Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A64A1F08DC6B11EE8B1CEC53C4F9AE02.roa
File: A64A1F08DC6B11EE8B1CEC53C4F9AE02.roa (raw, json)
Hash identifier: ++lamvUQXkRvB5C5XqKIVjl0CMF/X5SDQkPs3/yb+LI=
Subject key identifier: 83:4D:78:D9:79:32:3E:C9:63:FD:E0:BB:1F:F8:81:5C:D6:B0:12:2C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0FF4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A64A1F08DC6B11EE8B1CEC53C4F9AE02.roa
Signing time: Thu 07 Mar 2024 10:15:40 +0000
ROA not before: Thu 07 Mar 2024 10:15:40 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.24.0/22 maxlen: 22
115.167.48.0/24 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4084 (0xff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 7 10:15:40 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65e993cc-942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:5c:ff:a8:5e:84:4e:fe:75:92:b9:31:2a:
c8:ba:41:bf:a1:43:d4:96:11:05:16:a2:77:60:81:
15:a2:55:51:c2:0d:fa:f3:15:6e:4a:60:cd:e2:38:
46:6c:b2:33:74:1f:a9:ac:c8:31:8e:36:e8:bd:46:
1a:90:50:87:75:0e:60:7a:4c:ba:98:1f:de:2a:11:
07:0b:bc:be:9c:58:0f:dc:86:2c:6f:5c:16:8f:6a:
8b:7a:6e:56:6c:bf:31:9e:e1:2b:38:3f:ad:8e:98:
0f:fa:fa:6e:be:29:dc:c3:c1:9c:1a:12:62:aa:d7:
da:4c:5a:66:63:cf:46:3e:82:66:d5:9b:c7:62:12:
70:4e:4d:63:d2:74:ce:a2:2b:cc:a3:e1:e8:81:e4:
7e:91:9c:59:2c:04:17:bd:00:bc:72:5e:d1:5c:f7:
d1:d7:0a:02:4b:d3:a2:e0:34:c1:01:56:23:9a:1f:
a7:4c:41:8f:b7:64:d9:89:ae:31:68:3e:6d:1f:10:
1e:b6:c4:93:44:28:5e:73:13:59:cc:c1:38:a5:0f:
a0:48:c9:f9:ad:d4:30:fa:02:88:ad:67:cc:44:c8:
51:2d:53:a7:89:08:93:12:1d:4b:eb:01:ae:f9:bb:
f6:12:3e:7e:1b:9a:64:bd:f2:18:34:c4:4c:c6:2b:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4D:78:D9:79:32:3E:C9:63:FD:E0:BB:1F:F8:81:5C:D6:B0:12:2C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A64A1F08DC6B11EE8B1CEC53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.16.0/22
115.167.24.0/22
115.167.48.0/24
115.167.52.0/22
115.167.60.0/22
115.167.77.0/24
115.167.100.0-115.167.107.255
115.167.112.0/22
175.110.64.0/22
175.110.72.0/22
175.110.84.0/22
175.110.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:61:0b:c3:34:e5:9a:39:74:47:c9:a9:6e:bf:8a:59:70:55:
03:89:8f:1b:f8:bf:b9:77:18:fb:06:45:82:1e:0b:dc:b1:3c:
85:dd:6c:c9:de:9e:23:03:0a:23:ff:c6:1d:fe:36:4b:8b:85:
73:73:cb:44:02:f7:46:3e:46:6f:7c:bb:cc:f7:ab:71:0b:ab:
e5:d3:e2:88:5e:ce:9c:ce:04:ef:80:af:db:68:0f:6b:99:d5:
0e:61:d9:f6:ba:ea:f7:9d:bd:dd:cf:37:46:c1:5e:75:f7:38:
4b:da:2f:d6:ff:1a:3a:69:7a:5a:bb:12:9f:39:d7:bf:eb:36:
b7:ad:8e:fc:47:9b:fd:61:e0:44:4c:19:92:c4:60:a6:c6:03:
78:da:19:16:e8:51:fe:b0:de:7b:76:19:0a:8c:0e:d7:73:8d:
0e:ad:94:6d:96:65:77:5f:9b:d0:97:46:ba:74:b8:cd:04:4d:
82:20:0e:9f:66:70:ad:8a:6c:f3:04:0a:7b:5e:4b:1d:16:b5:
38:c2:7b:f3:cb:35:99:42:d2:56:87:ea:71:43:ee:bb:6e:8f:
15:ec:db:1f:c3:f2:7b:5d:d5:bb:b0:1a:0a:c8:5b:ba:bd:b2:
9f:f0:04:96:ca:c0:26:cd:6c:32:a2:b9:a6:93:73:f0:2d:0d:
0d:7c:7e:7b
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgICD/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwMzA3MTAxNTQwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWU5OTNjYy05NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArh9c/6hehE7+dZK5MSrIukG/oUPUlhEFFqJ3YIEVolVRwg368xVuSmDN4jhG
bLIzdB+prMgxjjbovUYakFCHdQ5geky6mB/eKhEHC7y+nFgP3IYsb1wWj2qLem5W
bL8xnuErOD+tjpgP+vpuvincw8GcGhJiqtfaTFpmY89GPoJm1ZvHYhJwTk1j0nTO
oivMo+HogeR+kZxZLAQXvQC8cl7RXPfR1woCS9Oi4DTBAVYjmh+nTEGPt2TZia4x
aD5tHxAetsSTRChecxNZzME4pQ+gSMn5rdQw+gKIrWfMRMhRLVOniQiTEh1L6wGu
+bv2Ej5+G5pkvfIYNMRMxiv5AwIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFINNeNl5
Mj7JY/3gux/4gVzWsBIsMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQTY0QTFGMDhE
QzZCMTFFRThCMUNFQzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbwYIKwYBBQUHAQcBAf8E
YDBeMFwEAgABMFYDBABzpwEDBAJzpxADBAJzpxgDBABzpzADBAJzpzQDBAJzpzwD
BABzp00wDAMEAnOnZAMEAnOnaAMEAnOncAMEAq9uQAMEAq9uSAMEAq9uVAMEAK9u
YDANBgkqhkiG9w0BAQsFAAOCAQEAXmELwzTlmjl0R8mpbr+KWXBVA4mPG/i/uXcY
+wZFgh4L3LE8hd1syd6eIwMKI//GHf42S4uFc3PLRAL3Rj5Gb3y7zPercQur5dPi
iF7OnM4E74Cv22gPa5nVDmHZ9rrq95293c83RsFedfc4S9ov1v8aOml6WrsSnznX
v+s2t62O/Eeb/WHgREwZksRgpsYDeNoZFuhR/rDee3YZCowO13ONDq2UbZZld1+b
0JdGunS4zQRNgiAOn2ZwrYps8wQKe15LHRa1OMJ788s1mULSVofqcUPuu26PFezb
H8Pye13Vu7AaCshbur2yn/AElsrAJs1sMqK5ppNz8C0NDXx+ew==
-----END CERTIFICATE-----
Generated at Tue Apr 9 12:11:59 2024 by rpki-client on console-ams.rpki-client.org