Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/00EDEFD4B45411EDA65D8845C4F9AE02.roa
File: 00EDEFD4B45411EDA65D8845C4F9AE02.roa (raw, json)
Hash identifier: p+IiBi8p41Xaw/zr8LzUyZCn1S4agZdJFYBd3Xe6JKs=
Subject key identifier: AF:34:71:04:F6:89:A1:3D:47:75:8D:97:A3:B1:C1:7A:9D:FA:6D:E1
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 3405
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/00EDEFD4B45411EDA65D8845C4F9AE02.roa
Signing time: Mon 22 Apr 2024 14:50:46 +0000
ROA not before: Mon 22 Apr 2024 14:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24391
IP address blocks: 202.60.62.0/23 maxlen: 23
202.91.136.0/23 maxlen: 23
202.91.138.0/23 maxlen: 23
202.91.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 05:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13317 (0x3405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Validity
Not Before: Apr 22 14:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66267946-f325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:9e:40:54:a4:fa:bf:5c:da:b2:88:c7:b5:
98:ea:48:c7:5c:cb:eb:97:11:6e:60:08:3e:32:b2:
13:31:0e:ba:3f:9f:07:e8:0c:77:4f:82:b2:f8:78:
65:c1:8f:78:a6:a2:ac:22:6d:c9:52:5a:dd:04:ac:
99:15:cb:c2:34:24:b8:8c:4d:88:2c:45:c3:5b:e9:
3a:2d:2f:6b:24:a6:9c:fd:0a:7c:de:35:f0:0b:0c:
69:e8:db:00:d3:40:6e:97:e7:21:e8:e2:b2:5e:80:
f8:71:18:c7:37:e3:58:6e:96:65:05:da:55:48:6c:
aa:aa:d5:8c:dc:2e:80:70:0f:e8:e4:4d:be:ab:a5:
6b:e3:cf:7d:ce:1e:fb:de:8e:17:96:83:52:fd:4f:
1c:1b:b3:6a:5a:20:a4:a7:16:ce:b9:69:a1:39:0a:
1a:78:0f:86:1c:68:a1:e5:1a:51:1b:17:65:d3:b7:
0e:8d:01:34:b8:48:f3:de:39:9b:9b:b3:66:5e:ec:
2d:8f:5b:e0:c7:5a:2b:6d:85:d0:1a:0d:9d:ce:3e:
2d:a6:bd:01:85:09:c1:f6:d5:a9:25:ec:32:9c:a8:
5c:cc:aa:72:e1:60:bc:f0:0c:be:76:df:c6:21:2a:
45:49:d1:28:37:77:51:59:32:46:26:51:af:14:11:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:71:04:F6:89:A1:3D:47:75:8D:97:A3:B1:C1:7A:9D:FA:6D:E1
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/00EDEFD4B45411EDA65D8845C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.60.62.0/23
202.91.136.0-202.91.141.255
Signature Algorithm: sha256WithRSAEncryption
28:1f:46:6b:76:1b:c5:d4:d9:d7:81:53:04:d5:97:ed:13:5a:
b1:a9:96:fe:98:bd:d7:6a:87:bc:af:89:fb:ce:33:bd:e1:71:
2a:c6:4b:cf:69:73:29:0e:fd:2b:a9:7d:99:4e:34:27:9c:c9:
b5:03:6b:af:cb:58:1c:73:7d:80:af:9a:4f:65:b2:f3:b1:db:
2d:e4:fb:a8:2d:c5:91:49:29:ed:3a:ab:30:1c:eb:ce:ff:a9:
5d:5c:88:4d:88:70:99:5d:b6:8a:a7:24:87:0c:6f:1f:b6:61:
52:71:9c:27:49:e6:51:85:1d:9b:7a:a8:da:4a:61:0a:ba:2d:
23:1d:3a:b7:23:cd:a4:e4:ff:04:89:b3:1c:a2:a4:19:60:7f:
d4:4f:ec:08:8c:e0:6f:f3:94:bd:ae:2c:da:38:e1:87:5e:f0:
1b:33:6d:05:51:3e:cf:00:a5:06:88:01:5a:b2:5c:2f:42:99:
88:f4:61:d3:7f:a4:1b:5c:1e:e2:34:0c:d2:c3:50:80:fe:d8:
34:4b:d4:f4:e0:2c:29:c7:99:60:17:70:d2:7d:0b:25:d7:dc:
ad:4b:bb:29:8c:90:29:15:97:a4:46:07:c3:5d:47:d2:cb:4b:
aa:ec:f7:0b:28:61:4b:21:50:ee:41:09:b9:a1:6d:96:4d:e0:
8c:30:8a:0d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICNAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF
MzRDNDI4RkIwHhcNMjQwNDIyMTQ1MDQ2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjI2Nzk0Ni1mMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjGeQFSk+r9c2rKIx7WY6kjHXMvrlxFuYAg+MrITMQ66P58H6Ax3T4Ky+Hhl
wY94pqKsIm3JUlrdBKyZFcvCNCS4jE2ILEXDW+k6LS9rJKac/Qp83jXwCwxp6NsA
00Bul+ch6OKyXoD4cRjHN+NYbpZlBdpVSGyqqtWM3C6AcA/o5E2+q6Vr4899zh77
3o4XloNS/U8cG7NqWiCkpxbOuWmhOQoaeA+GHGih5RpRGxdl07cOjQE0uEjz3jmb
m7NmXuwtj1vgx1orbYXQGg2dzj4tpr0BhQnB9tWpJewynKhczKpy4WC88Ay+dt/G
ISpFSdEoN3dRWTJGJlGvFBHSkQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFK80cQT2
iaE9R3WNl6OxwXqd+m3hMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE
OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMDBFREVGRDRC
NDU0MTFFREE2NUQ4ODQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBAHKPD4wDAMEA8pbiAMEAcpbjDANBgkqhkiG9w0BAQsFAAOC
AQEAKB9Ga3YbxdTZ14FTBNWX7RNasamW/pi912qHvK+J+84zveFxKsZLz2lzKQ79
K6l9mU40J5zJtQNrr8tYHHN9gK+aT2Wy87HbLeT7qC3FkUkp7TqrMBzrzv+pXVyI
TYhwmV22iqckhwxvH7ZhUnGcJ0nmUYUdm3qo2kphCrotIx06tyPNpOT/BImzHKKk
GWB/1E/sCIzgb/OUva4s2jjhh17wGzNtBVE+zwClBogBWrJcL0KZiPRh03+kG1we
4jQM0sNQgP7YNEvU9OAsKceZYBdw0n0LJdfcrUu7KYyQKRWXpEYHw11H0stLquz3
CyhhSyFQ7kEJuaFtlk3gjDCKDQ==
-----END CERTIFICATE-----
Generated at Fri Sep 27 09:13:59 2024 by rpki-client on console-ams.rpki-client.org