Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FCC41A441C2E11EE9A9A9940C4F9AE02.roa
File: FCC41A441C2E11EE9A9A9940C4F9AE02.roa (raw, json)
Hash identifier: 8dvEBxxQFDHIRAcF+wfodMq1Ln7tmjimiRqkt0SyyPA=
Subject key identifier: 2E:D5:A0:F7:9A:61:17:A2:9A:1B:96:F8:3B:D8:56:03:C3:97:6E:E7
Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial: 0849
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FCC41A441C2E11EE9A9A9940C4F9AE02.roa
Signing time: Wed 26 Jul 2023 01:47:23 +0000
ROA not before: Wed 26 Jul 2023 01:47:23 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 141711
IP address blocks: 103.74.21.0/24 maxlen: 24
103.235.76.0/24 maxlen: 24
103.235.77.0/24 maxlen: 24
103.235.78.0/24 maxlen: 24
103.235.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Validity
Not Before: Jul 26 01:47:23 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64c07b2a-0b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:91:f2:9b:20:21:c0:7a:f2:95:d6:48:ed:
7c:0d:e3:2f:bd:72:f0:88:59:60:af:50:cd:3f:58:
9c:a5:1a:fb:4b:2e:46:e8:48:94:b0:e9:66:08:bb:
2a:d6:73:5d:78:79:c4:6c:5a:5f:15:e6:77:ac:cd:
9b:d8:fb:a7:93:3b:a0:c4:69:4b:0e:cb:3c:59:e2:
c6:82:0e:6c:48:cb:d3:dc:a7:0f:a6:a2:a4:c0:c7:
5b:49:dc:f8:37:ff:c0:4b:37:bd:63:1a:02:e0:c1:
49:b5:0f:8e:78:76:2f:e6:b2:b8:91:e0:cc:09:8a:
4b:ec:0f:06:c9:98:fc:01:41:0c:5a:88:44:3d:65:
aa:d3:b7:f0:a1:c7:02:8c:30:4c:97:73:72:d8:82:
1e:c7:3a:a3:b1:6e:1d:25:91:71:8f:4c:64:89:97:
98:97:40:4b:7d:22:45:3d:54:26:3f:3b:dd:f8:a9:
74:8f:ce:8e:3c:26:14:ef:27:48:99:c6:3d:92:4d:
d5:a5:e3:90:86:32:5e:cd:d3:14:08:73:10:14:4e:
67:43:87:ed:16:e0:0e:4d:55:58:51:ce:23:2d:fd:
d9:85:a7:cf:ed:cd:a1:80:fc:16:2d:ce:a6:93:56:
06:b2:b3:f4:c5:d5:a2:e3:a8:b3:54:6f:8c:40:cf:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D5:A0:F7:9A:61:17:A2:9A:1B:96:F8:3B:D8:56:03:C3:97:6E:E7
X509v3 Authority Key Identifier:
keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FCC41A441C2E11EE9A9A9940C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.21.0/24
103.235.76.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:4c:d0:07:54:3c:73:10:4b:85:85:51:35:76:a5:6f:66:14:
0a:91:d7:cd:50:77:0b:7c:02:d0:c9:1f:66:da:c1:14:49:ef:
50:d1:dc:a7:e4:74:9e:90:63:dd:72:63:27:74:b1:10:73:19:
8b:5e:e8:3e:e9:da:45:b6:62:28:4c:76:de:d2:58:80:04:5a:
ca:8d:90:d5:92:87:67:00:69:b2:e3:4c:4e:7c:d3:6a:f6:db:
a5:7a:50:4e:ba:f5:f9:94:9d:9d:b1:21:89:33:8d:ca:fe:c0:
42:8e:11:0e:2e:be:d5:99:c7:b8:e2:54:90:0a:14:ef:28:a2:
0c:93:bc:29:87:3c:25:19:93:af:6e:e1:3b:3a:c4:c9:21:37:
05:7f:16:f7:b8:7f:d9:20:77:5a:50:08:1c:55:bf:70:bd:88:
e1:62:90:38:d5:32:3c:a7:f8:e2:55:f4:df:92:51:89:91:39:
ca:23:df:d9:66:92:e0:8a:0f:93:22:46:c1:e4:22:f7:aa:e6:
bd:a7:89:d1:84:71:4c:64:2c:46:df:5e:f6:29:86:16:51:2f:
76:f4:14:0b:ed:a2:de:a1:52:b2:91:70:0f:9e:2f:ae:70:70:
18:d5:9a:0f:ae:45:c4:dc:a3:7c:c4:f7:c4:4a:ba:0e:b4:cc:
5b:f4:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 12:59:47 2023 by rpki-client on console-ams.rpki-client.org