Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/261A8E4A8EC311ED986E2148C4F9AE02.roa
File: 261A8E4A8EC311ED986E2148C4F9AE02.roa (raw, json)
Hash identifier: j1CmtS8G1Yz3lmMY0TnN2SMUhocKoBxqzzWid3gZzIY=
Subject key identifier: DA:E2:AA:0F:DC:BA:2E:3A:50:F0:3E:A3:0B:02:FE:8F:D2:03:3E:72
Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial: 04F4
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/261A8E4A8EC311ED986E2148C4F9AE02.roa
Signing time: Mon 10 Apr 2023 14:21:34 +0000
ROA not before: Mon 10 Apr 2023 14:21:34 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 210542
IP address blocks: 103.151.40.0/24 maxlen: 24
103.151.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Validity
Not Before: Apr 10 14:21:34 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64341b6e-1370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:61:d0:4b:12:6d:ff:b6:4f:d5:11:51:9a:
c1:6b:6f:7d:91:d3:1c:99:3a:91:db:89:51:1d:bd:
75:71:4c:3a:7d:91:d6:da:1e:10:6d:23:76:31:5b:
a7:23:22:27:62:50:06:85:45:05:a6:7b:40:2e:e9:
ed:13:41:20:24:a4:16:e6:7f:89:fd:94:8f:e1:ee:
bd:4b:03:d7:ab:7d:af:f1:a5:e9:e0:ab:e3:fb:64:
c3:4d:c8:7c:b8:ce:08:a5:16:3b:a9:00:a9:99:8c:
d7:67:ab:d1:d3:da:68:d3:dd:57:ef:bd:8c:36:7f:
62:e1:ca:8c:2a:cf:ab:4a:d3:75:ef:2d:47:57:a5:
55:d4:32:29:dc:b2:6b:b2:2a:f4:b1:0f:00:3d:a4:
27:65:fe:6d:0e:e8:8c:cc:58:89:59:f6:07:a2:44:
02:84:7a:ad:3d:ea:8d:18:e2:04:d3:f2:1c:a1:05:
7b:d8:01:60:6b:eb:f0:13:7d:cd:cc:c4:98:01:4f:
66:f5:71:1c:e5:ed:5f:d3:54:95:a8:1e:a5:5e:e5:
10:12:a1:1e:55:05:80:08:22:70:8e:3b:ce:3d:2e:
39:4f:97:bf:10:22:e4:b4:01:f1:39:1a:27:8c:09:
ff:a5:f8:f4:a9:39:6a:29:f1:9a:d5:b9:5e:11:11:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:AA:0F:DC:BA:2E:3A:50:F0:3E:A3:0B:02:FE:8F:D2:03:3E:72
X509v3 Authority Key Identifier:
keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/261A8E4A8EC311ED986E2148C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:55:a3:39:c4:fe:63:40:dd:82:ff:db:ad:84:a3:c1:e2:5e:
15:1b:3d:86:ad:a9:16:70:e2:bf:6c:47:c8:3e:b2:c2:ae:1e:
04:99:62:3f:76:36:69:3e:32:5e:30:18:e1:34:de:a7:3e:1c:
9b:77:9c:af:74:1a:88:31:3a:0e:28:07:33:d3:07:12:04:6a:
3b:6b:84:0b:dc:93:16:7d:a2:c3:e0:67:f9:59:65:f0:32:12:
b1:b3:09:31:a2:04:49:7e:99:55:9a:0b:8d:9d:0a:08:23:ae:
5f:14:ee:ec:f2:89:38:c4:5e:8a:01:a4:07:e8:7b:52:3c:ea:
84:07:c4:85:a3:11:0a:35:d5:6c:d8:c1:0c:d4:71:c4:8d:a7:
91:70:ef:1a:95:50:c3:8b:9e:b9:c4:b3:d3:d4:22:fa:bf:bb:
f7:82:48:4c:e2:f4:54:96:64:cf:6a:bd:a5:56:2b:96:d9:a3:
46:ce:61:91:33:42:74:11:e3:0d:23:2c:d7:c7:8c:b3:f4:de:
b0:a2:f8:33:87:0e:d8:a3:6e:9b:84:c9:2c:9b:b5:ef:1b:91:
67:3b:45:a8:1b:9d:9c:ca:7b:d5:bf:36:9f:68:83:98:47:47:
fc:29:60:39:21:2a:91:0e:30:a7:8a:92:04:76:c5:a1:1e:ac:
e6:4a:5d:f5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdDMEUxMTAvBgNVBAUTKDlGRDJFODY2QjFFQjgyMjc3QUI2RjU2MkZFMzJFMDgz
NTlCMzAxNjUwHhcNMjMwNDEwMTQyMTM0WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDM0MWI2ZS0xMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIJh0EsSbf+2T9URUZrBa299kdMcmTqR24lRHb11cUw6fZHW2h4QbSN2MVun
IyInYlAGhUUFpntALuntE0EgJKQW5n+J/ZSP4e69SwPXq32v8aXp4Kvj+2TDTch8
uM4IpRY7qQCpmYzXZ6vR09po091X772MNn9i4cqMKs+rStN17y1HV6VV1DIp3LJr
sir0sQ8APaQnZf5tDuiMzFiJWfYHokQChHqtPeqNGOIE0/IcoQV72AFga+vwE33N
zMSYAU9m9XEc5e1f01SVqB6lXuUQEqEeVQWACCJwjjvOPS45T5e/ECLktAHxORon
jAn/pfj0qTlqKfGa1bleERFo3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNriqg/c
ui46UPA+owsC/o/SAz5yMB8GA1UdIwQYMBaAFJ/S6Gax64Inerb1Yv4y4INZswFl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0MwRS9FRTU5RTdGNDgw
RjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdpZDZ0dlZpX2pMZ2cxbXpB
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL245TG9ackhyZ2lkNnR2VmlfakxnZzFtekFXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdDMEUvRUU1OUU3RjQ4MEY5MTFFQjk4NUY0MzNBQzRGOUFFMDIvMjYxQThFNEE4
RUMzMTFFRDk4NkUyMTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlygwDQYJKoZIhvcNAQELBQADggEBAI5VoznE/mNA3YL/
262Eo8HiXhUbPYatqRZw4r9sR8g+ssKuHgSZYj92Nmk+Ml4wGOE03qc+HJt3nK90
GogxOg4oBzPTBxIEajtrhAvckxZ9osPgZ/lZZfAyErGzCTGiBEl+mVWaC42dCggj
rl8U7uzyiTjEXooBpAfoe1I86oQHxIWjEQo11WzYwQzUccSNp5Fw7xqVUMOLnrnE
s9PUIvq/u/eCSEzi9FSWZM9qvaVWK5bZo0bOYZEzQnQR4w0jLNfHjLP03rCi+DOH
DtijbpuEySybte8bkWc7RagbnZzKe9W/Np9og5hHR/wpYDkhKpEOMKeKkgR2xaEe
rOZKXfU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org