Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/8D309624568911EC8F5F0E57C4F9AE02.roa
File: 8D309624568911EC8F5F0E57C4F9AE02.roa (raw, json)
Hash identifier: R1kwFOfFKrK8LD5lJcrIPjK6iLe5o07RsOM+EoT1JUA=
Subject key identifier: 4F:66:0D:BF:AC:66:7A:C1:6A:C1:C8:70:10:2B:16:3D:2D:3D:5D:AF
Certificate issuer: /CN=A91D8AD4/serialNumber=FD48C1F708AAA3AEAF74C5772EEF23893EB049AB
Certificate serial: 02BA
Authority key identifier: FD:48:C1:F7:08:AA:A3:AE:AF:74:C5:77:2E:EF:23:89:3E:B0:49:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UjB9wiqo66vdMV3Lu8jiT6wSas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/8D309624568911EC8F5F0E57C4F9AE02.roa
Signing time: Wed 05 Apr 2023 04:04:04 +0000
ROA not before: Wed 05 Apr 2023 04:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132146
IP address blocks: 103.87.72.0/22 maxlen: 24
116.204.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 09:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8AD4/serialNumber=FD48C1F708AAA3AEAF74C5772EEF23893EB049AB
Validity
Not Before: Apr 5 04:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642cf334-d8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:d0:f8:cd:7c:bc:6c:9b:83:4e:28:5d:eb:
b2:7f:dc:4b:21:e4:ab:03:e7:35:62:9f:fe:97:92:
61:12:c3:ea:b9:e0:03:ce:ca:b6:f6:69:c4:84:57:
a5:f5:cb:67:36:82:d3:9b:2f:03:87:08:21:ff:c0:
7b:03:a7:28:2b:9f:fa:44:f2:92:5c:07:f9:61:8d:
32:1f:36:ce:c1:4f:36:82:ab:9d:da:0f:e3:02:88:
69:9e:68:f3:fe:4f:be:bd:73:4a:8e:80:69:57:7c:
45:74:26:f5:f6:db:90:fe:e3:c5:8d:de:c7:0a:0e:
d8:aa:be:4f:fc:e5:03:17:48:04:c2:75:ef:b9:b3:
70:ea:43:86:df:eb:2e:88:b2:73:09:b7:d1:fe:83:
0a:43:cb:a7:d9:4d:5e:df:8d:b5:cb:c1:79:cf:99:
6e:16:29:d5:16:58:0e:24:56:e2:0e:c9:c2:10:5d:
ee:10:4f:71:26:38:c7:a0:56:77:24:b3:90:aa:ae:
91:78:48:dc:d3:3e:e9:db:a4:58:11:20:ed:46:82:
d1:93:7d:00:25:49:ea:e8:e6:21:5b:50:9e:a3:87:
b0:ca:ef:93:a7:b5:21:3b:f3:15:88:85:e4:5d:b5:
ff:16:a1:25:de:97:ce:81:0f:7a:78:a5:0c:4e:96:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:0D:BF:AC:66:7A:C1:6A:C1:C8:70:10:2B:16:3D:2D:3D:5D:AF
X509v3 Authority Key Identifier:
keyid:FD:48:C1:F7:08:AA:A3:AE:AF:74:C5:77:2E:EF:23:89:3E:B0:49:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/_UjB9wiqo66vdMV3Lu8jiT6wSas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UjB9wiqo66vdMV3Lu8jiT6wSas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/8D309624568911EC8F5F0E57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.72.0/22
