Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/405D508E0C4A11EF84188552C4F9AE02.roa
File: 405D508E0C4A11EF84188552C4F9AE02.roa (raw, json)
Hash identifier: 4bpSH/qWlgvbmp7mw11yUN0tzPObw1rwBm1nMrU2dJI=
Subject key identifier: A2:29:65:4B:56:55:F9:12:AF:F9:C3:7F:93:1D:B1:F2:CF:28:07:97
Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial: 0B
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/405D508E0C4A11EF84188552C4F9AE02.roa
Signing time: Tue 07 May 2024 08:17:32 +0000
ROA not before: Tue 07 May 2024 08:17:32 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 9304
IP address blocks: 118.103.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 08:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Validity
Not Before: May 7 08:17:32 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6639e39c-54c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6b:83:fa:55:27:5f:d7:35:1d:28:da:80:78:
10:5c:a7:9b:fb:e9:13:2b:1a:fb:9d:f7:c7:2b:1c:
bf:8f:51:18:f0:a6:f6:fc:7e:45:5a:4a:50:3f:54:
9f:5d:3f:cb:73:72:b1:0e:37:0a:07:72:ee:93:82:
6c:ec:4a:7b:f3:f8:0a:20:7b:6a:47:c6:0f:c1:82:
5b:c0:40:04:b2:66:27:5b:8f:b2:61:b7:c0:03:c5:
f2:32:b7:61:a6:ef:13:bf:83:04:95:f6:7e:97:0d:
59:60:27:65:14:ab:3d:44:19:f5:4c:81:24:6e:37:
38:2f:91:8c:05:2d:ff:fa:2e:0d:9b:92:a1:55:ee:
6b:e9:0d:79:f6:64:12:1f:08:ab:70:c7:9f:c6:65:
a3:b7:b0:45:75:b2:29:bf:7a:e1:0d:ae:df:c1:b8:
0d:71:36:7e:90:dc:29:89:26:85:2c:41:50:5f:f9:
07:ce:8a:0e:d2:1d:7e:d5:21:00:1b:b1:00:c0:10:
dc:c5:69:e0:76:14:2e:2f:44:79:ba:2d:0d:80:32:
10:bf:c6:f9:00:57:aa:2a:9e:64:7f:c0:b2:85:fd:
b4:99:f3:e8:7d:18:59:11:d3:e6:79:aa:4d:30:56:
7d:56:c3:de:d1:8e:d8:e4:83:55:9e:d5:78:c8:85:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:65:4B:56:55:F9:12:AF:F9:C3:7F:93:1D:B1:F2:CF:28:07:97
X509v3 Authority Key Identifier:
keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/405D508E0C4A11EF84188552C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.103.240.0/21
Signature Algorithm: sha256WithRSAEncryption
41:1c:37:71:08:a5:bf:ac:cc:ba:4b:7d:0a:4f:0e:51:3f:ef:
b3:e2:8d:fa:71:f3:0c:0d:b8:d3:a1:46:7d:f7:e1:86:91:fa:
1f:0a:5e:09:91:5f:a9:1b:9d:ed:ec:01:11:f6:29:3c:3a:21:
bd:89:73:95:ec:52:71:ac:15:46:01:4c:f3:44:b4:22:8d:d2:
b1:e5:32:a7:9c:72:9b:83:97:08:a6:2c:1d:09:1b:6c:0c:38:
26:5e:a0:3c:ee:6b:f5:a3:b0:33:a6:68:f1:68:22:c4:8c:cb:
53:c4:a4:98:f0:e3:70:b9:f5:60:9c:cd:0e:3b:a3:ae:db:c9:
b1:de:cc:c2:68:89:e8:4a:44:08:8b:97:76:01:b9:a6:21:41:
20:1a:ea:e4:de:93:6b:f2:2f:76:f2:ab:70:4b:30:00:7a:a1:
7f:58:7f:a0:47:54:0c:31:51:b0:8c:1d:59:4b:d7:45:4f:6b:
19:14:22:a6:51:48:35:f6:b6:1c:1c:de:48:fa:ad:e9:02:fa:
b6:40:ea:15:73:fe:83:19:1e:06:11:9d:42:d6:ab:46:4e:ef:
ea:7e:ca:d9:ae:0d:2b:70:1d:e5:d4:3f:1f:eb:3b:8c:a7:8b:
16:86:96:35:94:45:1a:41:f9:2e:4f:de:d9:68:7b:17:44:76:
27:36:91:c0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OTNBMDExMC8GA1UEBRMoQkNCN0NGNDQzMEJCOThFQTA0ODUxQzM0MDcyNkU1ODgx
NTBFMTM5RDAeFw0yNDA1MDcwODE3MzJaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MzllMzljLTU0YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDqa4P6VSdf1zUdKNqAeBBcp5v76RMrGvud98crHL+PURjwpvb8fkVaSlA/VJ9d
P8tzcrEONwoHcu6TgmzsSnvz+Aoge2pHxg/BglvAQASyZidbj7Jht8ADxfIyt2Gm
7xO/gwSV9n6XDVlgJ2UUqz1EGfVMgSRuNzgvkYwFLf/6Lg2bkqFV7mvpDXn2ZBIf
CKtwx5/GZaO3sEV1sim/euENrt/BuA1xNn6Q3CmJJoUsQVBf+QfOig7SHX7VIQAb
sQDAENzFaeB2FC4vRHm6LQ2AMhC/xvkAV6oqnmR/wLKF/bSZ8+h9GFkR0+Z5qk0w
Vn1Ww97Rjtjkg1We1XjIhZl9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUoillS1ZV
+RKv+cN/kx2x8s8oB5cwHwYDVR0jBBgwFoAUvLfPRDC7mOoEhRw0BybliBUOE50w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5M0EwL0E1OTU1RTU2MEM0
NTExRUY5RTdFMDUxREM0RjlBRTAyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdkxmUFJEQzdtT29FaFJ3MEJ5YmxpQlVPRTUwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTNBMC9BNTk1NUU1NjBDNDUxMUVGOUU3RTA1MURDNEY5QUUwMi80MDVENTA4RTBD
NEExMUVGODQxODg1NTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA3Zn8DANBgkqhkiG9w0BAQsFAAOCAQEAQRw3cQilv6zMukt9
Ck8OUT/vs+KN+nHzDA2406FGfffhhpH6HwpeCZFfqRud7ewBEfYpPDohvYlzlexS
cawVRgFM80S0Io3SseUyp5xym4OXCKYsHQkbbAw4Jl6gPO5r9aOwM6Zo8WgixIzL
U8SkmPDjcLn1YJzNDjujrtvJsd7MwmiJ6EpECIuXdgG5piFBIBrq5N6Ta/IvdvKr
cEswAHqhf1h/oEdUDDFRsIwdWUvXRU9rGRQiplFINfa2HBzeSPqt6QL6tkDqFXP+
gxkeBhGdQtarRk7v6n7K2a4NK3Ad5dQ/H+s7jKeLFoaWNZRFGkH5Lk/e2Wh7F0R2
JzaRwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org