Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/067BAA4AD5E111EEBB4E5D1AC4F9AE02.roa
File: 067BAA4AD5E111EEBB4E5D1AC4F9AE02.roa (raw, json)
Hash identifier: /i6+YI/EIhw5wbwU/p2aOzWQ82aXkE0xHDILjv9tIEQ=
Subject key identifier: AA:B1:E2:0E:BB:57:7C:DC:58:C7:03:54:19:28:2C:B8:E7:F7:26:81
Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Certificate serial: 29
Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/067BAA4AD5E111EEBB4E5D1AC4F9AE02.roa
Signing time: Wed 28 Feb 2024 02:31:13 +0000
ROA not before: Wed 28 Feb 2024 02:31:13 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 24334
IP address blocks: 103.11.88.0/22 maxlen: 24
202.83.240.0/21 maxlen: 21
202.83.240.0/24 maxlen: 24
202.83.241.0/24 maxlen: 24
202.83.242.0/24 maxlen: 24
202.83.243.0/24 maxlen: 24
202.83.244.0/24 maxlen: 24
202.83.245.0/24 maxlen: 24
202.83.246.0/24 maxlen: 24
202.83.247.0/24 maxlen: 24
202.171.208.0/21 maxlen: 21
202.171.208.0/24 maxlen: 24
202.171.209.0/24 maxlen: 24
202.171.210.0/24 maxlen: 24
202.171.211.0/24 maxlen: 24
202.171.212.0/24 maxlen: 24
202.171.213.0/24 maxlen: 24
202.171.214.0/24 maxlen: 24
202.171.215.0/24 maxlen: 24
203.142.88.0/21 maxlen: 21
203.142.88.0/24 maxlen: 24
203.142.89.0/24 maxlen: 24
203.142.90.0/24 maxlen: 24
203.142.91.0/24 maxlen: 24
203.142.92.0/24 maxlen: 24
203.142.93.0/24 maxlen: 24
203.142.94.0/24 maxlen: 24
203.142.95.0/24 maxlen: 24
2404:1a0::/30 maxlen: 32
Validation: Failed, certificate revoked on Wed 28 Feb 2024 02:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Validity
Not Before: Feb 28 02:31:13 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65de9af1-6b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:b0:17:b1:45:95:d1:5a:c6:af:65:2a:74:
f2:5c:65:d0:0e:1e:1d:ca:e7:b2:7f:78:99:2c:c3:
12:bb:f5:41:9a:73:c4:2d:fa:b7:fd:9a:85:93:98:
c6:f2:2e:3a:6e:42:6b:38:60:cf:cd:d1:02:21:85:
ed:20:21:34:d0:d4:a6:e8:79:91:54:65:cc:1f:d4:
2f:00:17:09:79:bd:84:1b:39:7a:56:ae:03:30:d2:
b1:80:7a:16:78:04:50:eb:4e:1d:b3:02:85:c0:5f:
a6:68:bd:10:a5:23:3d:c2:df:ca:b5:41:9a:bb:5e:
75:e0:42:31:70:2a:bd:37:1f:1c:c2:79:ad:6f:c4:
c5:2a:8f:05:a9:35:60:ef:6b:be:24:6e:45:29:74:
10:fc:d6:4f:4b:20:95:9a:09:7e:03:f2:72:b3:fa:
f5:c1:6c:b0:35:27:15:13:d5:ff:2b:13:f5:29:31:
2a:c9:8e:b6:90:f3:ad:50:23:4c:ec:be:8f:45:0f:
ee:22:d1:b3:3a:65:8f:ee:69:5e:4c:bd:84:21:74:
76:54:56:29:78:69:aa:42:50:a4:d9:10:8e:6e:15:
d5:c5:eb:cf:e7:73:d3:c3:06:c7:ca:5f:13:8b:78:
a7:36:67:0a:de:d4:aa:46:2c:9b:f5:c8:fd:b3:ed:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:E2:0E:BB:57:7C:DC:58:C7:03:54:19:28:2C:B8:E7:F7:26:81
X509v3 Authority Key Identifier:
keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/067BAA4AD5E111EEBB4E5D1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.88.0/22
202.83.240.0/21
202.171.208.0/21
203.142.88.0/21
IPv6:
2404:1a0::/30
Signature Algorithm: sha256WithRSAEncryption
5e:77:26:eb:46:fe:c9:62:8b:d7:2e:b0:28:17:79:1b:e0:f7:
9f:c8:9d:f7:db:f7:aa:f2:b5:9f:c2:07:8f:a0:51:a3:89:23:
1e:bd:fa:bf:bd:d7:eb:96:a5:ad:53:bb:27:23:bb:6e:8b:1c:
42:b6:7a:ab:bf:d0:c9:28:b3:58:13:91:a8:42:e3:22:bf:9e:
e5:3e:0b:63:ca:69:b5:7c:dd:32:d6:2e:27:2f:f8:35:0b:cb:
94:46:e6:c3:43:ec:50:6d:7c:17:58:ce:07:3c:85:e9:72:45:
52:27:c6:14:11:16:86:d5:bb:05:b1:9e:ed:ab:e5:df:65:27:
c2:81:cb:39:69:fd:0c:a8:3e:4b:af:a5:ef:4d:17:48:99:54:
72:78:79:ec:82:76:a6:0d:d9:ae:6f:01:a7:4b:a4:25:88:c1:
35:97:07:44:51:4a:dc:0f:b1:8d:5b:c5:2e:d6:e4:b3:46:7a:
5c:ff:77:61:41:c7:b6:72:b0:9a:8a:01:77:29:ae:b8:8d:46:
51:2d:4a:a5:59:4b:55:2d:2b:a6:3e:7c:4c:b8:37:6c:db:d4:
ff:78:ab:0b:b3:d1:ef:55:3e:06:6b:0b:62:d9:f1:88:c0:c5:
12:0e:65:87:d0:ed:9d:9e:35:d8:66:b2:d8:d4:95:6e:87:21:
ee:df:52:7e
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MDM2QTExMC8GA1UEBRMoMEYxN0YzN0RCQzk0ODREOTZFMUEwQUJDNzhBNEY5Q0FD
RDVFREE4QTAeFw0yNDAyMjgwMjMxMTNaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZGU5YWYxLTZiMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAa7AXsUWV0VrGr2UqdPJcZdAOHh3K57J/eJkswxK79UGac8Qt+rf9moWTmMby
LjpuQms4YM/N0QIhhe0gITTQ1KboeZFUZcwf1C8AFwl5vYQbOXpWrgMw0rGAehZ4
BFDrTh2zAoXAX6ZovRClIz3C38q1QZq7XnXgQjFwKr03HxzCea1vxMUqjwWpNWDv
a74kbkUpdBD81k9LIJWaCX4D8nKz+vXBbLA1JxUT1f8rE/UpMSrJjraQ861QI0zs
vo9FD+4i0bM6ZY/uaV5MvYQhdHZUVil4aapCUKTZEI5uFdXF68/nc9PDBsfKXxOL
eKc2Zwre1KpGLJv1yP2z7Vb3AgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUqrHiDrtX
fNxYxwNUGSgsuOf3JoEwHwYDVR0jBBgwFoAUDxfzfbyUhNluGgq8eKT5ys1e2oow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMzZBL0JCQzJGNzc2RDFG
MTExRUU4NjA1MUE2MUM0RjlBRTAyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJv
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRHhmemZieVVoTmx1R2dxOGVLVDV5czFlMm9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi8wNjdCQUE0QUQ1
RTExMUVFQkI0RTVEMUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEAmcLWAMEA8pT8AMEA8qr0AMEA8uOWDANBAIAAjAHAwUCJAQB
oDANBgkqhkiG9w0BAQsFAAOCAQEAXncm60b+yWKL1y6wKBd5G+D3n8id99v3qvK1
n8IHj6BRo4kjHr36v73X65alrVO7JyO7boscQrZ6q7/QySizWBORqELjIr+e5T4L
Y8pptXzdMtYuJy/4NQvLlEbmw0PsUG18F1jOBzyF6XJFUifGFBEWhtW7BbGe7avl
32UnwoHLOWn9DKg+S6+l700XSJlUcnh57IJ2pg3Zrm8Bp0ukJYjBNZcHRFFK3A+x
jVvFLtbks0Z6XP93YUHHtnKwmooBdymuuI1GUS1KpVlLVS0rpj58TLg3bNvU/3ir
C7PR71U+BmsLYtnxiMDFEg5lh9DtnZ412Gay2NSVboch7t9Sfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org