Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/EC57EB9AC85A11EDAFDCD66DC4F9AE02.roa
File: EC57EB9AC85A11EDAFDCD66DC4F9AE02.roa (raw, json)
Hash identifier: 48zFsiQyBCd60Wq1QKraw06JfbBoBkVG4xOOYY54A4g=
Subject key identifier: EE:1F:42:9A:19:89:24:7A:C8:27:70:A1:08:6F:DF:83:E4:46:EF:F7
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3340
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/EC57EB9AC85A11EDAFDCD66DC4F9AE02.roa
Signing time: Fri 19 May 2023 03:50:35 +0000
ROA not before: Fri 19 May 2023 03:50:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7604
IP address blocks: 103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 23
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Oct 2023 07:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13120 (0x3340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: May 19 03:50:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6466f20b-ae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:83:db:2e:88:9f:b5:39:47:56:50:35:34:
1c:85:8a:4e:ad:79:c0:bb:f6:ed:49:31:83:8f:68:
80:76:c5:fb:05:4e:8c:f5:db:ab:18:32:f2:11:ce:
55:d7:d0:27:e0:0e:92:78:55:fe:81:e2:46:69:ee:
73:f3:2d:db:55:86:fc:34:7b:e1:e7:25:de:6d:d4:
9a:07:24:1b:44:ba:ba:4b:c9:83:4c:b2:de:1a:97:
4b:2e:f5:8a:9f:b8:ef:62:9d:b4:34:f7:73:10:ca:
c7:59:72:2f:ae:1b:0f:58:01:ea:1b:32:5e:12:26:
d1:f8:5d:27:98:2c:05:92:2b:31:e3:8d:b5:ab:87:
57:f7:c0:6e:f9:74:a2:48:e1:cf:37:a7:4f:e8:fd:
27:28:fb:ed:fe:d8:3a:49:cc:22:42:d0:a7:b2:26:
41:13:e1:d5:c1:5e:fb:b1:63:e5:75:8d:ee:4f:f3:
60:62:04:36:ff:0a:ab:2e:07:8b:58:86:92:2a:15:
55:93:f9:7e:16:bd:3c:3a:64:e7:d7:a0:04:0e:41:
dc:44:bf:a3:e3:e7:9d:4c:7b:ee:46:0f:bb:56:42:
ca:20:4a:cb:9e:0f:bb:7a:b8:dc:55:ba:9a:1f:a9:
8f:86:3a:12:4d:82:0d:c6:04:1f:00:fa:3a:05:af:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:42:9A:19:89:24:7A:C8:27:70:A1:08:6F:DF:83:E4:46:EF:F7
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/EC57EB9AC85A11EDAFDCD66DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/32
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
74:8e:7d:38:7b:10:dc:a6:59:ad:06:1b:a3:bc:ae:86:54:1f:
b0:d2:10:fa:fe:1a:1a:ff:5f:fb:c8:c2:5e:ab:71:cd:d4:3a:
d2:f8:16:87:be:20:ce:b7:9f:40:f0:fa:a6:a5:92:26:60:11:
22:d1:1c:e2:58:2d:22:a8:f3:0c:fa:b2:a5:be:27:21:2a:80:
1f:8b:43:c4:bf:aa:98:e7:2c:07:8e:c7:1d:23:a1:5b:5c:8e:
c2:a6:b6:60:ee:0d:12:f7:2e:e6:1d:ad:0e:1b:7c:29:75:a6:
6d:11:05:7c:21:c6:cd:80:de:04:e3:a3:c5:99:ef:f4:18:9a:
3c:bc:47:05:86:e6:c0:5f:99:f2:79:c2:36:81:b9:a7:5a:f0:
e4:e7:aa:ef:82:1e:0f:bd:20:9c:0f:9f:37:55:4f:53:ef:b6:
1d:8e:fc:49:1a:65:bf:46:c7:e3:49:0b:f4:fe:7d:57:51:8d:
41:a9:f2:78:0e:35:43:d0:e9:ce:73:e4:d2:9a:65:5f:c0:48:
4e:e3:f3:74:15:80:52:bb:16:f1:d8:fc:a5:11:fc:a3:9b:89:
ce:8d:02:da:b7:4a:85:0e:cc:77:69:45:08:ec:a6:42:b3:42:
f4:ec:30:9f:b3:9d:2a:95:08:8e:16:b8:65:48:f7:a3:23:f3:
b5:ae:39:a4
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgICM0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy
QTdEODdEOEQwHhcNMjMwNTE5MDM1MDM1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDY2ZjIwYi1hZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAodOD2y6In7U5R1ZQNTQchYpOrXnAu/btSTGDj2iAdsX7BU6M9durGDLyEc5V
19An4A6SeFX+geJGae5z8y3bVYb8NHvh5yXebdSaByQbRLq6S8mDTLLeGpdLLvWK
n7jvYp20NPdzEMrHWXIvrhsPWAHqGzJeEibR+F0nmCwFkisx4421q4dX98Bu+XSi
SOHPN6dP6P0nKPvt/tg6ScwiQtCnsiZBE+HVwV77sWPldY3uT/NgYgQ2/wqrLgeL
WIaSKhVVk/l+Fr08OmTn16AEDkHcRL+j4+edTHvuRg+7VkLKIErLng+7erjcVbqa
H6mPhjoSTYINxgQfAPo6Ba+gqQIDAQABo4IDFDCCAxAwHQYDVR0OBBYEFO4fQpoZ
iSR6yCdwoQhv34PkRu/3MB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE
OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUY1OUMvNzM1REM0RDYxRDhEMTFFMjlBNzU0M0VCMDhCMDJDRDIvRUM1N0VCOUFD
ODVBMTFFREFGRENENjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZ0GCCsGAQUFBwEHAQH/
BIGNMIGKMHIEAgABMGwDBAFnGXADBAJn8cgDBAV3/EADBAR6ykADBAXKSqADBALK
vwQDBAHLB+ADBATLF9ADBADLGDYDBAHLGRoDBADLHiIDBADLHwADBALLIHwDBAHL
Ih4DBADLN8YDBATLfLADBALLxFwDBATL0aAwFAQCAAIwDgMFACQBBAADBQAkAzQA
MA0GCSqGSIb3DQEBCwUAA4IBAQB0jn04exDcplmtBhujvK6GVB+w0hD6/hoa/1/7
yMJeq3HN1DrS+BaHviDOt59A8PqmpZImYBEi0RziWC0iqPMM+rKlvichKoAfi0PE
v6qY5ywHjscdI6FbXI7CprZg7g0S9y7mHa0OG3wpdaZtEQV8IcbNgN4E46PFme/0
GJo8vEcFhubAX5nyecI2gbmnWvDk56rvgh4PvSCcD583VU9T77YdjvxJGmW/Rsfj
SQv0/n1XUY1BqfJ4DjVD0OnOc+TSmmVfwEhO4/N0FYBSuxbx2PylEfyjm4nOjQLa
t0qFDsx3aUUI7KZCs0L07DCfs50qlQiOFrhlSPejI/O1rjmk
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org