Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/2899C90AAA0C11EEA4AB366CC4F9AE02.roa
File: 2899C90AAA0C11EEA4AB366CC4F9AE02.roa (raw, json)
Hash identifier: GlOupUH+HdTZzmX6c06nzvbVluy7lWMY3NCWgoq7EAA=
Subject key identifier: D6:9E:E6:1C:C3:F6:FE:31:33:98:E8:5B:BB:D5:62:3C:E2:4A:0F:62
Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial: 1281
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/2899C90AAA0C11EEA4AB366CC4F9AE02.roa
Signing time: Wed 03 Jan 2024 07:46:09 +0000
ROA not before: Wed 03 Jan 2024 07:46:09 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 10204
IP address blocks: 103.229.32.0/24 maxlen: 24
103.229.33.0/24 maxlen: 24
103.229.34.0/24 maxlen: 24
103.229.35.0/24 maxlen: 24
203.115.192.0/18 maxlen: 18
203.115.192.0/19 maxlen: 19
203.115.192.0/21 maxlen: 21
203.115.192.0/24 maxlen: 24
203.115.199.0/24 maxlen: 24
203.115.201.0/24 maxlen: 24
203.115.205.0/24 maxlen: 24
203.115.208.0/21 maxlen: 21
203.115.208.0/24 maxlen: 24
203.115.211.0/24 maxlen: 24
203.115.212.0/22 maxlen: 22
203.115.217.0/24 maxlen: 24
203.115.222.0/24 maxlen: 24
203.115.224.0/19 maxlen: 19
203.115.224.0/20 maxlen: 20
203.115.224.0/21 maxlen: 21
203.115.224.0/22 maxlen: 24
203.115.231.0/24 maxlen: 24
203.115.238.0/24 maxlen: 24
203.115.246.0/24 maxlen: 24
203.115.249.0/24 maxlen: 24
203.115.251.0/24 maxlen: 24
203.115.252.0/22 maxlen: 22
203.115.252.0/24 maxlen: 24
2001:c18::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4737 (0x1281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Validity
Not Before: Jan 3 07:46:09 2024 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=659510c1-dea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:d0:ac:b1:c5:7e:fe:06:8a:01:6b:ed:f7:
26:22:04:15:1b:b5:0b:89:44:19:9d:6c:61:8b:2d:
e4:42:c5:24:53:aa:b9:18:b1:62:a5:b4:00:e0:bb:
d3:2f:e8:05:09:79:a6:e3:a9:04:82:94:d3:c0:e7:
67:d0:32:4d:b6:81:8a:89:51:cf:de:9e:42:87:10:
aa:e9:27:93:c6:69:9b:11:ea:dd:f1:4e:4c:37:2d:
46:e8:36:70:53:3a:dd:dd:da:39:ad:12:99:44:06:
fb:3d:51:1c:a4:55:45:1c:4f:93:19:d0:7e:52:e9:
af:30:29:0e:7f:14:c4:d3:3e:1c:8a:1b:a7:85:7e:
f0:f1:74:76:97:a8:4d:5a:e4:ca:8c:15:3a:30:e2:
8a:cc:9a:c4:7b:9a:69:83:54:3f:a9:13:5a:d9:96:
1e:65:ae:89:90:65:aa:14:8a:6d:63:d2:54:b8:6c:
f1:70:d4:09:f6:12:b5:1e:24:89:a3:1e:d8:19:c4:
d1:06:a7:0f:29:ab:8c:d7:f6:8c:9f:99:b3:59:bd:
6f:ad:cb:8f:79:92:a3:ca:3c:ca:bb:eb:d9:85:c0:
c1:ac:7c:e0:7e:0f:58:0d:93:fa:0d:a3:2e:c1:7f:
77:1d:3e:05:f0:5c:8f:4e:5d:b1:a5:5f:78:36:5f:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:E6:1C:C3:F6:FE:31:33:98:E8:5B:BB:D5:62:3C:E2:4A:0F:62
X509v3 Authority Key Identifier:
keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/2899C90AAA0C11EEA4AB366CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.32.0/22
203.115.192.0/18
IPv6:
2001:c18::/32
Signature Algorithm: sha256WithRSAEncryption
a9:61:71:3b:4a:23:66:1e:23:4c:7f:4f:fc:6b:ab:54:88:e4:
ae:d2:7f:dc:b1:ed:5a:67:f2:7a:0a:12:3f:22:12:c5:cf:9b:
41:68:20:72:c4:5e:a4:54:fb:ae:90:13:47:fd:50:34:79:75:
34:50:d9:15:fe:8d:9c:60:d0:7c:3e:3a:ea:2e:3c:f4:ec:c7:
59:20:f5:a5:c5:38:c7:9a:26:21:c9:6e:aa:a8:a7:43:92:f7:
fc:4b:40:cf:d2:4b:d9:21:c0:27:63:1a:7b:3c:ff:9a:ad:65:
5c:f5:19:62:1c:14:41:9e:f2:5a:32:cb:8c:f8:e5:e7:d9:70:
ba:6b:7f:be:89:82:18:ef:71:31:11:7d:c0:28:6a:81:2d:d6:
02:fa:6b:c9:ca:94:9e:15:c9:2e:24:b0:75:a2:19:92:7d:ae:
5a:95:b1:41:38:e2:21:87:a6:5e:dd:06:09:dd:f2:5f:5e:ad:
ba:88:d3:6b:82:9b:60:66:c5:77:f8:84:43:85:d0:9a:44:67:
1f:42:1a:57:62:7e:b2:26:12:ef:15:6c:12:50:02:b1:91:6e:
d5:44:99:21:b7:01:3f:bd:c3:b5:d3:31:e9:d9:24:ff:d1:c5:
13:b9:4d:e3:b6:92:f7:16:14:c1:9b:b2:9e:94:66:6d:85:c8:
c9:2a:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:03:12 2024 by rpki-client on console-ams.rpki-client.org