Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/9D160050774811EABB6E0C0AC4F9AE02.roa
File: 9D160050774811EABB6E0C0AC4F9AE02.roa (raw, json)
Hash identifier: EHDjB7gNIxEpQKpMHFPGwm1U8PLGwI2mES3yEooqQ+E=
Subject key identifier: 6B:A9:B2:66:DF:B0:A8:AD:C9:D5:6F:97:AC:59:B1:C3:82:E1:F1:EE
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 33FD
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/9D160050774811EABB6E0C0AC4F9AE02.roa
Signing time: Thu 08 Jun 2023 15:20:50 +0000
ROA not before: Thu 08 Jun 2023 15:20:50 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138157
IP address blocks: 114.130.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Nov 2023 07:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13309 (0x33fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Jun 8 15:20:50 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6481f1d2-c30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:54:3c:f6:83:6a:ff:1f:88:8c:62:86:b9:
99:f2:9c:79:49:0a:34:34:79:4f:68:17:24:1f:46:
14:7a:f5:1f:49:fa:b4:ce:d7:1e:8a:08:73:dd:3a:
0d:de:bb:8a:68:49:df:25:bb:3a:94:02:7e:10:de:
62:db:9e:ce:60:a1:8d:94:c5:24:ad:1b:48:4f:45:
43:32:11:81:c7:ce:8f:b1:20:3a:91:c6:00:75:c3:
20:6e:fb:d4:c9:bd:31:f6:bc:42:09:6f:7f:ee:1c:
c6:60:f4:c7:6b:57:7a:36:60:45:78:9f:90:43:80:
de:0e:0e:57:b2:d6:e1:07:20:cc:92:97:6f:79:df:
44:da:31:de:fe:66:7e:bf:f6:5a:97:bd:67:3a:e4:
75:8d:93:96:fc:92:41:7e:b4:d2:28:8b:7d:5b:f3:
5d:13:60:ee:e9:ac:dc:53:1a:d5:61:8e:41:f5:9c:
f0:90:c1:60:54:f5:7b:38:62:6b:7b:96:8a:b5:c4:
1e:7e:07:88:8b:33:d1:0f:ec:82:fd:53:7f:2f:4c:
43:87:c5:01:e6:08:ce:ed:84:e3:fc:4b:94:14:74:
af:30:6d:fb:3b:1a:89:1c:ba:3e:df:c2:07:a7:54:
c8:59:58:05:d5:d2:1c:a6:d4:1c:a4:6e:6d:05:21:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:B2:66:DF:B0:A8:AD:C9:D5:6F:97:AC:59:B1:C3:82:E1:F1:EE
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/9D160050774811EABB6E0C0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.130.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f9:dc:88:29:c5:42:b8:1b:91:b5:2e:e4:66:f2:9f:bd:70:
6e:80:ee:d1:40:0f:19:e9:85:84:78:f5:ce:54:39:6f:24:c4:
c3:8b:1a:46:58:8c:c5:00:5b:19:f4:8b:a6:6b:52:49:3e:fe:
0d:f9:f9:40:33:b8:32:9e:a7:9e:77:ad:da:b7:01:20:0d:bb:
f4:fe:9d:e8:eb:fd:4f:18:19:04:aa:d9:4f:24:13:5c:a1:fa:
33:82:d7:d7:88:6a:af:46:f7:89:14:48:9b:21:69:96:ed:69:
d2:d4:46:ff:a8:e1:3f:3c:50:3c:2e:84:fb:c6:fc:e0:ff:07:
5b:8f:19:5e:67:9a:cd:7d:ad:cf:5d:e4:eb:dd:1d:ae:4c:ab:
a2:ed:ff:ed:81:d9:db:23:9d:16:1d:2f:d5:51:05:55:27:95:
1c:33:bf:e2:e6:8f:38:93:ca:56:b2:db:59:eb:fb:c4:bb:d5:
fe:cf:5c:59:88:35:a7:d3:c8:de:c7:42:56:eb:60:3e:76:af:
65:72:d1:37:0d:e1:61:6e:eb:48:3f:80:68:de:ac:a0:7c:e9:
1f:7c:b6:2e:63:d0:71:31:3a:ca:dc:d0:62:1b:89:5a:2f:c2:
7d:86:ab:73:2a:77:4c:c5:e5:87:51:d3:d7:32:72:aa:d0:6f:
9a:e6:b0:d7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjMwNjA4MTUyMDUwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDgxZjFkMi1jMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2vtUPPaDav8fiIxihrmZ8px5SQo0NHlPaBckH0YUevUfSfq0ztceighz3ToN
3ruKaEnfJbs6lAJ+EN5i257OYKGNlMUkrRtIT0VDMhGBx86PsSA6kcYAdcMgbvvU
yb0x9rxCCW9/7hzGYPTHa1d6NmBFeJ+QQ4DeDg5XstbhByDMkpdved9E2jHe/mZ+
v/Zal71nOuR1jZOW/JJBfrTSKIt9W/NdE2Du6azcUxrVYY5B9ZzwkMFgVPV7OGJr
e5aKtcQefgeIizPRD+yC/VN/L0xDh8UB5gjO7YTj/EuUFHSvMG37OxqJHLo+38IH
p1TIWVgF1dIcptQcpG5tBSH6mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGupsmbf
sKitydVvl6xZscOC4fHuMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvOUQxNjAwNTA3
NzQ4MTFFQUJCNkUwQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABygkcwDQYJKoZIhvcNAQELBQADggEBAKH53IgpxUK4G5G1
LuRm8p+9cG6A7tFADxnphYR49c5UOW8kxMOLGkZYjMUAWxn0i6ZrUkk+/g35+UAz
uDKep553rdq3ASANu/T+nejr/U8YGQSq2U8kE1yh+jOC19eIaq9G94kUSJshaZbt
adLURv+o4T88UDwuhPvG/OD/B1uPGV5nms19rc9d5OvdHa5Mq6Lt/+2B2dsjnRYd
L9VRBVUnlRwzv+LmjziTylay21nr+8S71f7PXFmINafTyN7HQlbrYD52r2Vy0TcN
4WFu60g/gGjerKB86R98ti5j0HExOsrc0GIbiVovwn2Gq3Mqd0zF5YdR09cycqrQ
b5rmsNc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org