Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/13EAC2721F0D11EF9AF92070C4F9AE02.roa
File: 13EAC2721F0D11EF9AF92070C4F9AE02.roa (raw, json)
Hash identifier: Gdn+56+9MSvmvO5qGwqwRBaV9Ya71Da10EaOQKBPczo=
Subject key identifier: 78:D3:8C:15:69:1A:56:CA:5F:20:44:57:8E:57:E8:61:7F:43:67:ED
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0238
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/13EAC2721F0D11EF9AF92070C4F9AE02.roa
Signing time: Sat 27 Jul 2024 05:18:31 +0000
ROA not before: Sat 27 Jul 2024 05:18:31 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.26.8.0/24 maxlen: 24
103.26.9.0/24 maxlen: 24
103.26.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 05:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jul 27 05:18:31 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a48326-81f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:05:98:e7:b2:48:23:67:b2:df:28:3f:35:
16:8f:30:9b:38:88:99:1c:ad:6f:70:13:4d:18:dc:
48:37:6e:4d:5e:9c:6e:c5:f9:06:1d:e9:c0:96:ec:
62:7a:39:74:4c:fc:e2:af:92:43:05:34:ba:f5:d2:
59:a4:cd:f6:10:a6:05:b2:47:c5:9c:c9:72:ed:71:
c7:0d:35:26:f5:75:15:ed:65:77:54:1c:20:95:e9:
4d:17:6d:66:44:bc:85:98:6f:a4:3f:9d:4d:82:2c:
1d:e0:0a:8d:f2:4c:1b:9c:27:7a:6b:c4:d5:b5:5e:
8b:6c:36:08:2b:87:99:4a:a9:3c:d4:c6:83:c1:ba:
a2:d1:42:cc:2f:31:15:2e:4f:a7:62:cc:42:17:5e:
7c:54:9c:f4:e5:b2:eb:28:b0:20:70:36:4e:90:1c:
17:d8:3a:d0:0d:6b:cb:92:ce:9d:b1:41:db:9b:7b:
ad:d8:1a:b5:00:97:9d:f9:9f:d3:bd:f2:e4:57:d0:
9c:64:4a:c8:fc:ea:b5:2d:09:db:01:52:f6:f1:30:
ba:5b:a2:9b:48:cd:1e:fd:d1:10:70:79:8d:52:fc:
0b:13:97:b2:67:53:d6:64:24:32:2c:95:40:66:5b:
0d:5c:c5:ab:5e:64:ec:fe:dc:f2:4b:2d:91:f0:0f:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:8C:15:69:1A:56:CA:5F:20:44:57:8E:57:E8:61:7F:43:67:ED
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/13EAC2721F0D11EF9AF92070C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.8.0/23
103.26.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:db:a1:88:0a:e3:dd:9a:78:5c:2c:f7:4e:ff:2a:48:85:0c:
b3:d7:6d:75:32:3b:27:52:b3:28:fb:b4:8b:03:bd:94:35:ef:
b8:40:fb:e0:65:a4:81:b1:d9:89:ea:da:13:34:96:81:58:c4:
40:e8:85:96:21:6f:55:9e:90:a1:99:9d:d2:a1:ff:4f:83:c8:
07:5c:05:c7:f5:63:84:e0:3d:9e:07:20:fa:c9:3c:0c:90:ca:
55:0a:42:72:fc:23:70:dc:81:42:82:65:0c:55:73:98:23:ca:
57:f1:28:74:1b:79:53:2e:5e:cb:74:c7:73:94:e2:8a:16:3c:
e0:b1:78:fa:a0:69:60:78:f9:71:42:a6:95:ef:e4:44:2c:e7:
55:5e:69:ee:3c:a5:0a:85:53:6a:24:3a:58:58:44:33:4c:22:
4d:d9:a0:49:48:0e:f9:dc:4d:3a:ff:89:ad:5c:62:aa:22:5f:
f3:62:3b:c5:9a:a0:ee:46:a4:cb:64:4a:b4:8f:77:e0:52:b5:
67:b8:24:58:45:7c:20:b1:fa:14:bd:7c:bc:73:48:3f:8f:9a:
d4:df:80:c3:0c:71:f4:92:ff:c7:45:9c:60:e7:83:1d:71:8c:
26:ce:ba:e2:dc:13:62:ce:c0:04:c8:81:76:dc:d6:31:75:ad:
07:c3:37:b0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjQwNzI3MDUxODMxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE0ODMyNi04MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoDcFmOeySCNnst8oPzUWjzCbOIiZHK1vcBNNGNxIN25NXpxuxfkGHenAluxi
ejl0TPzir5JDBTS69dJZpM32EKYFskfFnMly7XHHDTUm9XUV7WV3VBwglelNF21m
RLyFmG+kP51Ngiwd4AqN8kwbnCd6a8TVtV6LbDYIK4eZSqk81MaDwbqi0ULMLzEV
Lk+nYsxCF158VJz05bLrKLAgcDZOkBwX2DrQDWvLks6dsUHbm3ut2Bq1AJed+Z/T
vfLkV9CcZErI/Oq1LQnbAVL28TC6W6KbSM0e/dEQcHmNUvwLE5eyZ1PWZCQyLJVA
ZlsNXMWrXmTs/tzySy2R8A9n5QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHjTjBVp
GlbKXyBEV45X6GF/Q2ftMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvMTNFQUMyNzIx
RjBEMTFFRjlBRjkyMDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnGggDBABnGgswDQYJKoZIhvcNAQELBQADggEBAB7boYgK
492aeFws907/KkiFDLPXbXUyOydSsyj7tIsDvZQ177hA++BlpIGx2Ynq2hM0loFY
xEDohZYhb1WekKGZndKh/0+DyAdcBcf1Y4TgPZ4HIPrJPAyQylUKQnL8I3DcgUKC
ZQxVc5gjylfxKHQbeVMuXst0x3OU4ooWPOCxePqgaWB4+XFCppXv5EQs51Veae48
pQqFU2okOlhYRDNMIk3ZoElIDvncTTr/ia1cYqoiX/NiO8WaoO5GpMtkSrSPd+BS
tWe4JFhFfCCx+hS9fLxzSD+PmtTfgMMMcfSS/8dFnGDngx1xjCbOuuLcE2LOwATI
gXbc1jF1rQfDN7A=
-----END CERTIFICATE-----
Generated at Tue Jul 30 06:48:15 2024 by rpki-client on console-fra.rpki-client.org