Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/7EECDD28B5E411EDA143B259C4F9AE02.roa
File: 7EECDD28B5E411EDA143B259C4F9AE02.roa (raw, json)
Hash identifier: bd1oE7FuO5ucO6UsyltJTWZs+He3c3q3WtXUwGPJcIA=
Subject key identifier: D2:46:FB:C3:97:BC:7D:5B:7D:E1:CA:7C:7B:75:15:61:81:B2:D2:CA
Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial: 0A93
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/7EECDD28B5E411EDA143B259C4F9AE02.roa
Signing time: Fri 02 Jun 2023 21:02:04 +0000
ROA not before: Fri 02 Jun 2023 21:02:04 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 38565
IP address blocks: 36.252.0.0/15 maxlen: 23
43.243.96.0/22 maxlen: 24
49.126.0.0/16 maxlen: 20
103.38.196.0/22 maxlen: 24
116.68.208.0/21 maxlen: 24
2400:9500::/32 maxlen: 32
2400:9500:4000::/36 maxlen: 40
2400:9500:6000::/36 maxlen: 44
2400:9500:8000::/36 maxlen: 44
2400:9500:c000::/36 maxlen: 40
2400:9500:e000::/36 maxlen: 44
Validation: Failed, certificate revoked on Wed 28 Feb 2024 21:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Validity
Not Before: Jun 2 21:02:04 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=647a58cc-c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:cd:f5:d8:d7:9e:ed:51:c6:0e:a6:9f:6a:
e6:d7:f2:2a:d7:53:16:26:e0:55:c9:25:fc:7e:9e:
2c:9e:9c:53:7a:24:5e:19:c1:55:30:3c:7d:00:64:
03:4b:21:56:5b:f9:96:ea:6b:3c:b0:ab:40:e7:49:
ed:0a:29:56:82:95:0a:15:1c:04:92:b5:c1:56:b2:
14:ee:5b:62:f5:6e:a4:bc:7b:78:16:db:87:81:e9:
f6:db:72:00:e3:be:51:0b:5f:04:5d:80:4a:09:67:
19:f6:35:ca:99:1d:b6:28:b3:ce:d4:0c:ce:28:49:
5d:a4:c5:c2:cc:e6:94:d2:63:32:f0:18:f6:e8:50:
22:5a:5f:d5:b0:3e:1c:ca:09:57:aa:86:8d:32:f9:
a1:88:ad:90:53:51:39:c9:39:5f:f2:c8:21:fc:e3:
c9:3a:9c:61:c3:b3:2b:69:9c:04:06:f3:75:64:42:
4c:2f:e4:b3:56:32:85:6d:e7:df:17:fa:f3:a7:fe:
29:d8:f2:83:b3:04:02:4a:4c:9a:ad:e2:e1:ba:b2:
bf:04:ce:c1:e6:b9:6e:a6:7e:f3:bc:78:07:b5:e0:
a8:ce:e0:03:c9:6f:f4:31:ae:0a:e2:77:bc:a2:8d:
db:67:ee:16:a4:34:c9:14:e9:46:75:7f:63:95:b4:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:FB:C3:97:BC:7D:5B:7D:E1:CA:7C:7B:75:15:61:81:B2:D2:CA
X509v3 Authority Key Identifier:
keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/7EECDD28B5E411EDA143B259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.252.0.0/15
43.243.96.0/22
49.126.0.0/16
103.38.196.0/22
116.68.208.0/21
IPv6:
2400:9500::/32
Signature Algorithm: sha256WithRSAEncryption
2a:d3:29:56:4c:e5:e2:8d:85:3f:93:49:22:a5:54:5a:3a:b3:
28:1e:18:dd:bc:50:a9:a7:84:db:4b:61:1b:39:c9:6d:a6:10:
5d:f4:3f:f7:ad:1b:93:dc:11:68:dc:23:2e:45:82:ab:97:df:
88:ce:14:05:36:40:00:07:0e:9a:04:5b:fd:ad:9d:db:5b:4b:
24:9c:50:b6:d7:d2:0d:33:f7:10:39:59:e3:18:0b:aa:b5:0c:
8a:75:29:69:1f:91:5f:d4:b8:fa:84:fb:3c:0b:ec:cf:59:ba:
98:57:ed:ae:f0:67:83:41:2f:92:7f:d7:3b:d4:74:09:cf:05:
01:b4:39:58:4d:8b:63:ab:68:39:12:26:7f:0d:54:b1:28:b7:
a4:1e:50:c7:99:20:b3:ec:09:09:77:82:5d:eb:46:76:43:21:
69:04:e5:24:73:ef:f5:96:20:ad:07:81:84:d5:b2:63:55:2e:
3c:f2:e6:f6:61:f3:2d:00:65:9f:b4:6e:59:f2:89:36:10:05:
16:40:7a:81:c0:05:17:b2:17:7a:82:cd:f3:eb:ed:75:db:3b:
d6:da:3d:f8:23:61:bf:21:51:5e:eb:72:90:47:2f:7d:15:07:
f1:11:35:7e:d2:ee:87:f2:e0:04:45:31:4c:9a:7b:86:6e:65:
06:e2:20:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0
MzYxODMyNDgwHhcNMjMwNjAyMjEwMjA0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDdhNThjYy1jNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA46HN9djXnu1Rxg6mn2rm1/Iq11MWJuBVySX8fp4snpxTeiReGcFVMDx9AGQD
SyFWW/mW6ms8sKtA50ntCilWgpUKFRwEkrXBVrIU7lti9W6kvHt4FtuHgen223IA
475RC18EXYBKCWcZ9jXKmR22KLPO1AzOKEldpMXCzOaU0mMy8Bj26FAiWl/VsD4c
yglXqoaNMvmhiK2QU1E5yTlf8sgh/OPJOpxhw7MraZwEBvN1ZEJML+SzVjKFbeff
F/rzp/4p2PKDswQCSkyareLhurK/BM7B5rlupn7zvHgHteCozuADyW/0Ma4K4ne8
oo3bZ+4WpDTJFOlGdX9jlbRjtwIDAQABo4ICujCCArYwHQYDVR0OBBYEFNJG+8OX
vH1bfeHKfHt1FWGBstLKMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD
MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkM5NjYvQTE5NTJCQTIxQzExMTFFQUI2QzNDNzZEQzRGOUFFMDIvN0VFQ0REMjhC
NUU0MTFFREExNDNCMjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E
NTAzMCIEAgABMBwDAwEk/AMEAivzYAMDADF+AwQCZybEAwQDdETQMA0EAgACMAcD
BQAkAJUAMA0GCSqGSIb3DQEBCwUAA4IBAQAq0ylWTOXijYU/k0kipVRaOrMoHhjd
vFCpp4TbS2EbOcltphBd9D/3rRuT3BFo3CMuRYKrl9+IzhQFNkAABw6aBFv9rZ3b
W0sknFC219INM/cQOVnjGAuqtQyKdSlpH5Ff1Lj6hPs8C+zPWbqYV+2u8GeDQS+S
f9c71HQJzwUBtDlYTYtjq2g5EiZ/DVSxKLekHlDHmSCz7AkJd4Jd60Z2QyFpBOUk
c+/1liCtB4GE1bJjVS488ub2YfMtAGWftG5Z8ok2EAUWQHqBwAUXshd6gs3z6+11
2zvW2j34I2G/IVFe63KQRy99FQfxETV+0u6H8uAERTFMmnuGbmUG4iCK
-----END CERTIFICATE-----
Generated at Thu Feb 29 00:13:25 2024 by rpki-client on console-fra.rpki-client.org