Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/096550F8845611E9A0B0DB57C4F9AE02.roa
File: 096550F8845611E9A0B0DB57C4F9AE02.roa (raw, json)
Hash identifier: diZYkFU4Ohq4KfcAagepCJphPCtcY9hWWW6mclLfQB4=
Subject key identifier: 5B:70:5D:7E:4F:86:B5:DE:00:A7:64:3A:25:09:96:99:AB:E8:A6:DA
Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Certificate serial: 0E2F
Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/096550F8845611E9A0B0DB57C4F9AE02.roa
Signing time: Mon 05 Feb 2024 06:24:04 +0000
ROA not before: Mon 05 Feb 2024 06:24:03 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 4767
IP address blocks: 202.8.65.0/24 maxlen: 24
202.8.66.0/24 maxlen: 24
202.8.67.0/24 maxlen: 24
202.8.68.0/24 maxlen: 24
202.8.69.0/24 maxlen: 24
202.8.70.0/24 maxlen: 24
202.8.71.0/24 maxlen: 24
203.159.0.0/18 maxlen: 20
2403:e240::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 Feb 2024 07:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3631 (0xe2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Validity
Not Before: Feb 5 06:24:03 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65c07f03-e799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:29:5c:82:b4:66:e7:0e:1c:76:c3:1b:bd:
a9:5e:f2:fa:31:91:cb:bd:56:d5:c9:50:a4:2f:9b:
19:10:5b:f8:24:48:97:0d:ba:89:f8:d2:23:92:75:
4e:55:51:9b:16:17:2f:1e:82:b6:0e:3f:ee:7a:d9:
b9:31:2e:91:ad:05:5c:fb:9a:1c:1a:2a:96:81:5b:
35:96:5d:1c:68:fc:67:f9:3f:95:04:a0:6d:7d:09:
1c:08:fb:1e:4b:ae:04:5c:c5:cf:39:ea:e1:6a:15:
49:c6:72:2b:05:3d:0c:27:6d:e1:b1:f0:a0:ce:ca:
14:32:bf:5a:ca:32:b9:01:b5:ec:56:f1:8d:98:37:
0e:80:89:21:91:dd:c2:48:a3:ab:a4:90:f8:6c:c1:
c8:c9:4b:54:5f:69:02:33:85:88:e8:db:bb:e8:d1:
8a:1e:4e:c8:e3:33:41:67:79:83:8d:71:7f:cc:56:
26:51:32:fe:9d:aa:34:81:37:1a:33:d9:c5:21:b5:
bd:f0:5a:16:32:8f:78:3e:c0:a2:09:9a:57:1f:44:
4f:cf:b3:98:58:91:05:9b:24:80:ed:85:88:c0:0f:
02:10:46:60:2d:80:aa:84:fe:40:ab:ff:4b:66:06:
d5:9f:92:28:04:f1:7a:f2:d9:0b:9e:0a:09:02:82:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:5D:7E:4F:86:B5:DE:00:A7:64:3A:25:09:96:99:AB:E8:A6:DA
X509v3 Authority Key Identifier:
keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/096550F8845611E9A0B0DB57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.8.65.0-202.8.71.255
203.159.0.0/18
IPv6:
2403:e240::/32
Signature Algorithm: sha256WithRSAEncryption
0c:12:0f:a3:03:ba:df:05:1b:02:79:20:b7:15:29:e8:8c:40:
a2:e8:a3:73:06:9f:f7:9c:f0:52:8a:77:a9:b8:e6:45:df:14:
ba:62:21:f4:b7:cb:38:a7:b9:d5:b5:fb:ab:2a:f3:9c:ea:a4:
ce:c8:dd:26:27:3e:71:37:d6:14:f1:dc:4d:f1:30:c4:5e:12:
81:55:24:49:91:9b:36:53:4b:6a:fb:a3:5f:c8:ec:db:53:2a:
a2:b1:3e:2f:a0:89:1e:dd:a6:42:c9:3a:66:82:c2:06:fa:aa:
11:b2:05:03:d3:d3:0c:2d:ff:ba:e7:3c:d2:94:d7:27:fe:27:
c4:01:5e:72:c9:f2:3b:82:3c:0a:26:bc:b7:83:87:d8:cf:4e:
d3:6d:c8:90:f4:0c:2a:54:69:89:e6:b2:10:55:80:9f:ec:64:
84:14:14:9e:bd:f5:aa:bf:7f:15:a3:42:2a:ed:88:15:2b:14:
a8:8e:25:12:08:1e:1f:20:2b:7e:43:77:fd:6f:48:da:50:64:
73:bc:f6:bd:24:c3:b2:b5:fd:88:b2:f5:f7:5f:b1:c8:46:48:
d6:d3:32:b9:3f:7a:f5:03:56:8e:4e:7e:d3:a6:b8:e5:78:e2:
e9:77:14:f3:57:b8:47:28:4f:39:95:24:f0:25:73:a7:83:94:
19:5b:63:6a
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgICDi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4
ODYxRkRDRTAwHhcNMjQwMjA1MDYyNDAzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWMwN2YwMy1lNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6wkpXIK0ZucOHHbDG72pXvL6MZHLvVbVyVCkL5sZEFv4JEiXDbqJ+NIjknVO
VVGbFhcvHoK2Dj/uetm5MS6RrQVc+5ocGiqWgVs1ll0caPxn+T+VBKBtfQkcCPse
S64EXMXPOerhahVJxnIrBT0MJ23hsfCgzsoUMr9ayjK5AbXsVvGNmDcOgIkhkd3C
SKOrpJD4bMHIyUtUX2kCM4WI6Nu76NGKHk7I4zNBZ3mDjXF/zFYmUTL+nao0gTca
M9nFIbW98FoWMo94PsCiCZpXH0RPz7OYWJEFmySA7YWIwA8CEEZgLYCqhP5Aq/9L
ZgbVn5IoBPF68tkLngoJAoLNYQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFtwXX5P
hrXeAKdkOiUJlpmr6KbaMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2
NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFGMDIvRUFDRDQ4NzY3NjRBMTFFOThDODdCNTgyQzRGOUFFMDIvMDk2NTUwRjg4
NDU2MTFFOUEwQjBEQjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E
LTArMBoEAgABMBQwDAMEAMoIQQMEA8oIQAMEBsufADANBAIAAjAHAwUAJAPiQDAN
BgkqhkiG9w0BAQsFAAOCAQEADBIPowO63wUbAnkgtxUp6IxAouijcwaf95zwUop3
qbjmRd8UumIh9LfLOKe51bX7qyrznOqkzsjdJic+cTfWFPHcTfEwxF4SgVUkSZGb
NlNLavujX8js21MqorE+L6CJHt2mQsk6ZoLCBvqqEbIFA9PTDC3/uuc80pTXJ/4n
xAFecsnyO4I8Cia8t4OH2M9O023IkPQMKlRpieayEFWAn+xkhBQUnr31qr9/FaNC
Ku2IFSsUqI4lEggeHyArfkN3/W9I2lBkc7z2vSTDsrX9iLL191+xyEZI1tMyuT96
9QNWjk5+06a45Xji6XcU81e4RyhPOZUk8CVzp4OUGVtjag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org