Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/2607B6B4F0E611ED81467C6DC4F9AE02.roa
File: 2607B6B4F0E611ED81467C6DC4F9AE02.roa (raw, json)
Hash identifier: zi9zuQdsowPKBM9i2Vqpg49fTAAUJoSOmDMC/YEGVTc=
Subject key identifier: 78:13:65:6F:07:E9:D2:9E:27:F4:FE:B2:EB:66:CD:98:15:5E:9C:8C
Certificate issuer: /CN=A91F4610/serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265
Certificate serial: E8
Authority key identifier: 62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/2607B6B4F0E611ED81467C6DC4F9AE02.roa
Signing time: Mon 03 Jun 2024 06:55:09 +0000
ROA not before: Mon 03 Jun 2024 06:55:09 +0000
ROA not after: Tue 01 Oct 2024 00:00:00 +0000
asID: 151081
IP address blocks: 103.230.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 09:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4610/serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265
Validity
Not Before: Jun 3 06:55:09 2024 GMT
Not After : Oct 1 00:00:00 2024 GMT
Subject: CN=665d68cd-df15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:0a:1d:d7:d8:1d:b3:5d:5c:75:fb:59:9d:
b1:04:9c:71:c4:8c:94:d1:76:89:88:e3:a6:dd:14:
f2:3f:27:76:78:b6:7e:9b:6e:fc:05:15:ed:23:00:
f7:c0:46:7e:d7:14:68:d2:a1:c0:bd:02:44:40:b9:
42:52:b4:0f:3e:6d:20:80:a4:25:d1:c8:2c:ed:39:
6f:95:f1:f9:cf:69:e5:2b:aa:da:d2:91:2a:3a:48:
85:f0:94:f7:34:fb:dc:26:a6:8c:94:99:84:88:02:
d7:2c:f2:7c:45:5a:d5:6d:03:03:4d:fe:92:ad:dd:
c4:2c:78:de:43:e3:82:20:e8:a4:67:47:12:4c:fe:
90:04:44:1e:e3:f0:97:77:5d:87:1d:15:3a:96:7a:
a0:e2:85:9d:e1:24:5b:4a:58:79:90:36:82:ea:ea:
05:bb:99:f7:d0:d0:4e:34:a6:cc:25:3d:b1:d5:17:
bb:23:51:a4:94:af:02:67:1b:5d:46:8f:18:47:3b:
2f:dc:22:da:05:ed:41:7c:f2:dc:37:2e:a6:01:fa:
40:04:dd:ed:21:3f:ab:ac:ac:6c:59:83:5d:36:dc:
09:98:4e:db:30:90:56:b2:48:7c:22:29:d1:b3:8b:
24:fa:df:38:d2:ce:72:9c:65:92:c0:54:5b:c4:8f:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:65:6F:07:E9:D2:9E:27:F4:FE:B2:EB:66:CD:98:15:5E:9C:8C
X509v3 Authority Key Identifier:
keyid:62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/2607B6B4F0E611ED81467C6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e6:17:c3:89:94:28:ef:db:b4:1c:e3:10:00:3c:23:96:14:
cd:d0:1a:4e:84:07:bc:64:94:e0:c8:b0:68:d7:b6:d3:4b:4d:
0a:34:f2:b7:f4:72:15:bd:42:51:64:3c:80:35:3c:cf:ea:e9:
2c:6b:44:70:54:31:f9:96:a3:b1:e3:f9:d4:e9:63:28:b8:73:
07:00:4e:5b:45:76:2f:19:05:1d:78:02:43:ed:a4:69:d7:89:
53:e5:1e:12:51:1b:67:12:86:04:2f:df:54:ed:5b:86:a5:91:
64:ec:df:88:60:37:f5:d5:0a:08:92:f2:55:1d:b0:3e:51:43:
b0:09:b2:ee:cf:88:19:25:cc:95:5b:ec:dd:ea:85:f3:dd:13:
e3:0c:e2:32:ce:51:2d:2c:80:74:19:31:14:8b:b1:0a:69:0b:
ec:0e:26:e3:07:2f:65:f9:10:e0:98:1b:b5:a7:cf:58:ec:75:
4f:f2:a5:97:d8:82:77:9c:de:02:a5:2b:ac:00:ad:15:78:31:
ad:a7:dd:10:ca:ed:df:28:bf:46:e8:ca:81:ef:5d:2f:5f:ca:
fd:6e:21:8a:00:ff:ae:ae:f7:4b:56:db:34:ec:48:58:1a:b5:
3d:5f:9f:e8:20:6a:3c:34:78:f2:bb:52:cd:ac:72:fe:c0:ee:
c1:a9:6f:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ2MTAxMTAvBgNVBAUTKDYyNUFBQUY3MzE5OUE3M0FCOUFCODI3RkQ1QzEwRDI0
OTJFNEUyNjUwHhcNMjQwNjAzMDY1NTA5WhcNMjQxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVkNjhjZC1kZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkEKHdfYHbNdXHX7WZ2xBJxxxIyU0XaJiOOm3RTyPyd2eLZ+m278BRXtIwD3
wEZ+1xRo0qHAvQJEQLlCUrQPPm0ggKQl0cgs7TlvlfH5z2nlK6ra0pEqOkiF8JT3
NPvcJqaMlJmEiALXLPJ8RVrVbQMDTf6Srd3ELHjeQ+OCIOikZ0cSTP6QBEQe4/CX
d12HHRU6lnqg4oWd4SRbSlh5kDaC6uoFu5n30NBONKbMJT2x1Re7I1GklK8CZxtd
Ro8YRzsv3CLaBe1BfPLcNy6mAfpABN3tIT+rrKxsWYNdNtwJmE7bMJBWskh8IinR
s4sk+t840s5ynGWSwFRbxI96aQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHgTZW8H
6dKeJ/T+sutmzZgVXpyMMB8GA1UdIwQYMBaAFGJaqvcxmac6uauCf9XBDSSS5OJl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDYxMC85MEU3NjI0OENF
QTYxMUVEQTVGMDkxNDJDNEY5QUUwMi9ZbHFxOXpHWnB6cTVxNEpfMWNFTkpKTGs0
bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lscXE5ekdacHpxNXE0Sl8xY0VOSkpMazRtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQ2MTAvOTBFNzYyNDhDRUE2MTFFREE1RjA5MTQyQzRGOUFFMDIvMjYwN0I2QjRG
MEU2MTFFRDgxNDY3QzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5lIwDQYJKoZIhvcNAQELBQADggEBALPmF8OJlCjv27Qc
4xAAPCOWFM3QGk6EB7xklODIsGjXttNLTQo08rf0chW9QlFkPIA1PM/q6SxrRHBU
MfmWo7Hj+dTpYyi4cwcATltFdi8ZBR14AkPtpGnXiVPlHhJRG2cShgQv31TtW4al
kWTs34hgN/XVCgiS8lUdsD5RQ7AJsu7PiBklzJVb7N3qhfPdE+MM4jLOUS0sgHQZ
MRSLsQppC+wOJuMHL2X5EOCYG7Wnz1jsdU/ypZfYgnec3gKlK6wArRV4Ma2n3RDK
7d8ov0boyoHvXS9fyv1uIYoA/66u90tW2zTsSFgatT1fn+ggajw0ePK7Us2scv7A
7sGpb80=
-----END CERTIFICATE-----
Generated at Mon Jun 17 13:45:59 2024 by rpki-client on console-ams.rpki-client.org