Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/59826A14A67211EFB454F72EC4F9AE02.roa
File: 59826A14A67211EFB454F72EC4F9AE02.roa (raw, json)
Hash identifier: G8qpTql31nBGDBSa7IKi+vn9y48X3GYtFS299qqCF8c=
Subject key identifier: 8C:E4:13:32:FF:83:F6:ED:5F:40:CA:84:60:57:DF:FB:0E:AA:12:B9
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 01F3
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/59826A14A67211EFB454F72EC4F9AE02.roa
Signing time: Tue 19 Nov 2024 12:34:45 +0000
ROA not before: Tue 19 Nov 2024 12:34:45 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 329007
IP address blocks: 103.85.200.0/24 maxlen: 24
103.85.201.0/24 maxlen: 24
103.85.202.0/24 maxlen: 24
103.85.203.0/24 maxlen: 24
110.44.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 07:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Nov 19 12:34:45 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=673c85e5-4f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:aa:9f:53:f4:27:e3:a9:60:ff:00:b2:ca:
5f:a2:58:79:0a:8b:e3:55:d8:7c:2b:d8:a3:d9:c0:
49:32:63:87:22:dd:52:36:06:ff:dc:f9:1a:c5:9c:
b5:b5:e1:6c:c3:eb:37:c3:bb:47:a7:94:40:ae:38:
bc:b0:f8:ef:ed:9e:09:c0:3d:5e:91:7d:70:53:86:
a8:e3:bc:56:2a:d7:a7:40:ec:bb:ef:9b:61:74:ad:
e7:72:fd:3d:90:87:fa:d3:d5:c0:c4:a5:7d:27:d6:
ea:4b:13:db:2c:aa:72:ec:12:91:c4:6e:22:eb:3f:
1a:34:57:ae:53:a0:53:83:31:7a:0d:ee:c4:a3:c7:
29:55:c2:79:61:f5:e2:0d:0f:5e:78:07:cc:e9:88:
65:53:3a:10:1e:42:42:87:4c:9a:17:ef:50:43:f4:
88:cd:af:ab:87:5a:aa:0b:af:3a:88:33:f3:64:01:
05:89:aa:f2:14:58:d6:c5:73:76:73:a2:ac:df:d6:
3d:f0:b4:55:b4:d3:a8:42:a9:34:bb:02:7a:67:fb:
d7:07:13:f2:0a:44:7d:30:f6:33:a1:3e:ca:e1:64:
fa:9b:0b:04:d6:ce:1d:70:58:b8:9e:60:f5:80:4a:
0f:23:02:f7:d3:7c:18:91:2c:56:c7:ca:eb:46:46:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:13:32:FF:83:F6:ED:5F:40:CA:84:60:57:DF:FB:0E:AA:12:B9
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/59826A14A67211EFB454F72EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.200.0/22
110.44.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ae:1b:16:d6:6d:2c:e9:24:29:c5:e0:44:d3:49:84:d1:0a:
77:7e:0e:b9:e7:55:d6:41:22:db:62:f9:0e:47:21:30:8a:c0:
90:db:dc:aa:32:a2:f2:a6:70:ee:8e:96:44:93:b8:42:25:81:
d9:18:b4:3e:a1:ba:b5:cc:24:b4:3b:08:fe:b8:63:8f:78:56:
3f:8c:9c:05:13:c5:bc:76:e6:90:57:7c:b1:a6:2e:0b:9a:e1:
02:32:c7:07:35:e7:1c:46:49:75:70:e4:0e:bb:65:60:80:47:
2c:4f:87:83:b6:4c:11:fe:03:3f:bb:22:5e:2c:fe:27:76:c3:
97:c5:ee:6b:dd:d0:47:06:5b:76:5a:38:e2:98:ec:48:40:ae:
db:94:8f:2e:04:dc:e8:48:f6:18:52:0e:e7:55:86:da:1a:73:
ee:ab:55:36:b3:4d:94:dc:0c:a6:9e:3e:09:78:84:d6:71:0e:
2b:1d:e3:74:c1:38:f9:80:8b:d6:fc:2c:99:a4:35:1c:dd:0f:
aa:94:20:74:1e:c6:9d:3a:f4:7e:b1:3b:8a:ba:72:d7:22:3f:
4d:38:4e:7f:42:bf:ae:36:c7:d0:b5:92:7e:4b:b5:96:dc:52:
4d:a1:dd:51:5e:eb:d9:86:0f:49:be:37:0a:54:ca:18:3d:e4:
6c:77:29:30
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF
MDIwNDg4RDQwHhcNMjQxMTE5MTIzNDQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNjODVlNS00ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06Kqn1P0J+OpYP8Asspfolh5CovjVdh8K9ij2cBJMmOHIt1SNgb/3PkaxZy1
teFsw+s3w7tHp5RArji8sPjv7Z4JwD1ekX1wU4ao47xWKtenQOy775thdK3ncv09
kIf609XAxKV9J9bqSxPbLKpy7BKRxG4i6z8aNFeuU6BTgzF6De7Eo8cpVcJ5YfXi
DQ9eeAfM6YhlUzoQHkJCh0yaF+9QQ/SIza+rh1qqC686iDPzZAEFiaryFFjWxXN2
c6Ks39Y98LRVtNOoQqk0uwJ6Z/vXBxPyCkR9MPYzoT7K4WT6mwsE1s4dcFi4nmD1
gEoPIwL303wYkSxWx8rrRkY3yQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIzkEzL/
g/btX0DKhGBX3/sOqhK5MB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz
MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTAxNUQvNkM0NzQ5MjA3MzEyMTFFREI3MEJDRTMzQzRGOUFFMDIvNTk4MjZBMTRB
NjcyMTFFRkI0NTRGNzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnVcgDBABuLG8wDQYJKoZIhvcNAQELBQADggEBAKeuGxbW
bSzpJCnF4ETTSYTRCnd+DrnnVdZBItti+Q5HITCKwJDb3KoyovKmcO6OlkSTuEIl
gdkYtD6hurXMJLQ7CP64Y494Vj+MnAUTxbx25pBXfLGmLgua4QIyxwc15xxGSXVw
5A67ZWCARyxPh4O2TBH+Az+7Il4s/id2w5fF7mvd0EcGW3ZaOOKY7EhArtuUjy4E
3OhI9hhSDudVhtoac+6rVTazTZTcDKaePgl4hNZxDisd43TBOPmAi9b8LJmkNRzd
D6qUIHQexp069H6xO4q6ctciP004Tn9Cv642x9C1kn5LtZbcUk2h3VFe69mGD0m+
NwpUyhg95Gx3KTA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:16:12 2024 by rpki-client on console-ams.rpki-client.org