Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/7AA1C18E0ED111EEAB62967EC4F9AE02.roa
File: 7AA1C18E0ED111EEAB62967EC4F9AE02.roa (raw, json)
Hash identifier: mi6/lt94wyKp01aQoIx0pVrkf5JDUd1SqfS+x/SQUrI=
Subject key identifier: 7B:74:0F:25:DC:B5:BE:47:3C:D5:43:8E:10:59:A3:D7:70:7E:22:6A
Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Certificate serial: 18
Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/7AA1C18E0ED111EEAB62967EC4F9AE02.roa
Signing time: Mon 19 Jun 2023 18:45:36 +0000
ROA not before: Mon 19 Jun 2023 18:45:36 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 151396
IP address blocks: 103.197.104.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Validity
Not Before: Jun 19 18:45:36 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6490a250-afc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:bb:dd:dc:fd:ab:14:51:e9:45:f2:2f:ed:
fc:6c:2f:df:70:79:cc:4e:e6:d6:1a:de:76:37:2e:
01:b1:80:5b:b1:78:56:64:b1:9a:e3:64:d7:80:3c:
86:14:99:4d:3c:02:b9:1c:58:69:d6:4c:f7:26:17:
51:6b:ef:e9:ae:bd:eb:6d:33:2f:38:d8:30:59:1b:
86:67:03:90:83:ea:14:59:7e:0b:98:54:40:e5:46:
74:25:70:5b:47:81:1c:42:0c:0d:66:b2:a5:a4:06:
54:19:1a:ad:63:0c:22:6a:98:30:4b:0f:e3:b3:96:
8f:e6:79:8b:55:1f:d8:ec:42:19:6d:d1:53:30:a6:
f8:77:4e:dc:96:8f:13:b6:55:b7:68:f2:7f:bb:94:
23:8c:b2:46:70:fe:7e:51:0f:d4:39:30:a5:cc:90:
f0:bb:86:ee:e3:d0:d4:38:cb:52:2c:29:33:02:17:
2d:00:9d:4f:09:4c:69:a5:d8:ac:6e:ae:1d:9a:a0:
2b:6d:9b:cc:90:de:8d:d9:05:2e:63:c8:1e:d0:68:
c9:db:ba:ca:a1:34:60:3d:09:e4:ee:c4:46:d7:33:
f3:ef:d6:10:18:f7:84:f0:ec:b9:40:ae:5b:5d:7c:
72:c1:e4:43:da:bb:7f:48:2e:4e:4b:af:59:65:2f:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:74:0F:25:DC:B5:BE:47:3C:D5:43:8E:10:59:A3:D7:70:7E:22:6A
X509v3 Authority Key Identifier:
keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/7AA1C18E0ED111EEAB62967EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.104.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:9d:3f:a2:b0:43:89:31:b0:5a:80:b3:03:0d:12:ce:8a:0f:
9d:17:02:0c:fc:ec:00:31:75:a3:5b:23:26:44:77:e1:82:d5:
d5:a5:b4:d5:46:60:de:07:7c:05:9c:43:4b:52:bd:09:78:7a:
b5:8e:b8:ac:6f:32:fd:6f:d3:8a:83:54:12:be:98:ee:a5:f1:
23:86:25:2e:bc:62:6b:e1:e7:e3:7d:ee:b5:ea:16:b6:89:2e:
fe:fc:ed:d6:68:bc:13:04:12:bf:48:8c:a8:7c:4c:a0:6f:65:
48:53:de:fc:71:95:54:06:76:72:6f:e9:11:f4:b1:3c:2f:0c:
86:b0:f5:26:87:0a:29:e1:cf:b7:c8:0d:d7:0a:5f:00:7c:36:
b9:8b:ad:65:64:14:33:e8:33:6d:05:2c:7b:be:26:6b:fc:1d:
70:1f:7b:65:6e:52:40:81:32:2f:b7:45:b9:61:ae:28:d6:e9:
11:fc:d6:8e:f2:fa:a7:5d:52:e9:06:11:88:8d:fd:82:95:5a:
f2:57:4b:23:e6:3c:5c:9c:dc:98:d5:3c:0a:4c:00:62:7c:2b:
06:a5:ef:ac:38:ee:54:99:01:b5:3f:cc:c7:9d:30:73:15:77:
99:85:f1:3c:ca:19:39:bc:b9:61:36:8f:e2:1b:5c:fa:fb:70:
ec:6a:7b:1f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RjQwNDExMC8GA1UEBRMoRkEwMTI3NDBEQ0E0OTNDQ0UyMDNBRkFBREU4RUJDNzE5
QUFDMjNCNDAeFw0yMzA2MTkxODQ1MzZaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0OTBhMjUwLWFmYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4ALvd3P2rFFHpRfIv7fxsL99wecxO5tYa3nY3LgGxgFuxeFZksZrjZNeAPIYU
mU08ArkcWGnWTPcmF1Fr7+muvettMy842DBZG4ZnA5CD6hRZfguYVEDlRnQlcFtH
gRxCDA1msqWkBlQZGq1jDCJqmDBLD+Ozlo/meYtVH9jsQhlt0VMwpvh3TtyWjxO2
Vbdo8n+7lCOMskZw/n5RD9Q5MKXMkPC7hu7j0NQ4y1IsKTMCFy0AnU8JTGml2Kxu
rh2aoCttm8yQ3o3ZBS5jyB7QaMnbusqhNGA9CeTuxEbXM/Pv1hAY94Tw7LlArltd
fHLB5EPau39ILk5Lr1llL+PXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUe3QPJdy1
vkc81UOOEFmj13B+ImowHwYDVR0jBBgwFoAU+gEnQNykk8ziA6+q3o68cZqsI7Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDA0LzU0NDA4MUQyRjRE
ODExRUQ5ODA0NkM0QUM0RjlBRTAyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLWdFblFOeWtrOHppQTYtcTNvNjhjWnFzSTdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi83QUExQzE4RTBF
RDExMUVFQUI2Mjk2N0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWfFaDANBgkqhkiG9w0BAQsFAAOCAQEAvJ0/orBDiTGwWoCz
Aw0SzooPnRcCDPzsADF1o1sjJkR34YLV1aW01UZg3gd8BZxDS1K9CXh6tY64rG8y
/W/TioNUEr6Y7qXxI4YlLrxia+Hn433uteoWtoku/vzt1mi8EwQSv0iMqHxMoG9l
SFPe/HGVVAZ2cm/pEfSxPC8MhrD1JocKKeHPt8gN1wpfAHw2uYutZWQUM+gzbQUs
e74ma/wdcB97ZW5SQIEyL7dFuWGuKNbpEfzWjvL6p11S6QYRiI39gpVa8ldLI+Y8
XJzcmNU8CkwAYnwrBqXvrDjuVJkBtT/Mx50wcxV3mYXxPMoZOby5YTaP4htc+vtw
7Gp7Hw==
-----END CERTIFICATE-----
Generated at Thu Dec 14 07:42:19 2023 by rpki-client on console-ams.rpki-client.org