Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C833DC72966011EEB5335A1FC4F9AE02.roa
File: C833DC72966011EEB5335A1FC4F9AE02.roa (raw, json)
Hash identifier: kGJ3dFyy3ARAEzH3ycJC5QnmVIogv3ecSLmfWzCpM6g=
Subject key identifier: 29:BE:D3:C9:AA:B1:4E:B2:11:1F:A3:96:B0:7D:7E:FB:3B:C5:75:2D
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 01A3
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C833DC72966011EEB5335A1FC4F9AE02.roa
Signing time: Sat 09 Dec 2023 07:02:08 +0000
ROA not before: Sat 09 Dec 2023 07:02:08 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 16509
IP address blocks: 103.26.8.0/24 maxlen: 24
103.26.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 05:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Dec 9 07:02:08 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=657410ef-751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:8c:d3:9b:ab:65:55:86:6f:17:b5:47:59:
41:68:80:42:64:a1:ef:4d:c4:04:ac:4c:00:34:2f:
a1:53:1f:ee:0c:d9:8d:d2:a6:17:98:1c:4b:f0:56:
62:d2:88:d8:1e:ba:0d:3f:ba:26:ba:e8:da:3c:47:
b6:ac:c4:e2:07:42:1a:f7:52:58:a9:89:ea:10:49:
51:0f:34:27:31:42:92:50:f6:c3:97:17:f6:95:03:
a0:aa:b6:b8:68:4e:92:f8:a9:c5:54:95:a9:e4:98:
18:2d:b3:39:f2:bc:34:88:fa:ac:6b:01:bb:32:cd:
dc:d8:22:d6:24:27:fd:bc:6c:ba:6c:17:03:02:de:
6f:89:da:c9:40:8c:ed:2f:79:30:4a:86:66:34:2a:
81:92:54:d2:c4:44:9b:67:8a:76:3e:d1:65:b1:88:
76:53:26:c7:e9:fc:8f:ef:17:68:f9:bc:64:3a:20:
30:30:10:e4:4b:40:6e:44:21:0b:0d:2f:67:90:0d:
cf:bd:cc:0c:25:49:4d:91:f9:93:62:9d:6e:66:bb:
4f:7a:2d:39:cc:bd:8c:7d:d5:97:75:a4:83:c3:b6:
11:76:e9:2b:4a:1f:5d:5a:6f:f7:dc:84:45:59:d9:
15:47:ac:93:98:74:06:a5:64:04:0f:00:0a:c9:25:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:D3:C9:AA:B1:4E:B2:11:1F:A3:96:B0:7D:7E:FB:3B:C5:75:2D
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C833DC72966011EEB5335A1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.8.0/24
103.26.11.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ed:01:2e:a2:29:ce:33:b0:4f:23:75:e5:82:5d:52:ae:90:
31:1f:21:15:ef:87:d2:b6:c6:25:07:36:60:d4:4a:16:3c:54:
fc:69:65:92:27:a8:22:da:13:d7:75:e5:da:0e:d6:6f:ae:5e:
b7:b3:08:0d:e8:a1:36:db:06:4f:ca:34:94:6d:18:c6:82:46:
e0:7a:56:0a:ec:e3:07:8b:84:25:7b:3d:66:3e:93:d6:af:d0:
97:5d:67:ab:5b:ec:73:d4:23:f1:47:d4:45:73:3a:9a:95:3f:
3a:1a:4b:60:48:8d:7b:01:5b:dc:e6:d1:63:08:c7:ff:31:35:
01:4b:21:e9:07:7d:ff:b0:96:6d:6f:52:dd:44:39:79:f9:c3:
b4:cb:6b:40:3c:05:e3:3b:6d:e8:45:fb:f3:56:3d:88:3b:53:
0c:ff:9f:c7:5d:99:58:96:1f:06:2c:77:36:0d:d2:2c:95:b8:
6e:66:21:90:6f:93:60:9d:7a:d8:72:02:b0:62:ca:a9:55:1d:
73:c5:7a:5b:7b:3d:24:97:36:f8:e6:f8:95:e1:8e:98:ea:31:
78:b7:b7:d2:a2:56:78:d2:5f:16:57:80:2d:3b:8d:fb:b5:49:
f6:92:4d:7d:f8:78:14:b2:f4:75:fb:34:49:cf:70:96:1b:e2:
7c:3a:19:39
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjMxMjA5MDcwMjA4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTc0MTBlZi03NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArAWM05urZVWGbxe1R1lBaIBCZKHvTcQErEwANC+hUx/uDNmN0qYXmBxL8FZi
0ojYHroNP7omuujaPEe2rMTiB0Ia91JYqYnqEElRDzQnMUKSUPbDlxf2lQOgqra4
aE6S+KnFVJWp5JgYLbM58rw0iPqsawG7Ms3c2CLWJCf9vGy6bBcDAt5vidrJQIzt
L3kwSoZmNCqBklTSxESbZ4p2PtFlsYh2UybH6fyP7xdo+bxkOiAwMBDkS0BuRCEL
DS9nkA3PvcwMJUlNkfmTYp1uZrtPei05zL2MfdWXdaSDw7YRdukrSh9dWm/33IRF
WdkVR6yTmHQGpWQEDwAKySWxSwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCm+08mq
sU6yER+jlrB9fvs7xXUtMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQzgzM0RDNzI5
NjYwMTFFRUI1MzM1QTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnGggDBABnGgswDQYJKoZIhvcNAQELBQADggEBABPtAS6i
Kc4zsE8jdeWCXVKukDEfIRXvh9K2xiUHNmDUShY8VPxpZZInqCLaE9d15doO1m+u
XrezCA3ooTbbBk/KNJRtGMaCRuB6Vgrs4weLhCV7PWY+k9av0JddZ6tb7HPUI/FH
1EVzOpqVPzoaS2BIjXsBW9zm0WMIx/8xNQFLIekHff+wlm1vUt1EOXn5w7TLa0A8
BeM7behF+/NWPYg7Uwz/n8ddmViWHwYsdzYN0iyVuG5mIZBvk2CdethyArBiyqlV
HXPFelt7PSSXNvjm+JXhjpjqMXi3t9KiVnjSXxZXgC07jfu1SfaSTX34eBSy9HX7
NEnPcJYb4nw6GTk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org