Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa
File: 3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa (raw, json)
Hash identifier: vPkGIHgQPJ1VAQ3X3HAo9z/KW3qD/rBAtvMfS+J6XPE=
Subject key identifier: 0D:65:B3:B2:AC:77:D0:76:8A:CD:BE:3E:EF:B7:89:EF:9F:B5:C8:0D
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0A79
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa
Signing time: Sat 02 Mar 2024 20:28:47 +0000
ROA not before: Sat 02 Mar 2024 20:28:47 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9311
IP address blocks: 43.246.128.0/24 maxlen: 24
43.246.130.0/24 maxlen: 24
43.246.196.0/24 maxlen: 24
43.246.198.0/24 maxlen: 24
103.8.85.0/24 maxlen: 24
103.15.32.0/24 maxlen: 24
103.15.79.0/24 maxlen: 24
103.24.161.0/24 maxlen: 24
103.24.162.0/24 maxlen: 24
103.24.163.0/24 maxlen: 24
103.248.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 04:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2681 (0xa79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Mar 2 20:28:47 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65e38bff-f55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:bc:37:11:90:9d:31:a3:17:1f:1d:93:e1:
f2:e1:e2:d1:7b:b3:ac:80:22:c5:b9:61:36:e0:a9:
3f:ad:37:28:cf:cd:83:d6:83:26:59:3d:3c:ac:3e:
55:62:c5:95:a2:d1:b9:b4:74:60:e7:ff:de:7e:97:
09:85:a4:3a:20:9e:4f:2a:4b:fd:59:d9:d0:cf:1e:
b2:25:6a:51:17:0d:dc:88:ba:e1:6a:26:2f:1b:4c:
f0:70:24:ca:f4:11:c8:f4:91:b9:a4:af:15:64:36:
04:82:0a:26:9b:b6:6f:6c:82:d2:e0:45:56:16:bf:
a9:fe:73:e2:3c:3e:85:ba:33:75:e0:4d:78:b5:72:
f1:5e:14:0a:10:41:ce:9a:48:c7:39:5a:9a:43:ea:
bb:55:a6:56:77:3f:05:cf:57:ff:f1:ea:83:e4:61:
5a:6d:b6:ed:e1:d5:db:b8:61:a8:a0:0a:13:03:24:
60:4a:61:73:5a:8d:11:77:da:81:ac:f6:67:71:4a:
88:7e:6a:66:9a:33:23:df:69:0b:92:b2:58:9d:d1:
b3:6d:33:ed:9b:92:49:1b:27:24:4b:12:dd:4b:b2:
78:86:14:9a:f1:bc:48:24:75:4a:b4:f1:8c:66:86:
82:33:f4:3b:e5:10:a8:1e:b8:a4:62:64:29:55:27:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:B3:B2:AC:77:D0:76:8A:CD:BE:3E:EF:B7:89:EF:9F:B5:C8:0D
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.128.0/24
43.246.130.0/24
43.246.196.0/24
43.246.198.0/24
103.8.85.0/24
103.15.32.0/24
103.15.79.0/24
103.24.161.0-103.24.163.255
103.248.150.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8d:5f:fd:6d:ca:72:1a:0e:1d:8e:6f:04:fa:07:c4:dd:82:
55:f2:09:6f:47:1f:19:77:6d:c3:5d:47:62:52:74:0e:25:bd:
e6:a5:3d:cf:6d:af:55:98:06:e7:0a:63:58:00:56:19:c0:45:
03:8f:8b:88:45:14:7d:7a:4b:bc:d2:ac:d7:06:19:f3:8f:bc:
04:88:e5:97:3f:e1:01:4f:49:c4:ea:e3:73:23:cb:77:a2:06:
cf:22:58:b1:c6:12:4d:03:cd:e7:9f:97:3d:c8:d3:a5:2c:07:
dc:b8:c2:08:ec:a6:f0:27:73:3e:10:03:cf:45:33:9e:f2:54:
ac:b6:fb:23:10:60:29:5e:ce:b0:d2:59:88:22:2f:95:28:38:
33:67:2a:a9:41:08:c7:89:9a:93:03:73:9b:a1:da:09:3e:95:
da:18:8d:1d:dc:da:a1:48:cf:20:97:e2:bc:f3:d4:78:0b:44:
95:0d:78:d4:88:18:b1:a7:62:d0:7e:75:9f:0b:e4:ec:50:51:
45:86:eb:ba:e4:e1:dd:34:62:eb:a7:8c:d9:1a:c5:57:7b:1a:
2f:da:69:37:5a:f2:4f:0b:ba:d9:7b:7b:7d:03:ae:25:47:b6:
d4:44:f8:40:80:71:3f:c5:0d:b4:6c:09:d6:71:41:c0:07:02:
dd:39:54:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:27:13 2024 by rpki-client on console-ams.rpki-client.org