Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F9B6769C11DE11EB8C752078C4F9AE02.roa
File: F9B6769C11DE11EB8C752078C4F9AE02.roa (raw, json)
Hash identifier: xNjbvGklWB3SyioPMTtdrZAUrrFYE6neX4ZGMWvSa5A=
Subject key identifier: 45:F3:39:17:0B:8B:37:D4:FE:90:CD:03:B6:84:69:ED:55:0E:D4:D7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0792
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F9B6769C11DE11EB8C752078C4F9AE02.roa
Signing time: Wed 01 Jun 2022 11:27:14 +0000
ROA not before: Wed 01 Jun 2022 11:27:14 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 1 11:27:14 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62974d11-7d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:f6:fa:9b:29:05:7c:5f:ca:61:09:d0:72:
c1:cf:02:e3:a8:db:09:54:76:1a:36:cc:2c:7b:16:
71:58:d2:bb:95:f4:eb:d4:66:fa:17:ac:a5:69:31:
3a:43:da:82:c8:4b:04:37:66:a3:06:44:b7:af:a6:
7e:35:91:c2:93:6b:40:ce:86:96:25:68:b3:3d:fb:
84:94:6c:fc:f2:a6:05:4b:c6:4a:7d:87:23:b8:01:
c4:dc:2e:5c:7b:5d:eb:36:36:83:01:a3:8d:ef:9e:
98:2c:59:05:2f:51:64:36:48:1e:bf:ca:d1:0d:4e:
f0:11:1c:b8:e7:99:22:e1:f9:bc:41:63:33:af:1a:
ef:e6:8a:40:64:35:38:6e:96:b7:33:79:e5:1d:11:
65:30:5f:6d:e8:4a:01:69:35:46:c3:e4:a0:e1:05:
7d:85:f0:b8:70:d4:c4:b7:3e:2f:30:bf:bd:74:35:
86:14:78:bc:64:26:ef:ea:c5:4d:e3:1c:2e:01:2b:
17:3e:6a:49:13:46:01:03:0e:0e:1f:12:14:71:d0:
eb:a6:77:c8:3c:74:fd:ab:f7:07:cb:b8:63:a1:e3:
8d:3e:eb:c3:94:22:c3:4f:03:6e:78:7a:34:a5:6c:
5c:67:77:ac:0e:99:9a:73:7b:0c:af:0c:a4:ae:fa:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:39:17:0B:8B:37:D4:FE:90:CD:03:B6:84:69:ED:55:0E:D4:D7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F9B6769C11DE11EB8C752078C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/23
115.167.64.0/22
115.167.76.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cf:83:15:f7:9f:e1:ba:9a:85:fc:23:d5:9b:0e:2d:e6:61:
cc:01:3e:3e:18:cb:81:e3:b0:31:9e:c3:c8:67:1d:61:b2:af:
69:41:26:65:5f:b4:d0:c5:96:b3:30:d7:1f:da:97:ea:cb:ff:
77:43:02:6d:fb:d0:da:78:7f:d6:71:c9:07:1d:8f:9c:2e:2a:
a3:38:d2:c5:df:5f:a0:b4:b8:53:14:09:22:2b:36:cb:65:4e:
d5:66:91:78:e4:e9:20:6b:93:32:53:0b:b6:ce:79:ed:7a:ad:
bd:f4:d9:41:72:c1:d3:e9:71:d5:c8:b0:f6:37:cc:43:da:28:
fe:2e:62:0b:9a:40:a4:9d:1b:19:1c:91:36:ac:47:4a:5f:a1:
5b:bf:f7:83:33:b8:60:72:9b:9c:2a:6d:4d:ed:51:23:82:91:
4c:98:54:a9:65:f8:25:3f:f7:80:1c:a9:d2:d9:82:3f:0f:4d:
71:ed:ad:e8:85:cf:a1:67:c6:9a:5e:7e:c4:a0:71:29:27:47:
e6:96:e5:44:9b:a6:8f:51:3d:23:35:64:26:c1:0f:39:b8:01:
2c:3e:78:a1:14:8f:54:cb:13:40:cd:aa:88:29:86:40:b6:f2:
9f:26:0e:0a:b0:6c:1c:39:bd:72:24:78:1d:2b:c2:05:af:78:
23:fe:6c:bb
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwNjAxMTEyNzE0WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk3NGQxMS03ZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmdX2+pspBXxfymEJ0HLBzwLjqNsJVHYaNswsexZxWNK7lfTr1Gb6F6ylaTE6
Q9qCyEsEN2ajBkS3r6Z+NZHCk2tAzoaWJWizPfuElGz88qYFS8ZKfYcjuAHE3C5c
e13rNjaDAaON756YLFkFL1FkNkgev8rRDU7wERy455ki4fm8QWMzrxrv5opAZDU4
bpa3M3nlHRFlMF9t6EoBaTVGw+Sg4QV9hfC4cNTEtz4vML+9dDWGFHi8ZCbv6sVN
4xwuASsXPmpJE0YBAw4OHxIUcdDrpnfIPHT9q/cHy7hjoeONPuvDlCLDTwNueHo0
pWxcZ3esDpmac3sMrwykrvphnwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEXzORcL
izfU/pDNA7aEae1VDtTXMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjlCNjc2OUMx
MURFMTFFQjhDNzUyMDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAFnlxoDBAJzp0ADBABzp0wwDQYJKoZIhvcNAQELBQADggEB
ADbPgxX3n+G6moX8I9WbDi3mYcwBPj4Yy4HjsDGew8hnHWGyr2lBJmVftNDFlrMw
1x/al+rL/3dDAm370Np4f9ZxyQcdj5wuKqM40sXfX6C0uFMUCSIrNstlTtVmkXjk
6SBrkzJTC7bOee16rb302UFywdPpcdXIsPY3zEPaKP4uYguaQKSdGxkckTasR0pf
oVu/94MzuGBym5wqbU3tUSOCkUyYVKll+CU/94AcqdLZgj8PTXHtreiFz6Fnxppe
fsSgcSknR+aW5USbpo9RPSM1ZCbBDzm4ASw+eKEUj1TLE0DNqogphkC28p8mDgqw
bBw5vXIkeB0rwgWveCP+bLs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org