Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/DB15F5ECA26811EDA7243C6BC4F9AE02.roa
File: DB15F5ECA26811EDA7243C6BC4F9AE02.roa (raw, json)
Hash identifier: NPPitBKE/E+aYFSiJ9VPN0QdELfCxtQVJbsLCKZsFJE=
Subject key identifier: 77:21:52:48:EF:26:DD:61:38:9C:BE:91:31:D7:AA:A4:17:7C:2D:D0
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 1187
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/DB15F5ECA26811EDA7243C6BC4F9AE02.roa
Signing time: Wed 01 Feb 2023 19:44:36 +0000
ROA not before: Wed 01 Feb 2023 19:44:36 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 138938
IP address blocks: 103.121.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4487 (0x1187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Feb 1 19:44:36 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63dac123-701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:07:32:f7:3d:89:12:d9:f3:13:87:53:0c:
81:4c:db:2f:28:af:33:ec:e2:15:fd:bb:85:ed:ce:
d2:b4:d8:9a:89:cf:a3:3d:0f:6c:65:00:3e:a6:22:
7e:bb:7b:a8:09:68:7f:fa:a9:81:76:83:53:8e:be:
cc:40:6e:40:08:d6:f5:fe:b1:19:53:f0:28:b4:92:
9c:ad:f7:d3:5f:b6:4a:15:ae:09:37:c6:b8:a0:06:
30:8e:e4:9a:fe:58:a6:05:fd:a9:e6:5c:93:7b:d3:
01:fe:e8:a9:00:73:77:e5:22:fa:1e:17:cc:f4:48:
14:13:13:73:be:a0:b0:1e:39:1c:1b:f0:e0:e8:d6:
7d:bc:ed:86:95:36:22:98:ba:3d:a2:e7:40:ef:f0:
06:c6:48:68:c9:84:f8:1d:09:b5:8d:80:37:6e:53:
67:98:f1:fd:bf:00:be:2d:cc:7c:5c:26:7a:f7:48:
29:1f:ee:95:0f:44:39:bd:3b:00:85:7f:6b:23:bd:
3c:7d:41:78:5c:6f:2e:39:44:9d:cb:72:76:d5:ea:
be:86:90:d5:3a:79:8d:5e:1f:2d:a7:2e:da:e8:26:
51:6d:c6:1b:a4:8f:e2:01:bf:a7:20:1c:f4:8a:e5:
69:84:ef:e8:18:3c:3d:ba:86:39:a2:98:f1:a3:3b:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:52:48:EF:26:DD:61:38:9C:BE:91:31:D7:AA:A4:17:7C:2D:D0
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/DB15F5ECA26811EDA7243C6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.35.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:cd:c2:9a:bb:c6:7a:ec:2f:93:39:bc:cf:6f:d5:d2:64:3c:
39:57:d3:3d:70:ef:8f:0a:26:1a:ed:6a:81:06:61:ad:e7:25:
00:7e:76:aa:f5:1f:c0:50:a9:e4:76:04:d1:5c:9e:df:9b:04:
21:49:e0:7f:8c:55:db:ef:c4:b9:5e:55:3c:1c:04:77:bd:3f:
a6:bd:40:61:0a:39:cf:54:5c:52:ce:56:ed:b5:62:31:85:d6:
ad:62:3f:2e:01:09:15:f0:00:0f:94:87:1b:c3:6e:ce:b2:c0:
30:0e:49:49:69:22:ab:ec:65:a4:87:67:38:0c:2e:11:e3:0a:
17:26:0f:87:0a:03:c3:d7:fa:50:cd:bd:c4:43:e6:c4:39:be:
69:bb:dc:26:59:4b:d8:8d:90:a3:6d:d4:db:7e:1e:14:e7:45:
cc:20:d9:fa:15:94:45:4c:44:5f:9f:14:7e:c4:a8:7b:fc:d0:
9c:6a:d5:36:21:d8:27:a2:e5:ee:63:fe:c2:e6:76:68:b7:3d:
3d:00:a2:9f:0f:28:8c:c9:12:3e:79:75:e0:11:8e:66:95:70:
72:12:cb:14:a3:27:db:bd:9c:ef:2a:12:c5:b2:32:88:2f:9e:
8d:48:20:6c:50:1e:0e:cf:65:c1:51:b3:d7:fa:19:18:ef:74:
21:30:72:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux
OENGNkU5MzQwHhcNMjMwMjAxMTk0NDM2WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2RhYzEyMy03MDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApTwHMvc9iRLZ8xOHUwyBTNsvKK8z7OIV/buF7c7StNiaic+jPQ9sZQA+piJ+
u3uoCWh/+qmBdoNTjr7MQG5ACNb1/rEZU/AotJKcrffTX7ZKFa4JN8a4oAYwjuSa
/limBf2p5lyTe9MB/uipAHN35SL6HhfM9EgUExNzvqCwHjkcG/Dg6NZ9vO2GlTYi
mLo9oudA7/AGxkhoyYT4HQm1jYA3blNnmPH9vwC+Lcx8XCZ690gpH+6VD0Q5vTsA
hX9rI708fUF4XG8uOUSdy3J21eq+hpDVOnmNXh8tpy7a6CZRbcYbpI/iAb+nIBz0
iuVphO/oGDw9uoY5opjxoztXhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHchUkjv
Jt1hOJy+kTHXqqQXfC3QMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw
QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM0N0UvQkNFREY0NDJCMEJGMTFFODg2MzkyMjM3QzRGOUFFMDIvREIxNUY1RUNB
MjY4MTFFREE3MjQzQzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABneSMwDQYJKoZIhvcNAQELBQADggEBAJ7Nwpq7xnrsL5M5
vM9v1dJkPDlX0z1w748KJhrtaoEGYa3nJQB+dqr1H8BQqeR2BNFcnt+bBCFJ4H+M
VdvvxLleVTwcBHe9P6a9QGEKOc9UXFLOVu21YjGF1q1iPy4BCRXwAA+UhxvDbs6y
wDAOSUlpIqvsZaSHZzgMLhHjChcmD4cKA8PX+lDNvcRD5sQ5vmm73CZZS9iNkKNt
1Nt+HhTnRcwg2foVlEVMRF+fFH7EqHv80Jxq1TYh2Cei5e5j/sLmdmi3PT0Aop8P
KIzJEj55deARjmaVcHISyxSjJ9u9nO8qEsWyMogvno1IIGxQHg7PZcFRs9f6GRjv
dCEwcgc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org