Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/C29D1B86687C11EFAE05032AC4F9AE02.roa
File: C29D1B86687C11EFAE05032AC4F9AE02.roa (raw, json)
Hash identifier: VKqAqheXQjlyZfNEi9dU/iTqdCqSJNbYy1/prCVtMNM=
Subject key identifier: 7C:72:1C:C8:1C:27:C7:6E:47:7F:0D:A2:36:3D:5F:E3:62:FC:ED:7F
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: DC
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/C29D1B86687C11EFAE05032AC4F9AE02.roa
Signing time: Sun 01 Sep 2024 16:10:52 +0000
ROA not before: Sun 01 Sep 2024 16:10:52 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 20473
IP address blocks: 103.218.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 06:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Sep 1 16:10:52 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66d4920c-8c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:a3:67:f4:6c:2e:14:73:51:6e:85:24:1a:
af:6f:89:33:7e:0a:db:2d:de:b9:76:46:80:37:c1:
e3:cc:3b:c6:74:8f:15:a3:ff:d7:4a:f4:46:72:46:
db:65:cb:71:0c:7f:fc:0f:8b:ef:75:c2:ab:5f:a9:
2c:66:ff:6f:00:21:fe:0c:0e:6c:79:bf:ab:89:d1:
79:20:d4:be:df:e1:eb:91:23:fd:68:be:0e:27:4d:
f3:c2:e4:be:94:66:c8:71:f4:55:2d:a8:1f:60:9f:
c7:7c:bc:a8:5f:9e:9e:47:22:92:f1:0d:a5:2d:27:
e2:fd:f1:23:f5:ad:d0:44:c5:99:94:c3:96:7a:98:
cb:da:2f:09:30:b9:66:bd:60:b6:96:51:07:dc:1d:
71:50:b3:b2:86:81:82:e3:df:05:39:1d:b4:7a:6c:
67:82:bb:43:e8:e5:f4:e9:b5:45:cd:77:e5:da:35:
ab:b7:61:34:e7:55:11:76:13:14:3c:4d:41:9a:0c:
42:62:38:31:d7:c8:11:d3:72:62:ca:8e:1a:d2:cf:
86:bb:76:01:4f:7e:d9:69:38:99:55:4d:56:8b:02:
a0:a8:95:86:04:87:26:f4:ad:3f:5b:9c:72:11:63:
97:ef:2f:05:54:8c:04:d8:b0:8d:95:d8:8e:8a:a2:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:1C:C8:1C:27:C7:6E:47:7F:0D:A2:36:3D:5F:E3:62:FC:ED:7F
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/C29D1B86687C11EFAE05032AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.218.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:64:09:b2:ea:70:cc:fa:1f:b0:e3:4f:10:31:f1:73:c5:d4:
14:74:44:6d:42:c2:49:27:c8:6e:23:f4:3e:79:29:ac:3e:96:
d0:93:24:e6:8c:d0:ae:e7:3c:08:87:a1:97:7c:b3:91:1e:03:
ed:84:f4:69:09:28:fd:d1:61:68:2c:88:61:56:7a:64:91:12:
89:9a:ae:f7:99:e3:18:66:64:69:d3:af:1c:72:61:2c:cf:94:
d9:0c:ea:eb:27:be:f5:78:d3:1f:81:fc:0b:b6:a6:18:85:1f:
ee:a5:8d:f8:94:c0:da:a4:72:1c:53:71:3d:fd:29:31:c0:2c:
44:c9:8e:29:9e:bf:fd:0f:cd:f2:a1:92:7a:02:8e:a1:66:3d:
ff:97:81:51:e7:cb:e2:24:ba:b2:30:48:45:40:80:60:b2:7d:
5c:a5:da:53:d0:54:0f:37:ec:23:5c:02:4c:b8:0a:1b:2d:ed:
4c:24:17:ea:22:94:01:97:e6:fb:6d:8f:5d:aa:82:73:30:06:
91:51:53:d9:f7:46:5a:22:3e:51:c3:5f:b4:fe:e8:08:dc:1b:
ce:4e:50:f6:ed:72:53:d3:fb:11:b8:46:21:99:db:dc:99:ef:
79:ef:90:85:f0:c3:d9:b9:4d:4a:2b:72:2f:55:a7:28:24:ca:
bb:9c:4c:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjQwOTAxMTYxMDUyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ0OTIwYy04YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3S6jZ/RsLhRzUW6FJBqvb4kzfgrbLd65dkaAN8HjzDvGdI8Vo//XSvRGckbb
ZctxDH/8D4vvdcKrX6ksZv9vACH+DA5seb+ridF5INS+3+HrkSP9aL4OJ03zwuS+
lGbIcfRVLagfYJ/HfLyoX56eRyKS8Q2lLSfi/fEj9a3QRMWZlMOWepjL2i8JMLlm
vWC2llEH3B1xULOyhoGC498FOR20emxngrtD6OX06bVFzXfl2jWrt2E051URdhMU
PE1BmgxCYjgx18gR03Jiyo4a0s+Gu3YBT37ZaTiZVU1WiwKgqJWGBIcm9K0/W5xy
EWOX7y8FVIwE2LCNldiOiqLPvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHxyHMgc
J8duR38NojY9X+Ni/O1/MB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvQzI5RDFCODY2
ODdDMTFFRkFFMDUwMzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn2qwwDQYJKoZIhvcNAQELBQADggEBACtkCbLqcMz6H7Dj
TxAx8XPF1BR0RG1CwkknyG4j9D55Kaw+ltCTJOaM0K7nPAiHoZd8s5EeA+2E9GkJ
KP3RYWgsiGFWemSREomarveZ4xhmZGnTrxxyYSzPlNkM6usnvvV40x+B/Au2phiF
H+6ljfiUwNqkchxTcT39KTHALETJjimev/0PzfKhknoCjqFmPf+XgVHny+IkurIw
SEVAgGCyfVyl2lPQVA837CNcAky4Chst7UwkF+oilAGX5vttj12qgnMwBpFRU9n3
RloiPlHDX7T+6AjcG85OUPbtclPT+xG4RiGZ29yZ73nvkIXww9m5TUorci9Vpygk
yrucTJE=
-----END CERTIFICATE-----
Generated at Wed Sep 4 07:35:29 2024 by rpki-client on console-fra.rpki-client.org