Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6A04CB5AECED11EE96BA986AC4F9AE02.roa
File: 6A04CB5AECED11EE96BA986AC4F9AE02.roa (raw, json)
Hash identifier: 1eyVNCv0bYa+oRMSsFepC+g3Hj45qO1N9el05KcjmWs=
Subject key identifier: 1F:54:BE:F0:5D:11:67:9F:6F:3D:C9:16:E0:CA:10:C5:0A:7E:B9:50
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 07A7
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6A04CB5AECED11EE96BA986AC4F9AE02.roa
Signing time: Thu 28 Mar 2024 10:24:53 +0000
ROA not before: Thu 28 Mar 2024 10:24:53 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.125.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 10:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959 (0x7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Mar 28 10:24:53 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66054574-09f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:6a:72:8e:d7:09:64:e0:f4:7f:ac:6b:d6:
fc:82:64:40:02:e0:1e:af:dc:7f:da:c1:d3:3a:b4:
c0:0c:3d:45:35:f7:79:dd:b4:6b:66:08:65:b6:20:
86:34:73:c4:3b:77:d0:83:fc:a0:53:cc:b3:7e:d1:
46:14:40:ee:62:2e:22:64:3f:fd:80:5d:db:56:eb:
57:de:07:40:2b:1c:05:20:ba:60:0a:05:85:f9:4b:
68:05:a0:d5:90:5a:5e:5a:79:e4:4e:e8:7c:57:c1:
46:d0:e5:8f:f6:50:26:8f:a5:e3:7c:d3:cd:d9:3b:
a9:ea:8b:f7:65:4c:f1:7b:79:fc:a2:41:d2:da:95:
cf:b6:4e:7f:1d:91:cb:fc:e6:7f:e8:10:6f:34:11:
6e:77:54:d9:6a:21:79:d7:cf:8a:5f:24:46:d7:0c:
64:0c:a9:b8:37:03:58:15:70:a1:51:ed:38:93:10:
8e:6d:55:bd:44:89:0d:74:56:2f:72:2c:e5:51:e3:
fa:ef:d2:dc:e5:59:93:15:99:97:52:a4:c2:30:32:
7e:e3:f4:95:73:99:ea:f5:59:c2:d8:a9:55:93:08:
fb:6b:4a:a9:50:80:9c:8c:fc:31:11:0c:cd:a7:b8:
4a:91:31:0d:a9:88:ee:65:9b:13:d2:68:e3:00:b4:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:54:BE:F0:5D:11:67:9F:6F:3D:C9:16:E0:CA:10:C5:0A:7E:B9:50
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6A04CB5AECED11EE96BA986AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.147.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d8:ec:7d:39:8a:fb:34:d8:9f:4c:fa:df:5e:c9:fb:59:38:
d6:b9:17:e7:72:cd:20:b0:b3:d1:d6:e5:61:5a:43:15:20:81:
b5:16:b7:81:e4:a7:f7:69:c2:e3:c8:e4:79:76:cf:16:12:fc:
b1:24:05:b1:c8:75:ca:60:95:4a:14:fc:61:fe:32:59:ca:ea:
c1:40:14:2b:c8:7a:b2:3a:6b:d8:84:80:e8:c5:e2:6b:ff:a8:
c0:06:ba:4d:1d:3d:31:ac:eb:4c:d6:08:a2:d8:4f:1e:ee:ab:
da:62:1b:26:05:44:d4:06:6b:3e:03:88:85:44:3f:ed:72:10:
a2:59:93:50:82:26:ea:e8:4c:e7:3a:d2:ea:c1:cd:a8:80:e8:
c0:02:99:e0:5e:ef:2e:47:28:2b:a2:a0:57:d0:f0:9d:61:3b:
9a:d6:5a:b2:bc:b6:0b:3e:0b:8c:0b:96:60:58:2a:5b:79:b2:
98:50:e8:cc:0f:a6:e6:89:89:e2:10:8c:10:12:34:c2:a7:1e:
86:63:6d:2d:42:ea:14:15:cc:8d:46:ae:78:95:8a:bb:24:7e:
fc:8b:04:b7:62:98:ce:c2:ec:12:cd:95:75:48:3d:8e:b7:15:
dc:b7:05:ea:33:43:83:89:86:a2:61:36:6a:ff:ff:f4:e8:93:
c6:db:24:38
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw
NTYwMTc0QTIwHhcNMjQwMzI4MTAyNDUzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjA1NDU3NC0wOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXtqco7XCWTg9H+sa9b8gmRAAuAer9x/2sHTOrTADD1FNfd53bRrZghltiCG
NHPEO3fQg/ygU8yzftFGFEDuYi4iZD/9gF3bVutX3gdAKxwFILpgCgWF+UtoBaDV
kFpeWnnkTuh8V8FG0OWP9lAmj6XjfNPN2Tup6ov3ZUzxe3n8okHS2pXPtk5/HZHL
/OZ/6BBvNBFud1TZaiF518+KXyRG1wxkDKm4NwNYFXChUe04kxCObVW9RIkNdFYv
cizlUeP679Lc5VmTFZmXUqTCMDJ+4/SVc5nq9VnC2KlVkwj7a0qpUICcjPwxEQzN
p7hKkTENqYjuZZsT0mjjALQ2KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB9UvvBd
EWefbz3JFuDKEMUKfrlQMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG
NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvNkEwNENCNUFF
Q0VEMTFFRTk2QkE5ODZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnfZMwDQYJKoZIhvcNAQELBQADggEBAELY7H05ivs02J9M
+t9eyftZONa5F+dyzSCws9HW5WFaQxUggbUWt4Hkp/dpwuPI5Hl2zxYS/LEkBbHI
dcpglUoU/GH+MlnK6sFAFCvIerI6a9iEgOjF4mv/qMAGuk0dPTGs60zWCKLYTx7u
q9piGyYFRNQGaz4DiIVEP+1yEKJZk1CCJuroTOc60urBzaiA6MACmeBe7y5HKCui
oFfQ8J1hO5rWWrK8tgs+C4wLlmBYKlt5sphQ6MwPpuaJieIQjBASNMKnHoZjbS1C
6hQVzI1GrniVirskfvyLBLdimM7C7BLNlXVIPY63Fdy3BeozQ4OJhqJhNmr///To
k8bbJDg=
-----END CERTIFICATE-----
Generated at Thu Jun 27 16:07:24 2024 by rpki-client on console-ams.rpki-client.org