Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/913BDF8421BA11ECB2027C56C4F9AE02.roa
File: 913BDF8421BA11ECB2027C56C4F9AE02.roa (raw, json)
Hash identifier: Wp6iut1pRzxwmn+Voq3o9eTNVEHkJiWtHzGyjA/TXWY=
Subject key identifier: F2:9F:DF:84:8F:12:A7:8B:09:25:F8:02:86:0B:18:CB:71:93:BF:CD
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 05C9
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/913BDF8421BA11ECB2027C56C4F9AE02.roa
Signing time: Sun 14 Jan 2024 23:31:34 +0000
ROA not before: Sun 14 Jan 2024 23:31:33 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 21859
IP address blocks: 43.251.116.0/24 maxlen: 24
43.251.117.0/24 maxlen: 24
43.251.118.0/24 maxlen: 24
43.251.119.0/24 maxlen: 24
103.42.180.0/24 maxlen: 24
103.42.181.0/24 maxlen: 24
103.42.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 04:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1481 (0x5c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Jan 14 23:31:33 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65a46ed5-2496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:c0:8e:2c:80:e7:36:8f:60:f5:ab:6e:9a:
6e:6b:81:a9:28:ef:20:e5:d1:cf:c1:93:32:f7:7b:
39:81:65:2c:3a:bc:f5:21:7e:84:78:25:d8:2c:b5:
65:cd:e2:b5:d3:a5:8d:a7:dd:37:78:44:49:97:c2:
89:39:bc:41:f1:96:58:12:4a:c8:64:28:6a:e8:07:
29:47:7f:d9:79:19:75:7d:c6:34:06:95:b3:f9:4e:
57:0a:5d:f6:49:35:80:9f:4e:25:05:36:f0:1e:31:
a6:ca:59:dc:46:28:5e:b2:85:82:11:0e:06:9b:2e:
13:53:76:f7:3d:77:db:94:6e:28:f7:5e:c6:91:55:
61:18:06:f7:f6:39:1f:ab:c0:52:44:81:6e:af:cb:
7d:4d:ef:a3:2a:52:70:b8:c1:ac:45:2f:32:72:03:
c7:b6:cd:4b:fd:a7:3c:9a:3c:69:a4:ee:58:eb:01:
7e:07:f3:ba:34:cf:c1:af:4e:cc:9b:24:ba:df:70:
e8:a4:20:ea:2a:71:22:c0:0d:e3:4b:a3:49:a7:6b:
1e:88:96:8d:62:5f:47:e0:c2:ba:93:2f:fa:65:5e:
cf:18:f6:43:e6:39:40:33:14:f4:e2:41:ef:e2:6a:
0a:a6:56:b3:03:9a:64:8d:9e:23:5e:ba:af:2e:7c:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9F:DF:84:8F:12:A7:8B:09:25:F8:02:86:0B:18:CB:71:93:BF:CD
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/913BDF8421BA11ECB2027C56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.116.0/22
103.42.180.0/23
103.42.183.0/24
Signature Algorithm: sha256WithRSAEncryption
91:90:09:49:bf:11:f5:54:11:e9:42:06:d3:d2:60:cc:b0:63:
7f:31:0b:73:1c:20:c0:5f:97:93:4b:bd:88:ec:39:18:da:7d:
ba:b5:20:34:58:97:98:c8:fd:7e:09:f4:57:21:90:94:7e:06:
df:90:ac:a1:ba:6e:24:85:ca:5e:44:ad:1f:bc:06:af:e9:5f:
d7:f9:e8:ac:db:ca:c4:4f:b9:d4:b0:87:f1:87:d9:e9:55:9c:
1a:11:13:99:ba:7d:bc:05:3b:27:5d:df:63:37:e0:88:0a:2c:
ee:72:e0:56:5b:ac:3d:8c:7f:64:dc:12:04:ee:96:98:5e:17:
80:81:05:10:44:b2:d7:0b:b3:46:6d:72:8c:c6:77:79:15:6d:
54:af:ba:9c:a3:68:4d:bf:ef:cd:35:ea:c2:5a:3d:3d:6e:59:
bf:14:6d:8a:8c:96:42:19:5c:af:f5:af:7b:c0:2d:c7:b2:7c:
1f:d9:7f:5d:a8:8c:6a:2f:eb:f8:26:bd:5e:a5:9a:f6:10:42:
d2:dc:b8:56:7d:6a:98:c2:09:fa:49:c0:c3:e5:4d:25:82:2e:
c2:3e:59:78:96:bb:9f:9f:65:f2:72:3a:19:b2:e4:de:4e:49:
de:61:1e:0b:bf:93:ff:a2:a0:bf:f4:06:1f:6a:87:d0:70:fc:
44:d7:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 08:41:49 2024 by rpki-client on console-fra.rpki-client.org