHxP9nxpmj5KfbybDxrL9h5QObUq7W77BGLpC2
0WwYFfSqm/98yTGhNERoNcMu93PdFsSxV5clSLWsiJo+Edet4eEg/mDqIVFShGdF
fBnU5h7d4FPCk966VOlExUp4RBxriZCyGm4Tvzilx9uNwwU107EelNf8hwX6O8yQ
engVsjM=
-----END CERTIFICATE-----
Generated at Wed Jul 31 06:07:11 2024 by rpki-client on console-ams.rpki-client.org