Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F0F96A1E35DA11EE8C43760DC4F9AE02.roa
File: F0F96A1E35DA11EE8C43760DC4F9AE02.roa (raw, json)
Hash identifier: pukcGwVwhVyMxtAufJlgYSSmKR3tJeHEQYGDDd8UoOo=
Subject key identifier: 8A:A8:DE:4F:FD:92:7D:26:25:28:A4:A8:6B:3C:75:BB:56:91:05:AB
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 08DC
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F0F96A1E35DA11EE8C43760DC4F9AE02.roa
Signing time: Tue 08 Aug 2023 11:01:36 +0000
ROA not before: Tue 08 Aug 2023 11:01:36 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 17557
IP address blocks: 103.203.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Validity
Not Before: Aug 8 11:01:36 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64d2208f-df30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:62:53:a6:c9:83:fd:1f:98:67:5d:0e:d5:
a6:ee:bd:e8:d9:70:ec:04:86:b0:88:8e:92:9d:11:
60:55:8f:57:40:58:fa:ab:9b:4b:56:d1:cb:65:c3:
79:8b:f1:df:77:d2:9b:52:36:94:57:9d:01:34:be:
ff:62:8f:82:6b:d5:29:38:6a:c3:1f:98:1c:b4:09:
9c:ef:f0:00:6a:d3:7f:a8:e5:61:4f:a2:07:20:5f:
44:18:8d:0a:1b:71:48:d4:b0:cf:bb:dc:5d:53:8f:
92:04:c9:37:e9:b3:bc:c8:51:9f:48:44:4b:90:b4:
76:ae:5c:5e:46:0a:f1:28:36:1a:82:29:e3:df:95:
3c:b0:b8:61:d0:60:a5:22:bd:de:f0:cb:2f:19:3b:
45:8e:cc:46:a6:09:2a:80:b0:dd:0a:18:ff:3e:36:
da:2f:b5:7c:1c:5f:ab:39:6b:13:ec:91:21:bb:5a:
a8:91:92:eb:f9:00:e9:5d:98:9c:d5:1c:d5:7d:ff:
80:2e:f6:27:c7:9b:66:66:6c:b4:9c:c4:3f:e1:be:
46:80:02:b0:b3:44:b7:f4:0d:6e:40:39:8f:6e:45:
15:81:30:5d:92:68:e2:f2:cb:ae:23:cd:21:ae:a0:
1d:aa:97:e2:4e:43:b0:7d:08:14:1d:94:bd:e1:59:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:DE:4F:FD:92:7D:26:25:28:A4:A8:6B:3C:75:BB:56:91:05:AB
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F0F96A1E35DA11EE8C43760DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.45.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b5:3c:45:4b:2e:26:39:21:76:26:50:e3:37:3e:f3:51:d0:
c0:fc:11:87:88:5f:d9:5e:3c:22:df:2a:fd:20:fd:a0:e4:60:
83:2c:57:5f:9d:70:b0:13:02:d5:a9:77:6f:35:97:af:6e:01:
7a:0c:ac:88:0b:1b:d8:34:57:03:d5:88:8b:07:fb:87:47:0c:
7f:fc:d8:de:c7:b7:59:81:39:87:fb:1d:4f:03:b2:16:4f:26:
04:8a:be:70:19:d6:89:87:46:27:9a:31:58:90:83:14:7b:f1:
e7:4a:9f:a7:56:ae:09:81:08:8e:23:49:e4:03:ce:f2:72:c3:
43:eb:38:51:b5:25:59:e0:91:43:db:54:9f:03:ae:1a:ea:bd:
64:60:69:6b:af:0c:ef:16:95:ba:1d:34:5d:0f:dc:65:1a:28:
29:97:ce:fe:8e:8f:4d:b9:5e:78:50:1a:80:58:ab:e6:0f:cf:
9f:0b:9f:e9:06:4a:bc:fc:45:48:dc:90:0c:7a:26:d4:98:b3:
a0:e6:a5:36:89:99:19:69:34:8c:60:8d:cb:88:2a:0e:d4:08:
a6:20:1c:43:be:d4:36:02:c4:a6:13:83:ce:e1:35:41:a5:65:
f2:29:5e:aa:69:4e:8a:1e:64:4c:26:48:02:39:d8:37:39:4b:
ff:fc:3f:7a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy
QTM2OTE3QkQwHhcNMjMwODA4MTEwMTM2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQyMjA4Zi1kZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxNiU6bJg/0fmGddDtWm7r3o2XDsBIawiI6SnRFgVY9XQFj6q5tLVtHLZcN5
i/Hfd9KbUjaUV50BNL7/Yo+Ca9UpOGrDH5gctAmc7/AAatN/qOVhT6IHIF9EGI0K
G3FI1LDPu9xdU4+SBMk36bO8yFGfSERLkLR2rlxeRgrxKDYaginj35U8sLhh0GCl
Ir3e8MsvGTtFjsxGpgkqgLDdChj/PjbaL7V8HF+rOWsT7JEhu1qokZLr+QDpXZic
1RzVff+ALvYnx5tmZmy0nMQ/4b5GgAKws0S39A1uQDmPbkUVgTBdkmji8suuI80h
rqAdqpfiTkOwfQgUHZS94VmB5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIqo3k/9
kn0mJSikqGs8dbtWkQWrMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz
MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzFGQ0MvQ0RCQzU5ODY3MzA5MTFFQUE4ODIwMDMwQzRGOUFFMDIvRjBGOTZBMUUz
NURBMTFFRThDNDM3NjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnyy0wDQYJKoZIhvcNAQELBQADggEBAFO1PEVLLiY5IXYm
UOM3PvNR0MD8EYeIX9lePCLfKv0g/aDkYIMsV1+dcLATAtWpd281l69uAXoMrIgL
G9g0VwPViIsH+4dHDH/82N7Ht1mBOYf7HU8DshZPJgSKvnAZ1omHRieaMViQgxR7
8edKn6dWrgmBCI4jSeQDzvJyw0PrOFG1JVngkUPbVJ8DrhrqvWRgaWuvDO8Wlbod
NF0P3GUaKCmXzv6Oj025XnhQGoBYq+YPz58Ln+kGSrz8RUjckAx6JtSYs6DmpTaJ
mRlpNIxgjcuIKg7UCKYgHEO+1DYCxKYTg87hNUGlZfIpXqppTooeZEwmSAI52Dc5
S//8P3o=
-----END CERTIFICATE-----
Generated at Mon Aug 28 14:23:09 2023 by rpki-client on console-ams.rpki-client.org