Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa
File: 0D118DDEBD0D11EA84F7547CC4F9AE02.roa (raw, json)
Hash identifier: NctznYW59zz0wNMgwX+WIqt4ooFB6yjq/+SlSBBYAMQ=
Subject key identifier: 25:E7:B5:F6:28:5C:81:F2:87:DA:BE:47:84:DE:98:81:AA:65:14:E7
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 341F
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa
Signing time: Wed 29 May 2024 05:15:56 +0000
ROA not before: Wed 29 May 2024 05:15:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38174
IP address blocks: 120.29.234.0/24 maxlen: 24
123.242.244.0/22 maxlen: 24
123.242.252.0/24 maxlen: 24
123.242.254.0/23 maxlen: 23
202.60.60.0/23 maxlen: 23
202.60.60.0/24 maxlen: 24
202.60.61.0/24 maxlen: 24
202.60.62.0/24 maxlen: 24
202.60.63.0/24 maxlen: 24
202.61.10.0/23 maxlen: 23
202.61.10.0/24 maxlen: 24
202.61.11.0/24 maxlen: 24
202.91.136.0/22 maxlen: 22
203.189.180.0/22 maxlen: 22
203.189.180.0/24 maxlen: 24
203.189.181.0/24 maxlen: 24
203.189.182.0/24 maxlen: 24
203.189.183.0/24 maxlen: 24
203.191.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 04:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13343 (0x341f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Validity
Not Before: May 29 05:15:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6656ba0c-8d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:cc:26:04:b5:39:94:9c:ac:1c:76:5e:19:
db:01:1b:5a:20:2a:fd:97:07:e7:35:56:7c:07:c9:
dc:73:0b:d7:d1:c7:17:6c:9b:61:0f:60:69:7b:61:
d4:58:5e:d7:4c:8a:fa:0e:d1:69:45:53:28:cf:65:
e9:08:7e:9d:ca:e1:b8:2e:40:18:6b:7a:48:cd:ea:
a6:fb:32:b4:97:ab:47:6f:5d:92:12:39:67:70:67:
ec:fa:4a:cb:1b:d2:8c:e9:c9:6d:d8:1e:f5:1d:26:
a9:ed:9a:69:c4:c5:c8:1b:5c:06:88:90:f8:be:91:
a8:47:f5:df:c7:86:17:16:da:ea:5d:95:0b:aa:a8:
82:ed:ca:e4:49:ac:ea:3f:47:fd:42:f4:cd:54:f2:
a6:6c:85:22:d1:d6:64:38:66:3f:a6:95:21:77:b2:
97:29:14:79:fe:27:9d:c0:f1:59:b4:46:e2:bc:fa:
4f:dc:ee:a9:09:b5:dd:89:56:45:a3:e3:05:dc:a5:
60:3d:b1:13:30:37:88:30:7e:0d:9e:a1:de:7c:c6:
2b:dc:d4:1e:dc:1f:c3:b0:cf:d1:5c:1d:69:d4:c9:
74:dc:7d:cf:bb:72:18:ec:e2:e0:53:f7:af:c2:d1:
11:28:3d:91:0e:68:65:28:9a:a5:0f:7d:c9:93:05:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:B5:F6:28:5C:81:F2:87:DA:BE:47:84:DE:98:81:AA:65:14:E7
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.234.0/24
123.242.244.0/22
123.242.252.0/24
123.242.254.0/23
202.60.60.0/22
202.61.10.0/23
202.91.136.0/22
203.189.180.0/22
203.191.34.0/23
Signature Algorithm: sha256WithRSAEncryption
31:b0:da:e4:30:20:b8:7d:8b:0c:9e:c7:ab:77:be:e7:13:3c:
29:0b:8c:d8:2e:62:5f:48:c9:f9:84:80:f7:18:8c:fd:1c:f0:
54:e9:83:a2:b7:d1:18:91:b1:e0:e3:a4:77:49:c6:24:76:27:
59:1b:7b:bf:60:9b:99:9d:a1:4c:2e:a0:3e:c4:90:3e:6b:d2:
ed:d6:a1:86:8c:fc:34:34:61:ef:d7:6f:97:d7:30:f1:2e:a9:
dd:f5:3a:9f:af:c3:1b:91:a6:ab:e1:52:27:85:85:0e:4a:2c:
46:f5:d8:64:a5:33:f2:db:8e:48:94:30:a8:d1:b5:f7:a8:16:
0a:0b:83:1f:cc:8c:e1:a8:92:f3:55:03:4e:09:bd:16:6b:d6:
b7:b9:0f:24:12:c5:35:9a:d0:fb:9e:25:fe:61:4f:84:06:f8:
dd:f7:f8:66:a8:38:1d:e4:e9:09:c1:6e:4b:ce:be:29:56:bb:
7a:49:d4:44:15:c7:21:9c:01:4f:c0:fa:6b:ef:a2:10:1b:20:
86:41:c1:ee:6f:5d:fc:b3:be:fa:b2:0d:b1:d9:79:43:14:67:
9a:8d:34:c8:25:40:4b:4c:9e:72:f7:2f:14:34:58:45:89:ca:
94:f6:3b:cf:66:40:36:f6:13:06:8b:17:f1:97:e8:8c:8d:82:
a8:71:30:87
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF
MzRDNDI4RkIwHhcNMjQwNTI5MDUxNTU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU2YmEwYy04ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwB7MJgS1OZScrBx2XhnbARtaICr9lwfnNVZ8B8nccwvX0ccXbJthD2Bpe2HU
WF7XTIr6DtFpRVMoz2XpCH6dyuG4LkAYa3pIzeqm+zK0l6tHb12SEjlncGfs+krL
G9KM6clt2B71HSap7ZppxMXIG1wGiJD4vpGoR/Xfx4YXFtrqXZULqqiC7crkSazq
P0f9QvTNVPKmbIUi0dZkOGY/ppUhd7KXKRR5/iedwPFZtEbivPpP3O6pCbXdiVZF
o+MF3KVgPbETMDeIMH4NnqHefMYr3NQe3B/DsM/RXB1p1Ml03H3Pu3IY7OLgU/ev
wtERKD2RDmhlKJqlD33JkwWl7wIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFCXntfYo
XIHyh9q+R4TemIGqZRTnMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE
OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMEQxMThEREVC
RDBEMTFFQTg0Rjc1NDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E
QDA+MDwEAgABMDYDBAB4HeoDBAJ78vQDBAB78vwDBAF78v4DBALKPDwDBAHKPQoD
BALKW4gDBALLvbQDBAHLvyIwDQYJKoZIhvcNAQELBQADggEBADGw2uQwILh9iwye
x6t3vucTPCkLjNguYl9IyfmEgPcYjP0c8FTpg6K30RiRseDjpHdJxiR2J1kbe79g
m5mdoUwuoD7EkD5r0u3WoYaM/DQ0Ye/Xb5fXMPEuqd31Op+vwxuRpqvhUieFhQ5K
LEb12GSlM/LbjkiUMKjRtfeoFgoLgx/MjOGokvNVA04JvRZr1re5DyQSxTWa0Pue
Jf5hT4QG+N33+GaoOB3k6QnBbkvOvilWu3pJ1EQVxyGcAU/A+mvvohAbIIZBwe5v
XfyzvvqyDbHZeUMUZ5qNNMglQEtMnnL3LxQ0WEWJypT2O89mQDb2EwaLF/GX6IyN
gqhxMIc=
-----END CERTIFICATE-----
Generated at Fri Oct 4 08:05:27 2024 by rpki-client on console-ams.rpki-client.org