Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/0FCBD068D52811EC9A064031C4F9AE02.roa
File: 0FCBD068D52811EC9A064031C4F9AE02.roa (raw, json)
Hash identifier: A0dKBsGtRUK2ZxwD5RnEM7Z/ZpdAYvR8tgjxK4N8EKc=
Subject key identifier: F6:57:3C:49:E7:8B:12:1F:C0:17:16:FA:BA:14:81:CE:70:2D:AD:31
Certificate issuer: /CN=A91FAFB1/serialNumber=F3190194F8FAE29AF17EC19FC88CA6742CD5CDEA
Certificate serial: CE
Authority key identifier: F3:19:01:94:F8:FA:E2:9A:F1:7E:C1:9F:C8:8C:A6:74:2C:D5:CD:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xkBlPj64prxfsGfyIymdCzVzeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/0FCBD068D52811EC9A064031C4F9AE02.roa
Signing time: Fri 26 Aug 2022 05:03:33 +0000
ROA not before: Fri 26 Aug 2022 05:03:33 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 135330
IP address blocks: 103.119.44.0/22 maxlen: 22
103.119.44.0/24 maxlen: 24
103.119.45.0/24 maxlen: 24
103.119.46.0/24 maxlen: 24
103.119.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAFB1/serialNumber=F3190194F8FAE29AF17EC19FC88CA6742CD5CDEA
Validity
Not Before: Aug 26 05:03:33 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63085424-0179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:0c:48:ce:0e:eb:cd:fc:0f:15:2a:aa:7f:
2d:c8:a4:7b:b0:64:e5:9a:af:9b:c3:05:ac:07:0f:
33:ac:1c:92:8d:89:61:44:64:e5:c9:92:b9:9a:7d:
0a:80:56:f9:01:27:ff:82:63:e8:8f:d2:2c:c1:16:
81:3d:bd:d9:d2:a1:e8:b0:b9:14:29:7a:9b:d9:e1:
32:e9:2c:c5:7b:4e:b7:cd:8a:32:af:84:d5:19:a3:
52:f5:19:d4:d8:6a:fc:14:37:26:f8:f5:f4:ca:30:
3c:72:66:37:c3:42:a2:de:fa:41:44:db:ce:6d:a1:
3f:1b:d6:65:f6:02:b9:a7:43:25:f3:e8:82:55:9a:
ec:a0:5f:fd:b7:48:82:08:aa:b7:bd:17:b6:d6:6e:
78:f0:30:6a:4d:da:d0:c3:39:63:63:ed:c3:f6:e1:
b2:97:84:a4:43:cd:0c:e5:1f:70:78:fa:a3:2e:ff:
45:cf:48:55:52:4b:92:7f:67:a2:35:35:c3:fc:a4:
1d:c3:c0:b2:14:5f:24:2a:ec:a0:63:ae:4d:fd:92:
44:01:4c:dc:ce:3e:86:76:68:ca:7f:c4:80:a2:93:
57:d0:b2:95:51:63:af:da:df:42:54:a3:95:4a:73:
2f:df:2c:20:11:72:4a:9f:30:74:59:36:59:64:a7:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:3C:49:E7:8B:12:1F:C0:17:16:FA:BA:14:81:CE:70:2D:AD:31
X509v3 Authority Key Identifier:
keyid:F3:19:01:94:F8:FA:E2:9A:F1:7E:C1:9F:C8:8C:A6:74:2C:D5:CD:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/8xkBlPj64prxfsGfyIymdCzVzeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xkBlPj64prxfsGfyIymdCzVzeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/0FCBD068D52811EC9A064031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:00:a0:fd:af:d6:ba:d2:f9:76:58:e7:10:c0:09:f5:37:e9:
