Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/C431AFEA9AC611EEA2AF8862C4F9AE02.roa
File: C431AFEA9AC611EEA2AF8862C4F9AE02.roa (raw, json)
Hash identifier: iiTC9m+QtYSI4z2HSIYhM0jfItmwnEZ99aSRXBhzfJg=
Subject key identifier: DF:E3:3A:20:37:C0:AA:20:80:0D:24:8A:1E:8D:76:B0:09:02:32:97
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 09C4
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/C431AFEA9AC611EEA2AF8862C4F9AE02.roa
Signing time: Sat 02 Mar 2024 21:29:57 +0000
ROA not before: Sat 02 Mar 2024 21:29:57 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 24105
IP address blocks: 27.255.0.0/24 maxlen: 24
27.255.1.0/24 maxlen: 24
27.255.2.0/24 maxlen: 24
27.255.3.0/24 maxlen: 24
27.255.4.0/24 maxlen: 24
27.255.5.0/24 maxlen: 24
27.255.6.0/24 maxlen: 24
27.255.7.0/24 maxlen: 24
27.255.8.0/24 maxlen: 24
27.255.9.0/24 maxlen: 24
27.255.10.0/24 maxlen: 24
27.255.11.0/24 maxlen: 24
27.255.12.0/24 maxlen: 24
27.255.13.0/24 maxlen: 24
27.255.14.0/24 maxlen: 24
27.255.15.0/24 maxlen: 24
27.255.16.0/24 maxlen: 24
27.255.17.0/24 maxlen: 24
27.255.18.0/24 maxlen: 24
27.255.19.0/24 maxlen: 24
27.255.20.0/24 maxlen: 24
27.255.21.0/24 maxlen: 24
27.255.22.0/24 maxlen: 24
27.255.23.0/24 maxlen: 24
27.255.24.0/24 maxlen: 24
27.255.25.0/24 maxlen: 24
27.255.26.0/24 maxlen: 24
27.255.27.0/24 maxlen: 24
27.255.28.0/24 maxlen: 24
27.255.29.0/24 maxlen: 24
27.255.30.0/24 maxlen: 24
27.255.31.0/24 maxlen: 24
27.255.32.0/24 maxlen: 24
27.255.33.0/24 maxlen: 24
27.255.34.0/24 maxlen: 24
27.255.35.0/24 maxlen: 24
27.255.36.0/24 maxlen: 24
27.255.37.0/24 maxlen: 24
27.255.38.0/24 maxlen: 24
27.255.39.0/24 maxlen: 24
27.255.40.0/24 maxlen: 24
27.255.41.0/24 maxlen: 24
27.255.42.0/24 maxlen: 24
27.255.43.0/24 maxlen: 24
27.255.44.0/24 maxlen: 24
27.255.45.0/24 maxlen: 24
27.255.46.0/24 maxlen: 24
27.255.47.0/24 maxlen: 24
27.255.48.0/24 maxlen: 24
27.255.49.0/24 maxlen: 24
27.255.50.0/24 maxlen: 24
27.255.51.0/24 maxlen: 24
27.255.52.0/24 maxlen: 24
27.255.53.0/24 maxlen: 24
27.255.54.0/24 maxlen: 24
27.255.55.0/24 maxlen: 24
27.255.56.0/24 maxlen: 24
27.255.57.0/24 maxlen: 24
27.255.58.0/24 maxlen: 24
27.255.59.0/24 maxlen: 24
27.255.60.0/24 maxlen: 24
27.255.61.0/24 maxlen: 24
27.255.62.0/24 maxlen: 24
27.255.63.0/24 maxlen: 24
103.17.202.0/24 maxlen: 24
180.92.128.0/24 maxlen: 24
180.92.129.0/24 maxlen: 24
180.92.130.0/24 maxlen: 24
180.92.131.0/24 maxlen: 24
180.92.132.0/24 maxlen: 24
180.92.133.0/24 maxlen: 24
180.92.134.0/24 maxlen: 24
180.92.135.0/24 maxlen: 24
180.92.136.0/24 maxlen: 24
180.92.137.0/24 maxlen: 24
180.92.138.0/24 maxlen: 24
180.92.139.0/24 maxlen: 24
180.92.140.0/24 maxlen: 24
180.92.141.0/24 maxlen: 24
180.92.142.0/24 maxlen: 24
180.92.143.0/24 maxlen: 24
180.92.144.0/24 maxlen: 24
180.92.145.0/24 maxlen: 24
180.92.146.0/24 maxlen: 24
180.92.147.0/24 maxlen: 24
180.92.148.0/24 maxlen: 24
180.92.149.0/24 maxlen: 24
180.92.150.0/24 maxlen: 24
180.92.151.0/24 maxlen: 24
180.92.152.0/24 maxlen: 24
180.92.153.0/24 maxlen: 24
180.92.154.0/24 maxlen: 24
180.92.155.0/24 maxlen: 24
180.92.156.0/24 maxlen: 24
180.92.157.0/24 maxlen: 24
180.92.158.0/24 maxlen: 24
180.92.159.0/24 maxlen: 24
192.135.90.0/24 maxlen: 24
192.135.91.0/24 maxlen: 24
192.144.78.0/24 maxlen: 24
192.144.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 09:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Mar 2 21:29:57 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e39a55-87b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:91:22:d6:2d:9e:9b:d3:7d:61:af:41:26:
