Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/E31546700C9411EF81528154C4F9AE02.roa
File: E31546700C9411EF81528154C4F9AE02.roa (raw, json)
Hash identifier: DkS8wK0A2p46juQLmSPTcecYlJwSiplPiqp/0t5WQnc=
Subject key identifier: 46:74:4E:E3:AD:E9:01:46:8E:A9:C4:A9:B4:12:81:3A:7B:21:66:D7
Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial: 0E
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/E31546700C9411EF81528154C4F9AE02.roa
Signing time: Tue 07 May 2024 17:11:48 +0000
ROA not before: Tue 07 May 2024 17:11:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152698
IP address blocks: 103.14.22.0/24 maxlen: 24
2001:df3:ad40::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 11 May 2024 01:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Validity
Not Before: May 7 17:11:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=663a60d3-d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:08:a9:6c:6d:3c:e3:9b:dd:0e:dc:3d:6e:
61:a9:d0:34:d4:70:64:d6:ad:9d:ad:26:b0:96:4f:
6e:06:fd:55:4a:5f:65:77:f0:7d:5b:ce:db:90:de:
c4:0b:cc:c7:30:99:e3:7c:e8:89:2f:e0:97:26:fd:
b5:a3:d1:2a:25:39:a3:28:2d:82:27:51:b4:3f:ba:
c5:95:37:46:1a:c4:31:9d:1f:73:56:6d:cd:2e:a8:
9a:8c:74:43:1e:66:5b:62:8b:9f:9c:28:61:99:2a:
56:35:83:4d:b0:82:11:bc:bb:2f:7f:85:6f:fe:d2:
c8:bd:33:0a:47:3d:f2:49:90:9b:41:c2:be:0a:2a:
f5:8e:8e:32:9f:77:25:08:fc:2d:fa:0d:13:4d:f1:
7d:13:8f:a3:d4:19:55:d0:2e:9d:f7:b8:bf:a4:d4:
1b:8e:ee:03:0a:9a:85:27:01:4b:2a:d2:8e:6e:eb:
0e:c8:52:5f:4e:12:ad:af:6e:ac:4b:64:dd:02:3f:
73:55:64:c8:72:14:3e:93:00:99:10:f1:fb:d4:f3:
b3:10:ec:5c:63:d8:c2:5a:ca:0b:a3:ae:7b:8c:a5:
3f:b4:96:c5:16:b9:9a:11:4b:72:0d:83:6d:d9:86:
c9:86:58:14:2d:2f:7e:e8:39:23:ef:86:99:02:85:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:4E:E3:AD:E9:01:46:8E:A9:C4:A9:B4:12:81:3A:7B:21:66:D7
X509v3 Authority Key Identifier:
keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/E31546700C9411EF81528154C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.22.0/24
IPv6:
2001:df3:ad40::/48
Signature Algorithm: sha256WithRSAEncryption
a1:8c:3c:5e:8d:74:f1:72:ce:e6:f7:12:da:5e:81:fb:2c:64:
fc:49:bb:5d:e8:af:25:14:60:3c:65:77:cb:5b:c4:15:5d:1d:
b4:f1:9d:6e:5d:39:1a:25:e6:12:55:93:16:da:89:13:9b:6f:
18:6e:63:d4:6b:27:f3:e4:45:01:2b:03:96:69:b8:03:a2:ac:
06:e1:57:ad:25:2d:c9:8d:98:83:64:64:8f:04:81:8d:d5:f3:
23:e2:78:50:3a:ed:f7:07:04:b7:dd:bd:d6:58:40:e2:3e:a0:
d2:4e:29:d6:9d:38:ae:80:2e:17:83:e9:f1:e9:33:b4:c8:4e:
c3:1c:4c:b1:a7:4d:95:86:e1:7f:f6:3d:41:b6:49:7f:26:2c:
d7:ac:7a:1e:a2:52:05:a2:86:08:25:b2:b0:5b:cb:f2:cb:9f:
cc:1b:73:2a:c7:7d:cd:07:79:2c:3c:d7:ed:9a:a2:f6:0f:2e:
c7:07:2d:9a:fd:43:fe:42:31:10:df:d2:45:d3:30:f8:8a:ca:
5c:fa:f7:18:68:a5:a6:4b:d6:f1:2b:fa:25:63:a7:3f:5d:b1:
a3:a3:59:bc:88:5e:4b:65:90:bd:93:f5:78:8b:a6:7d:cd:f3:
2b:7a:41:ad:a5:96:44:9b:9e:83:51:8d:6e:1d:7a:9b:d0:16:
aa:98:de:b9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OTM1MzExMC8GA1UEBRMoQUNEMDQ3RDBEODhFMjY1N0UxMkNGOTEzMDFDMTYwRjFE
M0NEMkYzMzAeFw0yNDA1MDcxNzExNDhaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2M2E2MGQzLWQ3MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvLgipbG0845vdDtw9bmGp0DTUcGTWrZ2tJrCWT24G/VVKX2V38H1bztuQ3sQL
zMcwmeN86Ikv4Jcm/bWj0SolOaMoLYInUbQ/usWVN0YaxDGdH3NWbc0uqJqMdEMe
Zltii5+cKGGZKlY1g02wghG8uy9/hW/+0si9MwpHPfJJkJtBwr4KKvWOjjKfdyUI
/C36DRNN8X0Tj6PUGVXQLp33uL+k1BuO7gMKmoUnAUsq0o5u6w7IUl9OEq2vbqxL
ZN0CP3NVZMhyFD6TAJkQ8fvU87MQ7Fxj2MJaygujrnuMpT+0lsUWuZoRS3INg23Z
hsmGWBQtL37oOSPvhpkChRHTAgMBAAGjggKmMIICojAdBgNVHQ4EFgQURnRO463p
AUaOqcSptBKBOnshZtcwHwYDVR0jBBgwFoAUrNBH0NiOJlfhLPkTAcFg8dPNLzMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MzUzLzA4NzVFNjQ4MDVD
NjExRUY4OTYyMEEyNkM0RjlBRTAyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvck5CSDBOaU9KbGZoTFBrVEFjRmc4ZFBOTHpNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9FMzE1NDY3MDBD
OTQxMUVGODE1MjgxNTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAGcOFjAPBAIAAjAJAwcAIAEN861AMA0GCSqGSIb3DQEBCwUA
A4IBAQChjDxejXTxcs7m9xLaXoH7LGT8Sbtd6K8lFGA8ZXfLW8QVXR208Z1uXTka
JeYSVZMW2okTm28YbmPUayfz5EUBKwOWabgDoqwG4VetJS3JjZiDZGSPBIGN1fMj
4nhQOu33BwS33b3WWEDiPqDSTinWnTiugC4Xg+nx6TO0yE7DHEyxp02VhuF/9j1B
tkl/JizXrHoeolIFooYIJbKwW8vyy5/MG3Mqx33NB3ksPNftmqL2Dy7HBy2a/UP+
QjEQ39JF0zD4ispc+vcYaKWmS9bxK/olY6c/XbGjo1m8iF5LZZC9k/V4i6Z9zfMr
ekGtpZZEm56DUY1uHXqb0BaqmN65
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org