54:fe:94:41:6e:f5:e4:dc:fa:74:e4:52:f8:63:22:13:54:02:
d3:20:f8:17:68:d7:59:a3:6a:89:23:21:b8:d3:ac:1d:36:30:
2d:83:02:ad:ca:a7:fe:3e:b2:6c:54:7e:10:01:56:e8:05:63:
3a:03:da:c2:7c:05:04:8b:ef:3f:53:d1:7f:6d:d2:cc:d6:5e:
02:b2:40:77:77:cf:a5:25:ab:33:86:9a:02:24:75:5a:78:4a:
d6:8b:b2:92:18:37:c1:14:2d:83:a5:43:d3:70:0a:9f:ef:31:
ee:ac:cd:68:6e:b9:f8:9c:dd:8e:8a:ae:99:d5:31:17:5f:9b:
69:07:4c:b3:8a:6e:c1:81:1e:35:c8:6c:79:de:16:bc:69:3d:
8e:eb:73:da:2e:27:ea:86:2d:cc:b3:f4:53:03:13:14:ee:59:
79:f5:db:d4:9b:07:2c:58:70:83:0f:e8:f2:b3:a1:9c:59:af:
0b:72:b4:5a:ef:4a:8a:11:e6:8e:a6:e3:74:de:f0:7f:2f:7e:
a4:c9:89:c0:c3:7a:5d:bb:26:d9:d5:d4:a5:cd:98:9b:5a:6a:
22:bc:cd:50:c1:f7:92:ba:63:93:93:d6:52:54:c4:cc:e3:00:
ae:67:40:d2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFGQjExMTAvBgNVBAUTKEYzMTkwMTk0RjhGQUUyOUFGMTdFQzE5RkM4OENBNjc0
MkNENUNERUEwHhcNMjIwODI2MDUwMzMzWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzA4NTQyNC0wMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJQMSM4O6838DxUqqn8tyKR7sGTlmq+bwwWsBw8zrBySjYlhRGTlyZK5mn0K
gFb5ASf/gmPoj9IswRaBPb3Z0qHosLkUKXqb2eEy6SzFe063zYoyr4TVGaNS9RnU
2Gr8FDcm+PX0yjA8cmY3w0Ki3vpBRNvObaE/G9Zl9gK5p0Ml8+iCVZrsoF/9t0iC
CKq3vRe21m548DBqTdrQwzljY+3D9uGyl4SkQ80M5R9wePqjLv9Fz0hVUkuSf2ei
NTXD/KQdw8CyFF8kKuygY65N/ZJEAUzczj6GdmjKf8SAopNX0LKVUWOv2t9CVKOV
SnMv3ywgEXJKnzB0WTZZZKcYYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPZXPEnn
ixIfwBcW+roUgc5wLa0xMB8GA1UdIwQYMBaAFPMZAZT4+uKa8X7Bn8iMpnQs1c3q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUZCMS9BQjMwNzA0OEQ1
MjAxMUVDQjA3QjYwMzVDNEY5QUUwMi84eGtCbFBqNjRwcnhmc0dmeUl5bWRDelZ6
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh4a0JsUGo2NHByeGZzR2Z5SXltZEN6Vnplby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkFGQjEvQUIzMDcwNDhENTIwMTFFQ0IwN0I2MDM1QzRGOUFFMDIvMEZDQkQwNjhE
NTI4MTFFQzlBMDY0MDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJndywwDQYJKoZIhvcNAQELBQADggEBAA0AoP2v1rrS+XZY
5xDACfU36VT+lEFu9eTc+nTkUvhjIhNUAtMg+Bdo11mjaokjIbjTrB02MC2DAq3K
p/4+smxUfhABVugFYzoD2sJ8BQSL7z9T0X9t0szWXgKyQHd3z6UlqzOGmgIkdVp4
StaLspIYN8EULYOlQ9NwCp/vMe6szWhuufic3Y6KrpnVMRdfm2kHTLOKbsGBHjXI
bHneFrxpPY7rc9ouJ+qGLcyz9FMDExTuWXn129SbByxYcIMP6PKzoZxZrwtytFrv
SooR5o6m43Te8H8vfqTJicDDel27JtnV1KXNmJtaaiK8zVDB95K6Y5OT1lJUxMzj
AK5nQNI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 14:09:31 2023 by rpki-client on console-ams.rpki-client.org