Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F9DA1FCDDA711EC85D98516C4F9AE02.roa
File: 0F9DA1FCDDA711EC85D98516C4F9AE02.roa (raw, json)
Hash identifier: 3eWkn6PIMfKYhAKxrxLkASegn/1HMoWSZ/UtYxVA6kg=
Subject key identifier: E3:07:5F:54:97:4B:C9:A2:33:71:9E:9D:F9:29:46:25:09:94:37:98
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 07A9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F9DA1FCDDA711EC85D98516C4F9AE02.roa
Signing time: Fri 03 Jun 2022 05:26:57 +0000
ROA not before: Fri 03 Jun 2022 05:26:57 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.72.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 3 05:26:57 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62999ba1-64c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:37:3d:9f:4f:c6:87:57:95:10:e9:d7:f0:
a0:30:b5:de:f4:a2:b4:bc:20:07:12:de:4c:48:b9:
6f:05:bf:4e:8f:aa:96:c5:43:23:f4:19:97:08:88:
23:60:02:18:8d:0d:79:e8:c2:54:2a:b2:5f:ba:af:
e7:54:f0:a2:85:db:65:6d:f0:05:bc:bc:50:38:0e:
e5:d2:55:40:7d:de:6c:6b:1f:9d:c7:2f:61:68:b2:
a8:69:78:cc:77:b6:34:2c:bd:3f:33:0f:9b:e7:bb:
39:8f:d5:6b:0b:b4:52:57:41:db:98:26:63:67:9b:
c0:1a:77:d9:15:e8:cf:32:fb:f8:7b:12:c1:9b:ff:
ce:6d:31:ee:2c:18:2c:59:4a:e6:ea:ae:15:87:7c:
91:18:e3:7a:83:b8:e1:b0:14:19:87:82:92:54:7c:
4d:36:d9:cc:9e:dc:5a:50:95:4d:b5:0e:d4:6a:1c:
cd:61:37:b2:42:8b:d4:d3:16:08:53:ec:c2:1c:df:
28:e8:ec:4b:f7:a2:8f:e5:d3:ac:3f:ec:3e:9c:0c:
83:b9:3a:0e:ed:32:a9:f2:93:52:56:77:5e:14:38:
08:d3:4a:2b:12:13:5c:61:91:48:ee:26:ae:3a:ba:
a8:a8:84:5c:fa:27:51:ce:e6:12:cf:4b:1a:5c:a7:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:07:5F:54:97:4B:C9:A2:33:71:9E:9D:F9:29:46:25:09:94:37:98
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F9DA1FCDDA711EC85D98516C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.6.255
115.167.20.0/22
115.167.49.0/24
115.167.56.0/21
115.167.72.0/22
175.110.68.0-175.110.75.255
175.110.80.0-175.110.91.255
175.110.96.0/23
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
Signature Algorithm: sha256WithRSAEncryption
4a:82:0f:88:99:94:4f:e5:44:22:6c:17:92:cc:c7:94:32:52:
99:36:96:c3:a7:3e:16:54:1c:06:a6:7f:31:5e:61:c3:99:c6:
a6:35:c5:fc:48:71:14:d5:da:71:7e:be:25:b2:cc:0b:9b:62:
d8:de:f6:c4:11:19:00:62:aa:5a:1a:dd:1c:2b:2c:be:26:47:
d6:a1:ee:29:66:a7:a3:9a:b0:10:01:55:20:51:1e:01:66:66:
36:3a:a6:41:3c:7f:e3:27:14:44:2d:aa:de:7a:2e:0c:68:90:
fc:22:f0:67:71:44:e6:83:e3:88:42:4f:c8:f9:7c:ce:52:f3:
16:70:ad:80:a0:e5:c0:70:5f:3d:61:41:94:7a:2a:34:5f:e0:
92:9b:c1:a4:c5:1d:91:98:ee:bb:85:dc:5f:41:af:94:df:7c:
dd:ad:33:ce:36:86:76:76:c4:45:5b:c4:59:1e:c7:d7:eb:ef:
f9:ca:56:5d:98:e9:e4:88:ce:5e:56:89:c6:53:40:55:df:f3:
a6:ff:cb:f1:b3:3d:ee:c8:66:8f:89:41:2c:52:63:2b:24:a1:
c6:61:02:4f:02:25:c4:dd:c2:78:ba:e3:6d:1f:9f:a8:64:b3:
f0:aa:5f:db:1e:c2:3c:7c:8f:90:df:0e:20:85:f8:d8:22:81:
03:a1:88:35
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwNjAzMDUyNjU3WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk5OWJhMS02NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrw3PZ9PxodXlRDp1/CgMLXe9KK0vCAHEt5MSLlvBb9Oj6qWxUMj9BmXCIgj
YAIYjQ156MJUKrJfuq/nVPCihdtlbfAFvLxQOA7l0lVAfd5sax+dxy9haLKoaXjM
d7Y0LL0/Mw+b57s5j9VrC7RSV0HbmCZjZ5vAGnfZFejPMvv4exLBm//ObTHuLBgs
WUrm6q4Vh3yRGON6g7jhsBQZh4KSVHxNNtnMntxaUJVNtQ7UahzNYTeyQovU0xYI
U+zCHN8o6OxL96KP5dOsP+w+nAyDuToO7TKp8pNSVndeFDgI00orEhNcYZFI7iau
OrqoqIRc+idRzuYSz0saXKeP9wIDAQABo4IDGDCCAxQwHQYDVR0OBBYEFOMHX1SX
S8miM3GenfkpRiUJlDeYMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMEY5REExRkNE
REE3MTFFQzg1RDk4NTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaEGCCsGAQUFBwEHAQH/
BIGRMIGOMIGLBAIAATCBhDALAwMAc6cDBABzpwYDBAJzpxQDBABzpzEDBANzpzgD
BAJzp0gwDAMEAq9uRAMEAq9uSDAMAwQEr25QAwQCr25YAwQBr25gAwQAr25oAwUA
r25rAgMFAK9uaw4DBQCvbmtyAwQCr25sMAwDBATKXBADBAHKXBQwDAMEAMpcFwME
BcpcADANBgkqhkiG9w0BAQsFAAOCAQEASoIPiJmUT+VEImwXkszHlDJSmTaWw6c+
FlQcBqZ/MV5hw5nGpjXF/EhxFNXacX6+JbLMC5ti2N72xBEZAGKqWhrdHCssviZH
1qHuKWano5qwEAFVIFEeAWZmNjqmQTx/4ycURC2q3nouDGiQ/CLwZ3FE5oPjiEJP
yPl8zlLzFnCtgKDlwHBfPWFBlHoqNF/gkpvBpMUdkZjuu4XcX0GvlN983a0zzjaG
dnbERVvEWR7H1+vv+cpWXZjp5IjOXlaJxlNAVd/zpv/L8bM97shmj4lBLFJjKySh
xmECTwIlxN3CeLrjbR+fqGSz8Kpf2x7CPHyPkN8OIIX42CKBA6GINQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org