Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2DC53C2C624D11EE9CDEA739C4F9AE02.roa
File: 2DC53C2C624D11EE9CDEA739C4F9AE02.roa (raw, json)
Hash identifier: MAqjafGC8oSeNPwSN4/QMk6Gbv8suoA4Pz5Bb5pVLkk=
Subject key identifier: F9:BC:1F:C0:A8:D8:CE:A0:C0:68:04:A6:86:7A:68:16:83:5C:F0:1C
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 96
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2DC53C2C624D11EE9CDEA739C4F9AE02.roa
Signing time: Wed 04 Oct 2023 00:30:11 +0000
ROA not before: Wed 04 Oct 2023 00:30:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 125.62.77.0/24 maxlen: 24
125.62.78.0/24 maxlen: 24
202.134.233.0/24 maxlen: 24
202.134.235.0/24 maxlen: 24
202.134.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Oct 4 00:30:11 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=651cb213-a81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:3b:67:b3:09:a1:c2:84:ff:99:7e:cf:55:
05:35:5a:d2:60:4d:ad:fa:95:d8:53:16:d6:52:9f:
53:9a:8d:3e:22:e6:82:5e:10:36:86:91:e2:20:a8:
0e:c8:00:2b:47:25:45:a2:a6:13:3f:fa:c6:0b:65:
69:ff:d5:71:83:d6:28:ed:e0:21:c2:4f:f9:d5:9c:
97:01:ea:a2:49:e8:26:e9:02:8c:22:b0:50:85:57:
bb:28:98:43:e9:a5:7b:e9:93:ec:fb:be:75:1f:fa:
cf:c4:d9:b4:9a:94:19:a4:06:3d:d1:08:9f:22:8c:
47:3a:49:52:e5:29:a8:39:73:52:8a:c2:c6:9f:d7:
82:c5:13:ad:72:ac:31:d1:f6:70:d6:c4:7b:c9:55:
74:2d:f5:c8:85:13:44:ed:0e:d0:35:2a:59:be:4a:
a9:ea:b6:06:12:09:a8:35:d2:0f:36:e3:27:68:a2:
00:32:1a:01:35:29:c7:6a:2a:1b:5c:66:23:83:21:
d2:ee:20:49:9a:e1:7f:59:29:04:a8:69:18:5c:c5:
98:4f:88:fd:f0:51:ef:95:d8:65:d1:fb:d6:d2:7d:
a4:a6:22:b0:f9:fe:ce:21:11:7c:cb:f3:c7:b4:5c:
ff:6d:3a:87:c9:00:ce:24:41:79:17:fa:82:b4:3a:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:1F:C0:A8:D8:CE:A0:C0:68:04:A6:86:7A:68:16:83:5C:F0:1C
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2DC53C2C624D11EE9CDEA739C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.62.77.0-125.62.78.255
202.134.233.0/24
202.134.235.0-202.134.236.255
Signature Algorithm: sha256WithRSAEncryption
c7:40:d4:36:63:88:17:23:56:cd:6f:e1:f8:b6:07:3f:a9:3b:
b1:da:71:0c:f7:ae:12:ab:3f:b5:f1:cc:00:31:9d:5e:b1:19:
b9:46:5e:9c:4d:b1:c3:91:00:01:71:ea:25:8c:1d:83:00:d9:
be:61:f4:e8:ef:5f:7c:78:7a:d1:82:b6:3d:9e:d4:2e:ae:12:
a2:07:6f:30:bb:ea:00:5f:53:33:cf:ec:63:2b:98:a4:b1:fa:
e9:29:49:8f:37:fd:48:31:a6:b4:94:6c:60:35:de:9a:6f:9d:
97:81:53:33:73:fa:7c:7f:12:0e:73:3f:51:2c:4d:74:1a:26:
be:ce:e8:28:47:70:89:52:79:d7:9f:5a:60:d6:34:03:7d:5b:
f8:68:6b:43:2f:55:ab:3d:30:ee:01:71:60:38:6a:4c:ae:ec:
22:36:f8:f1:67:28:4f:db:5a:46:0c:e3:15:86:4f:b0:a3:b3:
13:14:71:0a:1e:f5:34:48:7b:c4:d7:46:ea:e5:bd:a6:ad:cf:
41:51:19:d2:a1:1c:41:8a:03:56:85:0d:0e:a7:f1:af:fd:c3:
a3:6f:f2:5e:3b:44:88:e6:ac:b4:84:db:76:06:52:0b:23:61:
5d:e9:0b:c0:b4:da:5f:b2:0d:2e:00:16:63:4b:d0:93:a3:20:
6e:0b:ce:0a
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjMxMDA0MDAzMDExWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFjYjIxMy1hODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2sA7Z7MJocKE/5l+z1UFNVrSYE2t+pXYUxbWUp9Tmo0+IuaCXhA2hpHiIKgO
yAArRyVFoqYTP/rGC2Vp/9Vxg9Yo7eAhwk/51ZyXAeqiSegm6QKMIrBQhVe7KJhD
6aV76ZPs+751H/rPxNm0mpQZpAY90QifIoxHOklS5SmoOXNSisLGn9eCxROtcqwx
0fZw1sR7yVV0LfXIhRNE7Q7QNSpZvkqp6rYGEgmoNdIPNuMnaKIAMhoBNSnHaiob
XGYjgyHS7iBJmuF/WSkEqGkYXMWYT4j98FHvldhl0fvW0n2kpiKw+f7OIRF8y/PH
tFz/bTqHyQDOJEF5F/qCtDq2MwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPm8H8Co
2M6gwGgEpoZ6aBaDXPAcMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvMkRDNTNDMkM2
MjREMTFFRTlDREVBNzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E
LDAqMCgEAgABMCIwDAMEAH0+TQMEAH0+TgMEAMqG6TAMAwQAyobrAwQAyobsMA0G
CSqGSIb3DQEBCwUAA4IBAQDHQNQ2Y4gXI1bNb+H4tgc/qTux2nEM964Sqz+18cwA
MZ1esRm5Rl6cTbHDkQABceoljB2DANm+YfTo7198eHrRgrY9ntQurhKiB28wu+oA
X1Mzz+xjK5iksfrpKUmPN/1IMaa0lGxgNd6ab52XgVMzc/p8fxIOcz9RLE10Gia+
zugoR3CJUnnXn1pg1jQDfVv4aGtDL1WrPTDuAXFgOGpMruwiNvjxZyhP21pGDOMV
hk+wo7MTFHEKHvU0SHvE10bq5b2mrc9BURnSoRxBigNWhQ0Op/Gv/cOjb/JeO0SI
5qy0hNt2BlILI2Fd6QvAtNpfsg0uABZjS9CToyBuC84K
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org