Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/FC1CC476360311EE9EFD4F7AC4F9AE02.roa
File: FC1CC476360311EE9EFD4F7AC4F9AE02.roa (raw, json)
Hash identifier: 7mcfinS0up3EP2UmCLmrUVDWNCS0ZuiQwYRFkdaK+44=
Subject key identifier: F6:05:1B:9E:93:00:E6:7F:12:6C:64:AE:74:C3:62:5C:D3:AD:30:44
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 50
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/FC1CC476360311EE9EFD4F7AC4F9AE02.roa
Signing time: Tue 08 Aug 2023 15:55:24 +0000
ROA not before: Tue 08 Aug 2023 15:55:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139351
IP address blocks: 103.121.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Aug 8 15:55:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64d2656c-1b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:11:ca:d0:04:c6:fc:14:4b:9e:e0:e6:70:
b5:e8:48:ba:18:47:69:a8:27:28:90:f9:50:da:9b:
52:53:e7:00:36:48:ff:cb:14:70:9e:a3:9a:46:a3:
a7:c5:a6:9a:d1:8d:d8:09:ff:f3:b7:63:8c:1f:b9:
67:de:0a:e3:a3:28:91:12:72:bc:bb:1b:08:b1:fc:
00:7e:0b:64:52:14:dc:3d:e7:5f:c5:ff:dc:c0:20:
0f:de:b7:a1:6f:f7:6b:e0:8d:e0:21:43:7c:e3:ff:
00:f5:7e:c8:af:bc:29:63:4e:3f:c3:e5:57:7a:9b:
95:55:71:16:67:80:f4:ac:44:6a:8a:45:c3:83:4e:
1d:74:1d:30:ff:6f:f6:8f:0d:f5:97:2d:53:16:c5:
70:04:66:b3:9b:44:7f:b1:23:5e:f8:d2:ad:4c:c4:
f2:67:63:fc:1f:8a:b2:9f:29:2b:ef:4f:65:cb:ea:
de:2c:cb:77:8b:3c:16:23:4a:53:8d:eb:a9:70:70:
81:c8:91:c3:4c:74:bc:1a:b4:6c:55:11:bc:6f:2d:
45:a7:0c:93:fb:1e:6b:ca:c6:ab:f2:e0:15:7a:4c:
80:b8:86:c3:38:44:89:ec:b8:ba:ba:db:32:78:e5:
f4:7b:81:cc:5d:85:ef:46:b7:99:89:5e:2f:bd:b8:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:1B:9E:93:00:E6:7F:12:6C:64:AE:74:C3:62:5C:D3:AD:30:44
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/FC1CC476360311EE9EFD4F7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.6.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d2:08:05:78:84:0a:e6:e7:57:a0:78:74:a5:71:7c:3f:29:
fd:e3:74:b8:e4:19:ef:5f:f7:f4:e6:cb:84:b9:76:86:fc:2c:
b4:a8:fa:a8:93:57:5a:07:95:e3:b3:d6:4e:52:d8:82:c5:6f:
86:f6:68:95:3b:6f:a6:be:be:8e:4d:ad:ce:59:6c:12:c9:31:
ff:9a:1f:4d:09:57:e4:dd:6e:27:e0:ad:c3:e6:96:50:ec:9e:
05:0e:b5:ff:25:a5:4d:65:6c:94:bb:ce:22:b1:97:bf:a4:66:
32:5f:5a:e9:b9:f0:61:20:60:cf:58:25:90:d3:62:dc:35:2c:
e3:a5:c5:ff:d4:0f:f1:fb:8d:eb:25:00:2c:d0:c0:97:d6:47:
5a:e6:b6:04:3a:41:a4:3a:ef:bd:a5:00:d3:80:d2:93:70:fb:
19:9b:04:d8:89:cf:16:e7:78:49:ec:d5:45:a1:18:9d:3c:45:
80:3b:2b:a4:1d:b6:f4:16:71:e6:5a:b6:63:e8:e3:17:63:0b:
32:af:fc:79:d0:e3:3b:5d:c5:91:a3:7d:f4:77:95:e8:b6:96:
28:b3:d9:75:f2:a7:02:e5:d2:93:49:4d:73:d8:ff:12:98:11:
3f:c9:86:bc:93:53:89:74:b6:cf:40:4c:68:74:55:1e:e9:7a:
c2:f8:67:14
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RkFGRjExMC8GA1UEBRMoNTFENTMxQUVGN0EwODdDMThFMzAxRTBFNkEyQzYzNzFC
MjY0QzNFODAeFw0yMzA4MDgxNTU1MjRaFw0yNDA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZDI2NTZjLTFiNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDafRHK0ATG/BRLnuDmcLXoSLoYR2moJyiQ+VDam1JT5wA2SP/LFHCeo5pGo6fF
pprRjdgJ//O3Y4wfuWfeCuOjKJEScry7Gwix/AB+C2RSFNw951/F/9zAIA/et6Fv
92vgjeAhQ3zj/wD1fsivvCljTj/D5Vd6m5VVcRZngPSsRGqKRcODTh10HTD/b/aP
DfWXLVMWxXAEZrObRH+xI1740q1MxPJnY/wfirKfKSvvT2XL6t4sy3eLPBYjSlON
66lwcIHIkcNMdLwatGxVEbxvLUWnDJP7HmvKxqvy4BV6TIC4hsM4RInsuLq62zJ4
5fR7gcxdhe9Gt5mJXi+9uKOvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9gUbnpMA
5n8SbGSudMNiXNOtMEQwHwYDVR0jBBgwFoAUUdUxrvegh8GOMB4OaixjcbJkw+gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQUZGL0QwNjExRjA0Q0M0
NDExRUQ5QTcxRTEwQ0M0RjlBRTAyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ct
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVWRVeHJ2ZWdoOEdPTUI0T2FpeGpjYkprdy1nLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9GQzFDQzQ3NjM2
MDMxMUVFOUVGRDRGN0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGd5BjANBgkqhkiG9w0BAQsFAAOCAQEAEtIIBXiECubnV6B4
dKVxfD8p/eN0uOQZ71/39ObLhLl2hvwstKj6qJNXWgeV47PWTlLYgsVvhvZolTtv
pr6+jk2tzllsEskx/5ofTQlX5N1uJ+Ctw+aWUOyeBQ61/yWlTWVslLvOIrGXv6Rm
Ml9a6bnwYSBgz1glkNNi3DUs46XF/9QP8fuN6yUALNDAl9ZHWua2BDpBpDrvvaUA
04DSk3D7GZsE2InPFud4SezVRaEYnTxFgDsrpB229BZx5lq2Y+jjF2MLMq/8edDj
O13FkaN99HeV6LaWKLPZdfKnAuXSk0lNc9j/EpgRP8mGvJNTiXS2z0BMaHRVHul6
wvhnFA==
Generated at Thu Aug 24 18:22:53 2023 by rpki-client on console-fra.rpki-client.org