Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/57D06092EA8D11EDB701533AC4F9AE02.roa
File: 57D06092EA8D11EDB701533AC4F9AE02.roa (raw, json)
Hash identifier: AnTm10VYGKk8Js2Ijv5dL/mlMVAVI/wgQAV+/NHAi8E=
Subject key identifier: 5E:D1:81:39:EB:DE:2E:E7:A9:EB:60:1A:30:26:7F:66:85:E5:5A:EC
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: E5
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/57D06092EA8D11EDB701533AC4F9AE02.roa
Signing time: Mon 25 Sep 2023 11:00:24 +0000
ROA not before: Mon 25 Sep 2023 11:00:24 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 133499
IP address blocks: 43.225.80.0/22 maxlen: 24
43.225.188.0/24 maxlen: 24
43.225.190.0/24 maxlen: 24
43.228.236.0/24 maxlen: 24
43.228.238.0/24 maxlen: 24
103.84.120.0/22 maxlen: 24
103.240.164.0/22 maxlen: 24
103.241.52.0/22 maxlen: 22
103.241.52.0/24 maxlen: 24
103.241.53.0/24 maxlen: 24
103.241.54.0/24 maxlen: 24
103.241.55.0/24 maxlen: 24
150.107.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Sep 25 11:00:24 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65116848-98fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:91:b4:79:4c:f6:74:f3:51:ce:2d:89:35:
cc:e3:6f:c5:35:2a:3b:90:bc:8f:f0:5a:9f:3d:7e:
05:c1:14:1e:9c:18:a6:88:d6:d0:e5:ef:99:6c:ea:
a3:00:c4:1e:9f:d8:7d:30:6f:a6:c7:34:4f:38:a3:
38:c6:fa:ad:87:91:61:b8:56:5a:0c:85:d9:bc:31:
2a:b9:f9:1d:6a:c5:69:17:06:68:94:35:2e:c7:f8:
9d:09:5b:23:2f:22:32:8d:28:a8:df:dd:01:fe:bd:
fe:a3:e2:a9:2b:de:bd:f4:d7:7c:33:54:5e:1f:b4:
cd:23:09:0a:cb:f8:9d:a3:f9:f9:31:f1:93:f2:b7:
80:c4:36:42:12:46:7b:1e:99:70:32:72:cd:a3:e5:
5a:2b:fa:b4:cc:b0:e4:7b:74:17:08:fc:38:c5:46:
1a:22:b3:c2:68:41:64:f2:1c:b5:9e:fd:d7:6d:80:
0c:58:c6:64:bc:e1:26:ed:37:f9:98:e8:c6:2e:45:
21:b0:79:69:19:44:83:af:1c:a1:57:6e:66:cc:96:
9f:b3:4c:b3:05:e8:4d:14:e3:28:3b:35:e9:51:29:
6b:95:74:ce:54:c5:6d:ee:af:f0:1e:49:97:40:2d:
73:84:35:40:43:97:f0:02:c9:f2:52:4e:8d:48:6a:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:81:39:EB:DE:2E:E7:A9:EB:60:1A:30:26:7F:66:85:E5:5A:EC
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/57D06092EA8D11EDB701533AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.80.0/22
43.225.188.0/24
43.225.190.0/24
43.228.236.0/24
43.228.238.0/24
103.84.120.0/22
103.240.164.0/22
103.241.52.0/22
150.107.226.0/24
Signature Algorithm: sha256WithRSAEncryption
70:10:66:b1:99:59:81:30:84:f2:74:fa:b7:b3:13:ea:42:03:
dd:23:74:b8:a5:22:10:61:a1:e2:16:93:3b:b2:69:6b:5e:fa:
e2:5e:33:41:cb:b7:3e:37:90:d9:66:9a:db:4c:be:80:83:cd:
e8:7e:c6:d3:37:6d:e8:a3:c9:7e:0e:3b:10:6f:5e:5d:96:67:
38:08:bf:6d:bf:c5:d4:68:49:22:ea:c7:f9:53:a5:e8:d3:4f:
12:d3:a9:40:13:1b:86:aa:f2:6c:6b:95:d7:48:63:39:51:d7:
a6:67:1e:14:8d:65:d6:5f:17:93:06:3f:4a:e1:d3:19:2e:08:
c4:85:ad:ff:90:8a:57:f5:eb:bd:3b:4c:48:d0:0e:ac:7c:07:
86:8b:c2:d2:73:e4:66:41:18:87:c6:bc:11:c9:de:48:21:cb:
0a:b6:f9:f1:0f:0c:db:f0:c0:cb:4c:cf:18:c0:27:eb:9d:aa:
c4:f2:50:fe:bf:e3:b9:11:90:96:d6:03:73:d7:2b:a2:2e:de:
12:67:c3:bc:b3:f6:09:e7:8d:36:d0:ef:32:21:cc:b4:cd:d8:
0a:8d:81:89:9c:0c:96:4d:c9:7f:55:ae:87:8c:34:83:79:51:
fe:7d:ff:c6:2b:1a:b2:2f:f8:76:fd:2b:24:64:89:b4:54:e0:
3c:c0:81:ba
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5
Njk4RkU2MzgwHhcNMjMwOTI1MTEwMDI0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTExNjg0OC05OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+SRtHlM9nTzUc4tiTXM42/FNSo7kLyP8FqfPX4FwRQenBimiNbQ5e+ZbOqj
AMQen9h9MG+mxzRPOKM4xvqth5FhuFZaDIXZvDEqufkdasVpFwZolDUux/idCVsj
LyIyjSio390B/r3+o+KpK9699Nd8M1ReH7TNIwkKy/ido/n5MfGT8reAxDZCEkZ7
HplwMnLNo+VaK/q0zLDke3QXCPw4xUYaIrPCaEFk8hy1nv3XbYAMWMZkvOEm7Tf5
mOjGLkUhsHlpGUSDrxyhV25mzJafs0yzBehNFOMoOzXpUSlrlXTOVMVt7q/wHkmX
QC1zhDVAQ5fwAsnyUk6NSGrneQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFF7RgTnr
3i7nqetgGjAmf2aF5VrsMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx
ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvNTdEMDYwOTJF
QThEMTFFREI3MDE1MzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E
QDA+MDwEAgABMDYDBAIr4VADBAAr4bwDBAAr4b4DBAAr5OwDBAAr5O4DBAJnVHgD
BAJn8KQDBAJn8TQDBACWa+IwDQYJKoZIhvcNAQELBQADggEBAHAQZrGZWYEwhPJ0
+rezE+pCA90jdLilIhBhoeIWkzuyaWte+uJeM0HLtz43kNlmmttMvoCDzeh+xtM3
beijyX4OOxBvXl2WZzgIv22/xdRoSSLqx/lTpejTTxLTqUATG4aq8mxrlddIYzlR
16ZnHhSNZdZfF5MGP0rh0xkuCMSFrf+Qilf16707TEjQDqx8B4aLwtJz5GZBGIfG
vBHJ3kghywq2+fEPDNvwwMtMzxjAJ+udqsTyUP6/47kRkJbWA3PXK6Iu3hJnw7yz
9gnnjTbQ7zIhzLTN2AqNgYmcDJZNyX9VroeMNIN5Uf59/8YrGrIv+Hb9KyRkibRU
4DzAgbo=
-----END CERTIFICATE-----
Generated at Mon Sep 25 13:11:59 2023 by rpki-client on console-ams.rpki-client.org