Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/F4D2716A8B7B11EF87393168C4F9AE02.roa
File: F4D2716A8B7B11EF87393168C4F9AE02.roa (raw, json)
Hash identifier: /22oqeNcdD94yYjwrA7z6U7GYwGrg52WfJQGPZ1FXDE=
Subject key identifier: 0D:81:83:C1:79:70:A0:FB:5A:1A:A1:CF:C8:6D:F6:81:8C:AC:AF:D7
Certificate issuer: /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial: 02
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/F4D2716A8B7B11EF87393168C4F9AE02.roa
Signing time: Wed 16 Oct 2024 05:03:18 +0000
ROA not before: Wed 16 Oct 2024 05:03:18 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 214127
IP address blocks: 103.62.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 23:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Validity
Not Before: Oct 16 05:03:18 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=670f4915-473c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:c5:be:5d:83:d0:3b:f8:8a:a4:a3:be:be:
b6:43:e5:88:46:d0:fa:77:b0:49:df:e9:20:6b:6b:
0b:27:04:db:a3:2c:e2:89:70:18:9a:27:9a:5c:06:
4b:64:e9:51:ca:7e:6d:6f:3d:98:1f:eb:29:6b:d0:
c8:05:28:e7:51:e5:3c:d3:e0:e5:a5:4b:a4:9c:ce:
7a:a8:94:0b:ae:59:59:4b:7e:01:40:65:c1:07:d0:
fe:44:5c:6c:b4:87:34:44:56:42:68:06:f8:c7:3d:
c8:52:ac:1f:a3:5b:ac:00:95:e0:d3:f3:a4:71:d6:
44:ea:3d:e2:83:72:8a:8c:ad:75:b2:ed:76:18:49:
c9:11:77:99:77:fd:0d:bc:d2:6e:db:ef:c3:0b:89:
cb:d4:23:76:a6:a4:74:16:9d:d5:a4:bc:6b:46:a2:
86:aa:33:37:68:38:17:60:16:a4:dd:9e:ee:81:5f:
e7:06:b4:63:b4:4c:89:f1:bd:ac:d7:59:a5:3c:e1:
76:83:f8:8d:2c:c1:e9:ed:e7:6e:fa:f8:e2:fb:6b:
ff:70:e8:d3:c9:47:2f:bb:44:02:b3:81:b7:c5:7a:
8b:91:85:55:3c:ea:62:da:e4:aa:b5:02:4b:c5:3e:
4c:18:84:21:c0:e5:b8:1d:83:5d:b4:cf:d2:e8:77:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:83:C1:79:70:A0:FB:5A:1A:A1:CF:C8:6D:F6:81:8C:AC:AF:D7
X509v3 Authority Key Identifier:
keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/F4D2716A8B7B11EF87393168C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
62:af:c9:41:78:42:68:9c:2b:4e:36:0c:54:e8:d0:6e:23:9b:
fa:aa:c0:f9:9b:12:73:49:9d:bb:cd:2c:84:49:06:74:82:8a:
47:6e:fe:3d:0e:75:42:4e:8b:7b:54:25:3b:49:b0:66:7f:e3:
df:1b:d9:94:ab:05:d2:33:38:6a:25:64:f6:67:57:64:f5:e6:
62:eb:43:69:d6:46:25:87:ed:67:58:fa:89:6f:f9:1f:3e:29:
d9:29:79:ea:75:1e:00:e9:22:b6:c4:4c:ca:a9:23:d8:07:f6:
75:d7:ca:4e:c6:5f:7d:87:e9:d0:6c:36:38:43:ac:53:da:39:
ee:0c:f2:8a:6a:77:4d:44:7a:cb:f9:61:6d:c5:ea:3b:1b:9d:
58:86:11:c2:7b:e2:ae:1f:da:c0:cf:e0:88:36:c3:11:34:bd:
7e:a0:9a:f1:47:8f:12:d6:4a:3d:f1:dd:97:36:03:f0:7c:82:
f7:c8:a7:cd:86:a1:8d:86:66:66:3c:2b:89:fe:4a:55:72:2d:
aa:80:cf:92:ed:8d:35:2e:78:6a:53:57:0d:06:81:57:5b:62:
f1:e4:bd:0f:46:3f:34:cf:48:07:d1:9c:3d:d7:05:38:fc:70:
58:69:22:7d:0a:96:80:1c:5a:28:31:05:1e:dd:39:52:25:a9:
14:cd:99:c3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NTVDRTExMC8GA1UEBRMoODI4QTQ3RDNBQzZFNkIwMzYwMTFDMjMzMjMxNzBBOTcz
MUJBRDIyNDAeFw0yNDEwMTYwNTAzMThaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MGY0OTE1LTQ3M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDD68W+XYPQO/iKpKO+vrZD5YhG0Pp3sEnf6SBrawsnBNujLOKJcBiaJ5pcBktk
6VHKfm1vPZgf6ylr0MgFKOdR5TzT4OWlS6ScznqolAuuWVlLfgFAZcEH0P5EXGy0
hzREVkJoBvjHPchSrB+jW6wAleDT86Rx1kTqPeKDcoqMrXWy7XYYSckRd5l3/Q28
0m7b78MLicvUI3ampHQWndWkvGtGooaqMzdoOBdgFqTdnu6BX+cGtGO0TInxvazX
WaU84XaD+I0swent5276+OL7a/9w6NPJRy+7RAKzgbfFeouRhVU86mLa5Kq1AkvF
PkwYhCHA5bgdg120z9LodyIbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUDYGDwXlw
oPtaGqHPyG32gYysr9cwHwYDVR0jBBgwFoAUgopH06xuawNgEcIzIxcKlzG60iQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NUNFLzQ1MUE4MjNBOEI3
QjExRUY4MjkwMzI3RkM0RjlBRTAyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBp
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ29wSDA2eHVhd05nRWNJekl4Y0tsekc2MGlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTVDRS80NTFBODIzQThCN0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9GNEQyNzE2QThC
N0IxMUVGODczOTMxNjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGc+NjANBgkqhkiG9w0BAQsFAAOCAQEAYq/JQXhCaJwrTjYM
VOjQbiOb+qrA+ZsSc0mdu80shEkGdIKKR27+PQ51Qk6Le1QlO0mwZn/j3xvZlKsF
0jM4aiVk9mdXZPXmYutDadZGJYftZ1j6iW/5Hz4p2Sl56nUeAOkitsRMyqkj2Af2
ddfKTsZffYfp0Gw2OEOsU9o57gzyimp3TUR6y/lhbcXqOxudWIYRwnvirh/awM/g
iDbDETS9fqCa8UePEtZKPfHdlzYD8HyC98inzYahjYZmZjwrif5KVXItqoDPku2N
NS54alNXDQaBV1ti8eS9D0Y/NM9IB9GcPdcFOPxwWGkifQqWgBxaKDEFHt05UiWp
FM2Zww==
-----END CERTIFICATE-----
Generated at Wed Oct 30 01:31:57 2024 by rpki-client on console-ams.rpki-client.org