116.204.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:05:a4:b4:10:52:80:5b:90:9d:a4:46:26:99:99:1f:92:23:
f2:f3:fb:a6:ce:73:f1:51:b6:81:27:58:15:39:30:0a:a7:85:
61:1e:f8:ea:57:0e:12:61:11:1f:1c:a1:58:c9:e4:80:4a:25:
08:65:ce:57:6f:d2:da:28:af:bd:08:08:6a:e9:3b:05:92:05:
06:dd:44:e1:16:27:5c:58:97:d3:24:1b:87:63:62:9c:da:db:
61:45:01:57:56:a8:81:bf:72:18:df:0d:7a:5c:98:42:fb:f8:
eb:96:11:e8:77:ba:aa:04:4e:51:9a:07:8d:b3:0c:0d:0f:57:
d2:d5:2d:6c:71:05:65:59:1f:2c:fd:9a:c7:b3:27:7b:43:77:
50:fd:9e:66:59:87:00:ff:cd:0a:33:98:ec:dc:58:4f:74:fe:
e4:79:8b:0a:61:fc:e9:57:7c:5b:6a:d9:74:10:fb:7d:af:ae:
7a:f8:e5:e0:f3:bb:72:b9:6e:7f:ed:64:93:88:16:cd:5e:4c:
b1:01:69:d6:0b:a3:34:e5:d0:11:5c:db:2a:a6:7a:01:aa:b1:
ab:50:6e:4e:cc:3c:3b:19:21:d7:fa:b3:a1:c3:a9:10:9e:b5:
04:48:ea:b9:6f:13:0b:3b:65:c2:be:3f:8a:4b:64:24:77:41:
e4:b5:f6:ae
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhBRDQxMTAvBgNVBAUTKEZENDhDMUY3MDhBQUEzQUVBRjc0QzU3NzJFRUYyMzg5
M0VCMDQ5QUIwHhcNMjMwNDA1MDQwNDA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDJjZjMzNC1kOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2X/Q+M18vGybg04oXeuyf9xLIeSrA+c1Yp/+l5JhEsPqueADzsq29mnEhFel
9ctnNoLTmy8Dhwgh/8B7A6coK5/6RPKSXAf5YY0yHzbOwU82gqud2g/jAohpnmjz
/k++vXNKjoBpV3xFdCb19tuQ/uPFjd7HCg7Yqr5P/OUDF0gEwnXvubNw6kOG3+su
iLJzCbfR/oMKQ8un2U1e3421y8F5z5luFinVFlgOJFbiDsnCEF3uEE9xJjjHoFZ3
JLOQqq6ReEjc0z7p26RYESDtRoLRk30AJUnq6OYhW1Ceo4ewyu+Tp7UhO/MViIXk
XbX/FqEl3pfOgQ96eKUMTpa4cQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFE9mDb+s
ZnrBasHIcBArFj0tPV2vMB8GA1UdIwQYMBaAFP1IwfcIqqOur3TFdy7vI4k+sEmr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEFENC9CMjk5MTBCQTU2
ODYxMUVDOUM4RUY2NTFDNEY5QUUwMi9fVWpCOXdpcW82NnZkTVYzTHU4amlUNndT
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VakI5d2lxbzY2dmRNVjNMdThqaVQ2d1Nhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDhBRDQvQjI5OTEwQkE1Njg2MTFFQzlDOEVGNjUxQzRGOUFFMDIvOEQzMDk2MjQ1
Njg5MTFFQzhGNUYwRTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnV0gDBAJ0zNgwDQYJKoZIhvcNAQELBQADggEBAB0FpLQQ
UoBbkJ2kRiaZmR+SI/Lz+6bOc/FRtoEnWBU5MAqnhWEe+OpXDhJhER8coVjJ5IBK
JQhlzldv0toor70ICGrpOwWSBQbdROEWJ1xYl9MkG4djYpza22FFAVdWqIG/chjf
DXpcmEL7+OuWEeh3uqoETlGaB42zDA0PV9LVLWxxBWVZHyz9msezJ3tDd1D9nmZZ
hwD/zQozmOzcWE90/uR5iwph/OlXfFtq2XQQ+32vrnr45eDzu3K5bn/tZJOIFs1e
TLEBadYLozTl0BFc2yqmegGqsatQbk7MPDsZIdf6s6HDqRCetQRI6rlvEws7ZcK+
P4pLZCR3QeS19q4=
-----END CERTIFICATE-----
Generated at Thu Mar 28 12:46:35 2024 by rpki-client on console-ams.rpki-client.org