Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/AFD0A2DCCAA211EB8F71B879C4F9AE02.roa
File: AFD0A2DCCAA211EB8F71B879C4F9AE02.roa (raw, json)
Hash identifier: m9pZVYYwE+tXhsKZ9mmWis710y+D4capRiOIIEpYQF8=
Subject key identifier: 28:32:B1:FF:8D:DE:78:4C:1F:B2:78:43:69:F8:70:1E:69:92:60:49
Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial: 0898
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/AFD0A2DCCAA211EB8F71B879C4F9AE02.roa
Signing time: Wed 22 Nov 2023 21:28:58 +0000
ROA not before: Wed 22 Nov 2023 21:28:58 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 133141
IP address blocks: 103.74.20.0/24 maxlen: 24
103.74.21.0/24 maxlen: 24
103.74.22.0/24 maxlen: 24
103.74.23.0/24 maxlen: 24
103.235.76.0/24 maxlen: 24
103.235.77.0/24 maxlen: 24
103.235.78.0/24 maxlen: 24
103.235.79.0/24 maxlen: 24
2407:1ec0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 01 Feb 2024 20:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Validity
Not Before: Nov 22 21:28:58 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=655e729a-a6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:c1:fc:77:57:ed:5b:0d:d0:8d:44:a1:47:
04:b4:44:e5:5d:ab:e0:3c:87:7e:ab:2b:04:73:05:
c3:05:b0:42:fb:21:fd:38:1b:6c:e6:f7:6d:38:90:
4b:6e:98:90:53:5e:a5:31:d8:2b:54:9a:2d:cb:51:
e1:a4:37:86:8f:5c:8f:92:0d:eb:7f:84:89:fd:f8:
3f:a4:08:45:42:d2:90:99:40:e0:5e:4a:6d:91:b9:
75:f0:67:0a:76:67:9b:cf:c3:3e:9d:17:5b:ed:8b:
60:bd:a9:67:f3:98:98:ed:de:ce:59:2a:82:1e:da:
ae:f7:44:6f:96:1e:f0:b8:ba:90:fe:e1:2e:2f:12:
74:51:62:24:24:2d:9b:79:03:b2:35:98:63:4d:9b:
65:aa:df:ed:06:49:bd:70:6d:9d:71:ab:8e:91:be:
bb:b9:a2:1f:10:03:21:5f:ce:4e:ae:7c:e9:99:90:
04:c1:44:b4:99:46:94:07:fc:cc:b7:2d:d0:74:a0:
a2:07:b6:83:60:5e:02:16:22:33:56:f7:b5:a4:ab:
dd:78:ac:b9:90:df:d0:fd:e6:8e:8e:13:ea:67:a8:
b4:23:01:f2:0e:32:e9:74:d4:e0:5c:2f:4e:22:e6:
d8:4d:42:8f:cc:b5:30:b2:90:07:60:74:0d:1d:e4:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:32:B1:FF:8D:DE:78:4C:1F:B2:78:43:69:F8:70:1E:69:92:60:49
X509v3 Authority Key Identifier:
keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/AFD0A2DCCAA211EB8F71B879C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.20.0/22
103.235.76.0/22
IPv6:
2407:1ec0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:37:f8:40:f3:bc:8b:87:41:d5:27:5e:c6:bd:77:a0:2f:2e:
40:99:a3:ca:7c:96:1f:ae:df:ae:b8:22:66:a3:a0:7e:a0:eb:
e1:83:88:de:12:14:f8:35:7b:e7:e6:bc:85:35:e4:6d:f9:c1:
47:f1:53:ee:db:1f:f3:c5:33:bc:41:a8:0e:db:c4:0d:85:c0:
02:75:60:ac:d2:1a:36:5b:b1:06:cd:e7:87:40:31:03:e6:72:
51:9c:21:58:d8:c4:b7:d7:cc:01:90:27:95:e7:d2:4c:c0:60:
45:c2:55:b9:37:e1:1e:a5:8a:19:3b:d9:b9:1b:29:2f:73:e6:
c2:11:6b:2d:b2:ba:ae:ca:71:21:07:21:c8:b2:b1:66:6d:91:
2c:7b:17:43:84:80:5d:97:3f:06:4d:96:28:59:bc:cc:32:72:
e6:2a:e8:15:fb:0d:11:50:cb:fa:c2:c7:3c:4e:05:88:bd:d4:
68:75:c0:e1:6f:58:31:c0:2a:05:64:c1:ee:6f:68:37:2e:f8:
5b:30:33:18:42:46:84:e6:4f:57:fa:e0:0e:0e:3e:72:62:14:
d1:b5:4e:80:03:5e:89:9f:40:5e:74:ef:96:85:50:7a:44:c9:
09:f6:e9:2b:31:53:6b:83:f2:cd:d6:b8:4c:98:e1:40:ae:0c:
4a:b1:09:6c
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy
MzYwRkQwRjUwHhcNMjMxMTIyMjEyODU4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTVlNzI5YS1hNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1GnB/HdX7VsN0I1EoUcEtETlXavgPId+qysEcwXDBbBC+yH9OBts5vdtOJBL
bpiQU16lMdgrVJoty1HhpDeGj1yPkg3rf4SJ/fg/pAhFQtKQmUDgXkptkbl18GcK
dmebz8M+nRdb7Ytgvaln85iY7d7OWSqCHtqu90Rvlh7wuLqQ/uEuLxJ0UWIkJC2b
eQOyNZhjTZtlqt/tBkm9cG2dcauOkb67uaIfEAMhX85OrnzpmZAEwUS0mUaUB/zM
ty3QdKCiB7aDYF4CFiIzVve1pKvdeKy5kN/Q/eaOjhPqZ6i0IwHyDjLpdNTgXC9O
IubYTUKPzLUwspAHYHQNHeSzowIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCgysf+N
3nhMH7J4Q2n4cB5pkmBJMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE
NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvQUZEMEEyREND
QUEyMTFFQjhGNzFCODc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnShQDBAJn60wwDQQCAAIwBwMFACQHHsAwDQYJKoZIhvcN
AQELBQADggEBAGs3+EDzvIuHQdUnXsa9d6AvLkCZo8p8lh+u3664ImajoH6g6+GD
iN4SFPg1e+fmvIU15G35wUfxU+7bH/PFM7xBqA7bxA2FwAJ1YKzSGjZbsQbN54dA
MQPmclGcIVjYxLfXzAGQJ5Xn0kzAYEXCVbk34R6lihk72bkbKS9z5sIRay2yuq7K
cSEHIciysWZtkSx7F0OEgF2XPwZNlihZvMwycuYq6BX7DRFQy/rCxzxOBYi91Gh1
wOFvWDHAKgVkwe5vaDcu+FswMxhCRoTmT1f64A4OPnJiFNG1ToADXomfQF5075aF
UHpEyQn26SsxU2uD8s3WuEyY4UCuDEqxCWw=
-----END CERTIFICATE-----
Generated at Fri Feb 2 00:26:11 2024 by rpki-client on console-fra.rpki-client.org