Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/48885EF25C2811EEBC691B64C4F9AE02.roa
File: 48885EF25C2811EEBC691B64C4F9AE02.roa (raw, json)
Hash identifier: LRw63KszsPsRd5EI3WOinoUaef5yVAHnxryScAILZ38=
Subject key identifier: 09:79:75:3E:4B:C5:7D:F4:FA:05:A7:2F:55:93:58:AC:16:7F:02:7B
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0185
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/48885EF25C2811EEBC691B64C4F9AE02.roa
Signing time: Wed 25 Oct 2023 06:46:22 +0000
ROA not before: Wed 25 Oct 2023 06:46:22 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.26.8.0/24 maxlen: 24
103.26.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Dec 2023 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Oct 25 06:46:22 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6538b9be-35f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:29:76:84:88:d0:b5:43:34:70:d4:69:72:
87:15:d8:2b:83:2b:dd:48:e7:a7:17:70:c4:76:9a:
5c:8c:74:2b:e1:36:81:65:ca:c8:e2:82:48:55:11:
d8:e2:c6:72:1d:bd:d4:74:fa:11:96:db:4d:cd:c6:
ef:56:16:38:04:8e:52:00:54:f6:c1:a7:65:4a:5d:
07:da:25:81:d5:e6:54:c3:a9:c8:68:59:2f:88:f5:
95:be:54:44:65:ed:aa:bb:a2:11:ea:c9:a1:10:13:
1a:5a:73:62:d5:5d:cc:8f:db:69:e9:3d:61:cb:43:
20:e8:63:51:63:3f:65:28:0f:0c:85:65:2a:7f:5e:
6a:b9:3e:7e:aa:84:e9:02:5f:4a:f1:80:12:59:81:
ac:ec:1f:ba:97:52:4f:a5:88:2a:43:f3:fc:9d:ad:
76:31:d2:82:89:6b:fd:d3:6f:e9:4e:dc:23:c8:8e:
84:7a:54:6c:d9:c6:52:eb:19:f1:6e:5a:90:3b:41:
61:4c:39:d7:cd:af:31:72:24:13:a5:26:d2:19:da:
b8:83:b6:36:48:72:ac:a1:bc:83:2e:7f:ba:13:36:
42:ab:13:66:4a:a4:cb:06:27:4a:e3:2c:ff:80:8f:
2d:28:de:b6:cf:60:75:30:f1:d1:4a:fe:b7:da:a4:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:75:3E:4B:C5:7D:F4:FA:05:A7:2F:55:93:58:AC:16:7F:02:7B
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/48885EF25C2811EEBC691B64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.8.0/24
103.26.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:cf:1a:39:00:52:0d:57:08:f2:0c:62:20:ff:f2:2c:7f:25:
ec:2c:41:0d:2d:f1:bf:cb:a4:47:e8:f7:4b:37:75:b2:32:e1:
fd:ad:c4:ee:af:ae:71:37:8f:41:8e:a6:24:e2:11:fb:4f:85:
38:96:63:e8:25:bf:2c:dc:98:63:3b:01:01:02:8b:cf:14:91:
45:f9:7a:01:33:30:13:08:b4:f9:df:f2:a2:2c:e2:ae:6c:de:
e4:50:fa:af:2c:34:76:01:e2:28:c6:2f:9a:03:44:80:25:19:
19:ec:8c:1a:04:80:38:b8:51:5c:0c:c5:6e:95:53:16:3c:84:
c2:2f:72:83:06:54:e5:ab:de:0d:ab:89:57:f1:57:a9:60:89:
88:77:55:2b:a5:d5:3d:58:29:cc:a1:15:22:67:6a:44:6f:fc:
75:5b:9e:e9:0b:85:28:8d:64:ac:50:5c:f4:31:32:4e:bc:48:
ae:a2:17:9e:38:3c:a6:1f:47:64:ca:ef:a4:d7:1f:b4:d3:9d:
81:d5:5c:f6:d3:1b:13:c8:e5:83:48:85:2a:78:cd:cc:62:8e:
c6:fd:b5:fc:11:8f:40:4d:2a:97:2b:2e:9e:f5:5f:33:22:61:
fa:96:b2:40:3d:ac:d8:cd:3b:28:e6:09:be:24:62:fa:85:a1:
e5:28:0a:68
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjMxMDI1MDY0NjIyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTM4YjliZS0zNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtH0pdoSI0LVDNHDUaXKHFdgrgyvdSOenF3DEdppcjHQr4TaBZcrI4oJIVRHY
4sZyHb3UdPoRlttNzcbvVhY4BI5SAFT2wadlSl0H2iWB1eZUw6nIaFkviPWVvlRE
Ze2qu6IR6smhEBMaWnNi1V3Mj9tp6T1hy0Mg6GNRYz9lKA8MhWUqf15quT5+qoTp
Al9K8YASWYGs7B+6l1JPpYgqQ/P8na12MdKCiWv902/pTtwjyI6EelRs2cZS6xnx
blqQO0FhTDnXza8xciQTpSbSGdq4g7Y2SHKsobyDLn+6EzZCqxNmSqTLBidK4yz/
gI8tKN62z2B1MPHRSv632qTEEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAl5dT5L
xX30+gWnL1WTWKwWfwJ7MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvNDg4ODVFRjI1
QzI4MTFFRUJDNjkxQjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnGggDBABnGgowDQYJKoZIhvcNAQELBQADggEBANDPGjkA
Ug1XCPIMYiD/8ix/JewsQQ0t8b/LpEfo90s3dbIy4f2txO6vrnE3j0GOpiTiEftP
hTiWY+glvyzcmGM7AQECi88UkUX5egEzMBMItPnf8qIs4q5s3uRQ+q8sNHYB4ijG
L5oDRIAlGRnsjBoEgDi4UVwMxW6VUxY8hMIvcoMGVOWr3g2riVfxV6lgiYh3VSul
1T1YKcyhFSJnakRv/HVbnukLhSiNZKxQXPQxMk68SK6iF544PKYfR2TK76TXH7TT
nYHVXPbTGxPI5YNIhSp4zcxijsb9tfwRj0BNKpcrLp71XzMiYfqWskA9rNjNOyjm
Cb4kYvqFoeUoCmg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org