Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/392710CEEFFE11EEB55AD945C4F9AE02.roa
File: 392710CEEFFE11EEB55AD945C4F9AE02.roa (raw, json)
Hash identifier: MUb+Y/eBQRXXALPC0qkMjTfjpBEtrC5DELT5J4qL63Y=
Subject key identifier: 83:E7:23:F3:3D:EA:09:D8:BD:E6:E1:4C:95:78:F1:80:41:C0:6D:13
Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial: 3A
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/392710CEEFFE11EEB55AD945C4F9AE02.roa
Signing time: Tue 09 Jul 2024 07:28:24 +0000
ROA not before: Tue 09 Jul 2024 07:28:24 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137547
IP address blocks: 103.230.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 22:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Validity
Not Before: Jul 9 07:28:24 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=668ce698-5cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:d2:4f:8c:75:83:ec:af:9b:69:19:f2:a3:
e9:89:45:68:75:a4:6c:fc:d0:01:cd:3f:59:7a:c4:
71:2f:28:85:10:f0:88:ff:6a:92:e4:6e:fd:68:c7:
45:04:61:01:8a:74:fc:c8:7a:04:1b:e0:f8:91:46:
60:5f:84:60:5d:50:57:d6:c6:73:4a:34:f7:db:03:
25:c8:ad:1f:e9:41:0e:6f:1a:f4:a5:de:4c:63:c6:
ad:7c:08:f7:70:27:fb:72:5f:9d:d8:29:f1:bc:b5:
cf:e8:d9:04:a9:36:a6:a3:57:33:a4:f2:e8:e5:92:
e3:2e:69:52:d5:1f:7d:81:ee:53:c5:5e:ac:77:82:
07:99:53:36:29:fc:72:df:77:1a:6e:d5:75:45:d5:
6f:5e:e5:c2:c6:a1:75:a0:01:7d:48:b2:3b:00:37:
09:de:72:84:11:73:2a:1d:d4:8a:38:fc:d3:e7:66:
0f:8c:9e:e4:31:70:34:7c:fe:b9:49:42:b8:d5:75:
bb:93:96:1e:69:39:0a:dc:48:ff:85:fb:f3:e3:47:
5f:da:9a:cd:bd:ac:83:fc:63:b4:69:d8:e4:b0:f9:
45:bf:61:68:4b:bc:46:f5:99:c4:e7:7f:ce:38:92:
47:37:58:ba:1f:c7:33:f0:3c:90:06:b3:2d:0e:9f:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:23:F3:3D:EA:09:D8:BD:E6:E1:4C:95:78:F1:80:41:C0:6D:13
X509v3 Authority Key Identifier:
keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/392710CEEFFE11EEB55AD945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.92.0/23
Signature Algorithm: sha256WithRSAEncryption
11:1a:c7:7d:68:94:b0:78:44:99:1e:f9:af:f2:48:0b:2f:a8:
35:a3:7b:ac:9d:d5:8d:3e:aa:58:9e:cb:29:74:63:9c:b1:f0:
11:02:a6:93:5d:ff:3c:03:1e:1d:39:2d:18:27:c1:c2:9a:68:
4f:25:14:63:02:d7:ff:b4:7f:8c:40:16:ab:8c:32:51:b5:43:
a0:38:8c:66:b3:4c:e6:dd:e8:e8:fa:88:85:bf:df:fc:23:41:
9d:d0:d5:45:3e:c6:fd:54:6e:00:73:0d:5b:1a:bb:60:aa:4c:
1f:12:33:c1:08:e3:76:1f:3d:95:05:c9:79:ea:94:12:f2:a8:
84:8b:65:d7:98:0a:57:d7:e9:63:3b:d7:9a:06:fb:73:f6:05:
96:41:cc:5d:67:d7:e5:f5:47:cf:df:f6:1d:96:83:7a:92:ae:
9b:43:35:ce:db:4e:89:79:c8:dc:80:02:ca:44:dd:da:1f:10:
49:34:79:a7:e8:c7:88:21:61:ce:c0:5a:b0:a3:69:95:f2:0d:
18:11:9a:80:09:72:9c:e8:eb:91:5d:5d:df:8f:47:f5:25:40:
2e:db:8a:c8:b5:ce:2e:d9:fa:63:23:30:1f:0b:dd:e7:41:29:
35:04:c0:41:58:f0:ab:d1:ac:df:13:17:a9:bd:a4:88:d0:04:
9a:c8:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 01:50:16 2024 by rpki-client on console-ams.rpki-client.org