0d:e4:83:49:d0:54:fb:87:6c:9d:5d:28:53:c8:da:
85:3e:ed:63:3a:cc:2b:99:c6:24:db:fd:f6:22:eb:
30:55:3b:18:46:47:56:70:75:9a:bd:5c:75:3a:c7:
c7:fa:77:67:58:2a:58:cc:a0:49:1a:51:2f:ce:71:
41:9c:ca:3a:62:3e:78:99:01:16:13:39:55:4b:b7:
93:e5:49:5b:7e:8e:cf:19:d5:ee:2e:9e:35:65:70:
5b:9d:2f:b0:8f:25:36:4c:4d:fd:0a:4b:22:84:18:
9e:14:27:59:87:4f:17:4e:5b:da:60:52:4c:18:98:
52:f7:f1:ff:e0:2b:a4:d7:f0:ab:d2:f3:ac:e8:cf:
2a:ea:f0:fa:15:9b:de:bf:ed:c4:08:7d:0a:43:3a:
a6:8e:ae:ed:de:52:a3:5a:c7:f5:d5:c8:3d:69:51:
57:7a:51:6f:76:0d:be:af:93:25:62:5f:30:25:a2:
81:81:be:03:52:11:63:84:d3:4b:5e:cf:0f:26:a9:
d4:06:f7:02:d7:4d:df:39:db:72:d1:40:22:a4:9e:
9e:c8:f2:b3:44:6a:80:65:17:95:ac:37:fb:bf:8c:
39:44:66:df:f9:ea:99:80:6f:fd:61:7d:f1:a7:8d:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E3:3A:20:37:C0:AA:20:80:0D:24:8A:1E:8D:76:B0:09:02:32:97
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/C431AFEA9AC611EEA2AF8862C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.255.0.0/18
103.17.202.0/24
180.92.128.0/19
192.135.90.0/23
192.144.78.0/23
Signature Algorithm: sha256WithRSAEncryption
78:b6:74:0c:97:b9:bd:cc:19:84:c8:96:f9:4c:94:70:ce:16:
bc:e3:4f:d6:b5:b5:fd:1a:3a:e8:16:e0:c3:da:93:96:ca:83:
d1:00:b8:79:1f:7e:f6:d2:56:e8:77:c0:1f:45:7f:ca:2a:ca:
c8:ba:22:df:58:77:2d:3e:2e:68:fc:a5:bf:04:4b:36:58:73:
68:d4:b1:cb:69:63:49:24:37:cd:6c:f1:36:a1:c8:c2:d1:5e:
fb:d6:69:96:d8:30:75:72:c3:b5:63:3d:a4:0a:a7:9a:90:dd:
6c:9a:4f:f6:66:af:2c:f6:79:32:0a:63:92:0e:b2:66:76:3e:
16:26:3c:7f:81:15:32:34:91:94:36:8c:6d:22:a7:1a:69:f3:
80:94:a5:cc:47:29:50:d2:98:1b:cd:a9:c4:fc:db:4b:5c:7c:
1a:0a:f6:a8:e3:63:8b:3c:2a:e5:e9:b9:80:46:75:ec:1e:c8:
9d:91:09:4b:18:94:41:7b:1e:57:95:d1:81:5f:a4:14:22:09:
b5:0b:e0:49:95:5a:b2:61:9d:74:cf:ae:53:ad:f0:58:c6:33:
19:3b:d5:30:f1:a0:a0:19:7b:e8:7a:66:54:d7:fe:8f:f6:9a:
00:30:b0:a8:11:f6:c2:78:3a:4e:06:2c:74:69:d9:05:f4:98:
7e:a0:41:4c
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz
MjI2NThDMkEwHhcNMjQwMzAyMjEyOTU3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUzOWE1NS04N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEqRItYtnpvTfWGvQSYN5INJ0FT7h2ydXShTyNqFPu1jOswrmcYk2/32Iusw
VTsYRkdWcHWavVx1OsfH+ndnWCpYzKBJGlEvznFBnMo6Yj54mQEWEzlVS7eT5Ulb
fo7PGdXuLp41ZXBbnS+wjyU2TE39CksihBieFCdZh08XTlvaYFJMGJhS9/H/4Cuk
1/Cr0vOs6M8q6vD6FZvev+3ECH0KQzqmjq7t3lKjWsf11cg9aVFXelFvdg2+r5Ml
Yl8wJaKBgb4DUhFjhNNLXs8PJqnUBvcC103fOdty0UAipJ6eyPKzRGqAZReVrDf7
v4w5RGbf+eqZgG/9YX3xp4358QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFN/jOiA3
wKoggA0kih6NdrAJAjKXMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF
MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUI2RUIvMDEzOTFCMDA4RTJCMTFFQUJGODZEQTRDQzRGOUFFMDIvQzQzMUFGRUE5
QUM2MTFFRUEyQUY4ODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAYb/wADBABnEcoDBAW0XIADBAHAh1oDBAHAkE4wDQYJKoZI
hvcNAQELBQADggEBAHi2dAyXub3MGYTIlvlMlHDOFrzjT9a1tf0aOugW4MPak5bK
g9EAuHkffvbSVuh3wB9Ff8oqysi6It9Ydy0+Lmj8pb8ESzZYc2jUsctpY0kkN81s
8TahyMLRXvvWaZbYMHVyw7VjPaQKp5qQ3WyaT/Zmryz2eTIKY5IOsmZ2PhYmPH+B
FTI0kZQ2jG0ipxpp84CUpcxHKVDSmBvNqcT820tcfBoK9qjjY4s8KuXpuYBGdewe
yJ2RCUsYlEF7HleV0YFfpBQiCbUL4EmVWrJhnXTPrlOt8FjGMxk71TDxoKAZe+h6
ZlTX/o/2mgAwsKgR9sJ4Ok4GLHRp2QX0mH6gQUw=
-----END CERTIFICATE-----
Generated at Mon May 6 13:59:33 2024 by rpki-client on console-fra.rpki-client.org