Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/A5ADDFF42F7211EE8CD64733C4F9AE02.roa
File: A5ADDFF42F7211EE8CD64733C4F9AE02.roa (raw, json)
Hash identifier: KXzJnxuuqC5QjXtL8D0USqOLr0OjKA4nujC67F4pS9M=
Subject key identifier: 5E:F6:D6:2A:77:50:C8:64:E9:F2:6F:6A:CE:B7:C9:42:A2:1C:BA:F6
Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial: 0529
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/A5ADDFF42F7211EE8CD64733C4F9AE02.roa
Signing time: Mon 31 Jul 2023 07:19:55 +0000
ROA not before: Mon 31 Jul 2023 07:19:55 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 17635
IP address blocks: 203.14.105.0/24 maxlen: 24
203.57.128.0/20 maxlen: 20
203.57.128.0/24 maxlen: 24
203.57.129.0/24 maxlen: 24
203.57.130.0/24 maxlen: 24
203.57.131.0/24 maxlen: 24
203.57.132.0/24 maxlen: 24
203.57.135.0/24 maxlen: 24
203.57.136.0/24 maxlen: 24
203.57.137.0/24 maxlen: 24
203.57.138.0/24 maxlen: 24
203.57.139.0/24 maxlen: 24
203.57.140.0/24 maxlen: 24
203.57.141.0/24 maxlen: 24
203.57.142.0/24 maxlen: 24
203.57.143.0/24 maxlen: 24
2406:9680::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 01 Aug 2023 00:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Validity
Not Before: Jul 31 07:19:55 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64c7609b-37ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:f0:8f:d7:2a:ca:97:7a:84:2e:f4:04:18:
f3:9c:04:e7:9f:4b:1b:45:b6:b7:b5:fb:f1:c5:ea:
2b:b9:7b:18:e1:db:02:c5:5b:64:26:6e:e2:88:68:
77:05:de:9b:5b:c0:c3:63:6d:4e:6f:94:5e:ec:8f:
d7:2a:9f:ce:c6:cc:94:0a:62:fd:1b:2a:1d:48:3b:
c8:fe:c9:8f:99:d6:5a:c0:26:c5:d8:b9:3c:fa:07:
ba:67:bd:d3:71:e7:98:9f:d2:66:2c:d0:c9:2b:85:
ba:a3:23:01:5f:e7:15:d7:06:75:97:26:c7:65:16:
de:b3:9f:ce:4d:6a:80:42:f9:18:b4:00:84:f8:23:
1e:ea:e3:14:b2:98:e1:32:9c:69:1a:31:7b:5e:72:
ce:21:e8:1b:e5:25:5b:23:16:fe:4a:02:c0:1a:d5:
3a:ea:94:cd:49:93:73:70:27:6f:5f:6e:c8:0b:06:
17:de:66:35:47:54:82:89:fa:5c:94:9c:e2:7f:af:
58:76:f7:cf:1d:c4:2d:6e:c7:87:e4:f1:c7:e0:e5:
3f:d1:09:e8:e6:9d:db:b9:d9:21:e1:28:21:e4:b0:
9c:85:a9:73:cc:c2:aa:5c:50:63:bb:f1:7c:cb:f3:
f8:18:06:1d:e7:84:97:72:92:e3:69:c5:42:79:fa:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F6:D6:2A:77:50:C8:64:E9:F2:6F:6A:CE:B7:C9:42:A2:1C:BA:F6
X509v3 Authority Key Identifier:
keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/A5ADDFF42F7211EE8CD64733C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.105.0/24
203.57.128.0/20
IPv6:
2406:9680::/32
Signature Algorithm: sha256WithRSAEncryption
7e:18:f4:82:14:1b:76:da:7f:49:0a:ff:bb:2b:a2:42:ba:11:
82:e1:b9:33:d8:56:63:3c:7d:14:09:1b:bc:63:3a:df:57:f6:
3a:42:8e:d6:ce:d4:cd:98:62:56:c3:ea:97:dc:71:67:e6:e8:
79:d4:72:75:15:ce:dd:67:cf:51:c8:bc:fd:a1:69:3c:13:f2:
c9:6c:d1:30:52:77:d9:b8:14:cb:46:4f:c0:ea:62:b1:9e:e8:
2b:23:1e:5a:56:e8:b3:82:81:ab:07:0f:8e:ef:c0:81:99:b5:
cf:e3:51:b4:07:80:1a:2c:d1:71:9f:94:b1:2b:c0:54:c6:67:
0e:3a:7d:18:a6:74:ca:fb:97:09:b7:45:dd:b7:d4:8a:dd:bb:
0f:24:35:d9:cd:b7:5c:ff:9d:dd:71:97:d2:c8:60:5e:49:b4:
98:26:5c:2b:19:fd:fc:22:2a:bf:75:20:30:4b:9a:97:79:f9:
f7:d7:10:e7:4d:f5:b0:cc:30:4b:73:67:ae:3f:06:08:13:bd:
c5:86:86:42:55:8c:27:b0:55:70:81:29:bb:33:cd:d6:00:cc:
3c:57:49:40:13:2e:02:31:e9:bd:60:dd:f7:ff:e3:99:4b:51:
80:25:1b:d5:98:bb:5d:44:85:ac:c9:ae:4d:a3:65:e0:73:fe:
25:4d:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org