Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/F5F9E18C03AD11EFB774F02CC4F9AE02.roa
File: F5F9E18C03AD11EFB774F02CC4F9AE02.roa (raw, json)
Hash identifier: jCqUz+Usiv4ArTR7MM3VjkZDxVcbQ3v3x1mOYCoZ9MU=
Subject key identifier: 41:1C:B8:D6:F6:58:66:26:AC:69:44:BD:09:D6:A3:51:71:D1:46:92
Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Certificate serial: 04
Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/F5F9E18C03AD11EFB774F02CC4F9AE02.roa
Signing time: Fri 26 Apr 2024 09:18:36 +0000
ROA not before: Fri 26 Apr 2024 09:18:36 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 151609
IP address blocks: 103.51.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 26 Apr 2024 12:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Validity
Not Before: Apr 26 09:18:36 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=662b716c-5048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:89:09:a0:64:51:77:bb:2e:ec:d7:96:b8:
96:ac:22:6c:d2:de:04:d3:20:1e:3d:08:37:0c:5f:
97:25:11:0a:31:83:a3:74:94:2b:ce:14:e6:c0:ff:
86:0e:8b:cf:e4:d3:6c:0a:6e:91:be:86:fb:5d:c4:
64:3a:e8:63:bf:8a:2b:e1:33:aa:83:94:4c:b8:69:
82:7a:3e:89:f5:e6:7c:30:51:e3:49:11:b9:bd:60:
5e:4c:31:6c:9d:bb:24:7e:ed:53:48:6b:5a:d5:3f:
cd:61:11:0a:a6:0e:69:f6:59:00:60:89:4b:f8:e7:
5b:d2:1a:6b:23:f4:40:d2:38:d6:2e:c6:50:3e:97:
ba:bf:40:a9:5d:d1:bc:9e:b1:2d:eb:c4:b4:e1:e0:
fd:e0:04:4e:74:b0:4c:51:b7:21:e9:97:a8:63:a2:
1f:bd:cd:ef:39:8c:3e:e6:b1:0f:f6:62:8c:9f:d0:
f5:76:a9:a8:28:b8:7a:9f:2a:9a:5d:cb:68:9f:21:
09:3c:9b:17:50:84:c2:1b:ac:23:fc:79:7c:cf:85:
dd:3e:99:da:6a:7a:47:e5:d9:48:d4:37:03:b8:65:
1d:5c:ee:d2:b3:6e:40:72:c0:f8:8a:16:62:e9:33:
a9:f4:9f:84:80:01:5f:17:63:e1:d5:91:b5:ae:44:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:B8:D6:F6:58:66:26:AC:69:44:BD:09:D6:A3:51:71:D1:46:92
X509v3 Authority Key Identifier:
keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/F5F9E18C03AD11EFB774F02CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.62.0/23
Signature Algorithm: sha256WithRSAEncryption
34:c6:d4:d1:89:96:ac:e1:15:f6:25:da:44:84:79:c1:4d:8b:
8c:c3:88:e5:b3:84:64:49:04:fa:63:00:f0:98:db:c0:d1:e8:
67:05:f5:4b:ea:a0:5b:f8:bf:e2:b8:30:0c:0b:7a:33:af:bc:
80:71:d2:7f:da:7c:07:8a:eb:65:99:bd:80:0a:f1:06:d6:4c:
c7:63:bf:40:cf:64:18:68:64:e6:ca:80:96:41:af:f2:16:fc:
6f:49:2f:5a:f8:4f:4b:c8:45:c4:a5:45:54:e1:93:f8:7e:c2:
ae:55:64:9c:ff:ca:82:26:bf:52:91:41:99:00:d2:f4:fb:68:
75:aa:97:ea:62:86:b0:bb:c8:41:da:69:92:51:49:fa:88:c0:
74:c8:46:93:ab:a4:00:fa:7f:b7:02:e6:e7:93:92:6e:ff:91:
57:94:ba:90:13:92:91:d2:7a:27:f1:5c:16:7d:cb:94:e3:9f:
c7:3a:33:4d:16:0f:d5:fc:42:85:51:c9:aa:f5:1a:94:46:83:
71:e4:a9:f7:b0:0d:11:69:9e:c7:4e:bb:e1:b1:bc:e2:b7:3f:
06:d8:05:c9:8f:99:6b:9b:7c:2a:9a:d8:89:f1:a4:82:dc:3a:
a3:d2:7e:cf:92:20:6c:ae:2d:59:15:e6:eb:4c:82:a7:f7:98:
fd:5e:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org