Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/56865F4AC9FF11EFBDF8FE1BC4F9AE02.roa
File: 56865F4AC9FF11EFBDF8FE1BC4F9AE02.roa (raw, json)
Hash identifier: DoN/n90hXW7qC6BtFab8Wn9lgzL5qVelHT5apFmIA6E=
Subject key identifier: 97:F0:08:2C:DD:C3:34:23:28:5F:3B:2C:A2:C0:7D:BB:C2:05:29:9D
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 0322
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/56865F4AC9FF11EFBDF8FE1BC4F9AE02.roa
Signing time: Fri 03 Jan 2025 18:19:58 +0000
ROA not before: Fri 03 Jan 2025 18:19:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135341
IP address blocks: 103.185.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802 (0x322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Validity
Not Before: Jan 3 18:19:58 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67782a4d-8f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:55:02:c3:a4:f0:83:a3:b3:14:0d:9c:c0:
10:f3:91:0c:9e:73:ef:26:45:ee:fd:75:e2:6e:39:
61:20:f6:31:28:30:42:4b:c4:d4:63:53:83:37:5c:
34:ab:16:7b:5a:05:09:b6:a7:c1:de:0b:82:9d:87:
00:84:49:22:ab:25:f7:4d:2e:78:08:96:98:a0:ab:
f0:14:95:e2:ce:32:7f:e6:d9:af:f8:46:e2:aa:ec:
84:86:6b:dd:58:58:18:96:56:21:dc:cf:83:ef:10:
ba:c1:38:27:98:eb:e6:26:bd:0e:0f:40:02:dc:a6:
e8:60:80:b1:a0:4b:9e:2f:50:ac:a2:ef:23:ac:ae:
7b:ba:23:ad:96:f7:7e:cc:59:73:58:5a:4b:05:4f:
95:96:eb:70:b2:29:ba:2a:ed:cf:4f:0e:d3:53:66:
7b:f8:b9:17:5a:02:aa:d3:72:b2:d2:1d:12:19:e8:
ab:13:df:cb:b4:70:87:fe:ab:c4:98:d9:71:a8:d7:
a9:61:36:f3:44:ca:20:04:e7:52:01:4c:89:0f:95:
db:88:93:d9:63:26:ea:7d:ae:0b:36:d0:8b:a3:f2:
70:8b:1b:d9:cc:4d:9d:18:82:26:54:ec:ff:96:18:
73:74:4f:56:c4:d2:6d:14:22:50:60:a8:cf:aa:24:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:08:2C:DD:C3:34:23:28:5F:3B:2C:A2:C0:7D:BB:C2:05:29:9D
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/56865F4AC9FF11EFBDF8FE1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:0f:95:e2:f0:a9:36:4d:6f:88:57:7a:94:ab:34:81:7f:6b:
08:c3:ab:d3:94:6b:00:55:a6:b0:12:6f:7c:0e:66:d5:8d:9a:
a3:7b:75:1e:e0:5e:ef:18:f4:63:19:1c:c1:ac:1b:13:14:9e:
f6:78:9b:bc:6e:df:11:66:60:be:29:9f:7b:74:62:e1:e1:60:
cf:1a:ed:a1:ac:ba:1b:7c:8a:02:30:cb:c6:39:bc:81:89:fd:
f8:e8:b1:0d:41:14:60:f9:5d:81:ce:ad:d7:98:31:de:12:7b:
85:c9:39:88:a8:b0:64:44:38:0d:1d:a0:29:b9:eb:0b:1a:ae:
ad:92:1b:10:d6:4a:b9:29:d9:0e:ec:5c:83:84:60:3b:3d:8c:
f8:5c:f9:c5:d3:48:ba:c7:41:bd:9f:61:28:94:95:ff:ca:2e:
d5:37:e9:56:c8:9a:6a:c5:76:c8:0c:e1:1d:4b:c0:ac:4c:ed:
df:2b:81:e7:ec:c4:c6:8d:74:6b:ad:1a:39:20:32:ea:d9:7b:
4a:c9:9e:8f:55:b1:eb:dd:d4:bd:b5:b7:b0:39:b3:18:58:b0:
3a:45:c1:4f:3a:ae:3f:e6:65:20:fc:f2:2a:07:5f:83:32:99:
cc:40:4f:e3:81:69:15:b5:0d:0e:6b:e8:f1:38:14:9f:98:05:
b1:d8:c1:5b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND
NDE0RjE2QjUwHhcNMjUwMTAzMTgxOTU4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc4MmE0ZC04ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rpVAsOk8IOjsxQNnMAQ85EMnnPvJkXu/XXibjlhIPYxKDBCS8TUY1ODN1w0
qxZ7WgUJtqfB3guCnYcAhEkiqyX3TS54CJaYoKvwFJXizjJ/5tmv+EbiquyEhmvd
WFgYllYh3M+D7xC6wTgnmOvmJr0OD0AC3KboYICxoEueL1Csou8jrK57uiOtlvd+
zFlzWFpLBU+Vlutwsim6Ku3PTw7TU2Z7+LkXWgKq03Ky0h0SGeirE9/LtHCH/qvE
mNlxqNepYTbzRMogBOdSAUyJD5XbiJPZYybqfa4LNtCLo/JwixvZzE2dGIImVOz/
lhhzdE9WxNJtFCJQYKjPqiS/KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJfwCCzd
wzQjKF87LKLAfbvCBSmdMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5
QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ0RjIvRDI5OUY4RUNCOUFCMTFFQzkxRTNEMTY1QzRGOUFFMDIvNTY4NjVGNEFD
OUZGMTFFRkJERjhGRTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnufswDQYJKoZIhvcNAQELBQADggEBAKMPleLwqTZNb4hX
epSrNIF/awjDq9OUawBVprASb3wOZtWNmqN7dR7gXu8Y9GMZHMGsGxMUnvZ4m7xu
3xFmYL4pn3t0YuHhYM8a7aGsuht8igIwy8Y5vIGJ/fjosQ1BFGD5XYHOrdeYMd4S
e4XJOYiosGREOA0doCm56wsarq2SGxDWSrkp2Q7sXIOEYDs9jPhc+cXTSLrHQb2f
YSiUlf/KLtU36VbImmrFdsgM4R1LwKxM7d8rgefsxMaNdGutGjkgMurZe0rJno9V
sevd1L21t7A5sxhYsDpFwU86rj/mZSD88ioHX4MymcxAT+OBaRW1DQ5r6PE4FJ+Y
BbHYwVs=
Generated at Fri Jan 3 22:04:21 2025 by rpki-client on console.sobornost.net