Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/74515D42670611EF823DC848C4F9AE02.roa
File: 74515D42670611EF823DC848C4F9AE02.roa (raw, json)
Hash identifier: 5BBekD4wxktoQSHWALnLVX/oV+GstvY2FrskjBKRAfY=
Subject key identifier: F5:14:C2:4B:3F:B3:16:29:2A:2D:5F:56:E3:FF:40:BD:44:DA:D0:38
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 03C8
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/74515D42670611EF823DC848C4F9AE02.roa
Signing time: Fri 30 Aug 2024 19:31:29 +0000
ROA not before: Fri 30 Aug 2024 19:31:29 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 149311
IP address blocks: 103.178.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 12:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 968 (0x3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Aug 30 19:31:29 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66d21e11-69e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c9:29:ea:84:c5:81:04:6f:2a:5e:11:1d:e8:
5c:94:8e:05:0b:99:7c:00:a5:e7:86:22:8c:f0:11:
6d:0d:f8:6c:9b:60:6f:03:70:03:4c:ea:a5:ab:2d:
4f:f2:bd:9e:86:e2:37:09:a8:32:21:42:92:bc:fd:
47:13:8a:c0:ce:66:42:e0:3b:d3:e5:42:17:cb:70:
e2:6d:ba:ec:9e:3a:b2:1e:01:c2:d3:8c:2a:69:51:
ef:7e:17:02:fc:db:82:b4:4b:fd:d5:56:10:21:e9:
cc:86:1d:a4:1a:f4:0e:17:9b:da:5e:20:60:05:f3:
9c:da:0b:70:28:15:3f:0a:07:06:bb:8f:a4:85:21:
31:8a:54:6a:cf:f1:8b:31:ca:79:44:37:70:ac:f5:
49:d2:a1:6f:c7:42:3d:6b:b3:5c:08:d7:ef:ed:41:
c6:b1:ef:04:d2:80:1c:36:f1:76:0a:33:77:69:0b:
73:0a:b9:9a:96:07:6b:d0:3b:44:c4:47:75:9b:45:
a0:c5:24:00:6a:5c:94:2b:89:30:6e:44:4d:f5:28:
94:22:81:43:7b:f8:b4:41:38:8b:b9:88:26:ec:18:
5b:77:ad:99:e8:e4:e1:41:5e:e9:0d:5c:d0:88:78:
aa:b9:5e:fb:c6:1b:87:f5:0e:09:ff:4a:5f:b6:d9:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:14:C2:4B:3F:B3:16:29:2A:2D:5F:56:E3:FF:40:BD:44:DA:D0:38
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/74515D42670611EF823DC848C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.27.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d2:2f:8c:30:f0:e2:0b:48:e9:d5:d2:8a:98:fa:2b:c6:1b:
13:62:2d:26:63:16:c0:6e:63:27:74:ce:37:bc:a2:a8:e9:4e:
7b:b8:1e:f4:14:dd:92:15:e9:bf:73:17:9a:79:84:c1:dc:b5:
6c:fb:7a:b2:80:6a:a1:8e:82:5e:9e:42:99:26:33:f9:a2:85:
51:2f:89:4a:5d:96:47:eb:f4:5a:66:fb:09:ae:d6:f2:f6:c5:
21:5b:74:26:aa:36:03:ec:96:8d:e8:85:95:74:2d:93:d7:7f:
39:12:d5:a3:52:21:8e:6d:80:f9:de:3c:98:c6:d8:4c:ba:80:
bb:1f:8d:67:ba:39:31:b0:a3:a3:b8:41:e3:77:b8:c0:81:44:
b3:d4:15:e1:9a:e6:81:d1:14:9a:cc:0f:e8:d5:ac:dc:f6:f7:
00:f8:05:03:ba:b3:d0:fa:d6:c7:90:78:48:d5:f5:f3:18:cf:
18:ca:a2:fe:dc:71:76:70:8c:83:2a:21:cd:f4:66:d4:fb:5c:
e6:0d:1c:47:0c:15:bd:ee:ed:a5:d9:14:59:b2:44:ab:05:a9:
d7:da:6c:a9:48:e9:07:43:8f:45:3c:f8:c0:02:c0:ea:1f:d6:
8d:c2:28:e4:05:85:7a:23:54:9c:2a:01:f9:6d:02:69:ee:b8:
66:99:06:12
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx
QTRDREQwODIwHhcNMjQwODMwMTkzMTI5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQyMWUxMS02OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ckp6oTFgQRvKl4RHehclI4FC5l8AKXnhiKM8BFtDfhsm2BvA3ADTOqlqy1P
8r2ehuI3CagyIUKSvP1HE4rAzmZC4DvT5UIXy3DibbrsnjqyHgHC04wqaVHvfhcC
/NuCtEv91VYQIenMhh2kGvQOF5vaXiBgBfOc2gtwKBU/CgcGu4+khSExilRqz/GL
Mcp5RDdwrPVJ0qFvx0I9a7NcCNfv7UHGse8E0oAcNvF2CjN3aQtzCrmalgdr0DtE
xEd1m0WgxSQAalyUK4kwbkRN9SiUIoFDe/i0QTiLuYgm7Bhbd62Z6OThQV7pDVzQ
iHiquV77xhuH9Q4J/0pfttnNDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPUUwks/
sxYpKi1fVuP/QL1E2tA4MB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE
RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkY0MjgvMzVFQjEzNDg1REQ4MTFFQ0I5QjRENjMwQzRGOUFFMDIvNzQ1MTVENDI2
NzA2MTFFRjgyM0RDODQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnshswDQYJKoZIhvcNAQELBQADggEBACnSL4ww8OILSOnV
0oqY+ivGGxNiLSZjFsBuYyd0zje8oqjpTnu4HvQU3ZIV6b9zF5p5hMHctWz7erKA
aqGOgl6eQpkmM/mihVEviUpdlkfr9Fpm+wmu1vL2xSFbdCaqNgPslo3ohZV0LZPX
fzkS1aNSIY5tgPnePJjG2Ey6gLsfjWe6OTGwo6O4QeN3uMCBRLPUFeGa5oHRFJrM
D+jVrNz29wD4BQO6s9D61seQeEjV9fMYzxjKov7ccXZwjIMqIc30ZtT7XOYNHEcM
Fb3u7aXZFFmyRKsFqdfabKlI6QdDj0U8+MACwOof1o3CKOQFhXojVJwqAfltAmnu
uGaZBhI=
-----END CERTIFICATE-----
Generated at Sat Aug 31 13:41:08 2024 by rpki-client on console-fra.rpki-client.org