Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/5971719C823B11EF93F73A42C4F9AE02.roa
File: 5971719C823B11EF93F73A42C4F9AE02.roa (raw, json)
Hash identifier: gUAXiXUHZWKN9dJp8aX8LxctdcBscYZjsdSmqnGAA4Q=
Subject key identifier: FF:C2:12:49:F4:C4:C4:FE:2C:46:BC:1A:68:32:9B:49:51:DA:24:5D
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 15FE
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/5971719C823B11EF93F73A42C4F9AE02.roa
Signing time: Fri 04 Oct 2024 10:28:09 +0000
ROA not before: Fri 04 Oct 2024 10:28:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9989
IP address blocks: 27.111.208.0/20 maxlen: 20
27.111.220.0/24 maxlen: 24
27.111.224.0/22 maxlen: 22
118.103.183.0/24 maxlen: 24
202.79.200.0/21 maxlen: 21
202.79.208.0/20 maxlen: 20
202.79.209.0/24 maxlen: 24
2403:b100::/32 maxlen: 32
2403:b100::/33 maxlen: 33
2403:b100:7f00::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 04 Oct 2024 10:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5630 (0x15fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: Oct 4 10:28:09 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66ffc338-fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:e3:31:72:3a:9f:09:a9:34:5f:ed:ac:09:
69:48:15:06:18:4e:b3:14:1f:f1:34:31:5f:13:c5:
ac:27:22:e4:c9:17:89:0d:40:12:d0:ca:60:cf:79:
2d:85:05:3a:72:27:65:20:c5:d3:0c:b8:0d:b7:10:
27:1f:85:9b:f0:2c:51:c8:11:73:aa:80:dc:21:d8:
02:c9:57:e4:da:37:4e:b5:92:35:e0:7c:9d:97:32:
1b:e8:86:6f:6a:99:3c:31:aa:53:62:85:3b:98:89:
0c:3f:a5:32:15:89:51:55:3b:56:44:40:62:41:cc:
c8:61:ab:0a:86:96:32:40:c9:e3:fc:49:e2:86:84:
b6:89:50:2b:db:6e:31:9a:84:72:cb:ab:b3:a5:08:
b1:02:20:9b:fa:9b:ee:23:d6:f8:9b:82:e2:3b:38:
a8:3f:de:e0:00:3f:88:d4:6f:e9:a3:c5:47:bf:8e:
db:70:24:c8:16:96:a4:61:1d:84:05:9f:b6:a6:17:
d8:cf:05:84:60:40:2f:e5:55:94:26:55:c1:8d:fd:
cb:ba:be:1c:40:cc:ef:83:55:da:c2:ab:aa:d4:f7:
64:38:44:ac:50:42:ff:f0:53:df:8e:e1:14:24:17:
30:15:f9:81:83:5b:b6:02:01:04:18:76:d6:42:95:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:12:49:F4:C4:C4:FE:2C:46:BC:1A:68:32:9B:49:51:DA:24:5D
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/5971719C823B11EF93F73A42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.208.0-27.111.227.255
118.103.183.0/24
202.79.200.0-202.79.223.255
IPv6:
2403:b100::/32
Signature Algorithm: sha256WithRSAEncryption
37:a4:e6:60:a5:a5:89:53:09:e9:18:95:a1:fa:39:71:ad:31:
9e:04:8d:0f:92:79:cf:84:c3:fe:d4:b3:5b:4d:9b:cc:d3:9e:
81:d3:a7:5c:f1:28:e0:06:cf:33:9b:ff:71:a5:76:0d:2c:77:
e4:fb:53:80:13:53:e5:1b:77:7d:7c:8f:02:13:cc:d6:3a:bf:
0a:67:79:a3:e2:72:22:20:9e:31:80:cc:94:ea:5c:6c:6e:ce:
c8:47:94:67:52:99:11:ea:42:76:78:78:e1:38:3c:cf:17:01:
89:82:7c:0a:19:6e:a1:6f:28:49:5a:cb:f5:99:93:92:c5:89:
9d:d6:42:8c:d2:62:f2:d8:60:04:fe:fe:f8:49:ae:84:57:68:
6e:f2:d3:db:44:64:95:16:bd:71:b8:41:cd:f3:68:36:42:18:
cb:d4:df:89:d8:b2:1d:f9:81:ff:59:79:a5:aa:b5:81:a2:79:
4f:9d:71:c9:7c:f6:f1:bb:bd:49:02:31:65:5f:d4:c3:cd:bb:
e7:df:62:38:14:39:3e:f3:c8:21:be:cf:90:2a:79:9d:9f:9a:
74:4c:e9:85:20:46:5a:4e:de:24:c4:da:ed:f0:5c:63:7e:3c:
6d:59:2e:e8:5c:10:7a:d0:09:c9:c0:27:0c:b9:b8:9e:18:b0:
64:81:2d:ca
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgICFf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1
NzA3M0UxN0YwHhcNMjQxMDA0MTAyODA5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZmYzMzOC1mYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoU/jMXI6nwmpNF/trAlpSBUGGE6zFB/xNDFfE8WsJyLkyReJDUAS0Mpgz3kt
hQU6cidlIMXTDLgNtxAnH4Wb8CxRyBFzqoDcIdgCyVfk2jdOtZI14HydlzIb6IZv
apk8MapTYoU7mIkMP6UyFYlRVTtWREBiQczIYasKhpYyQMnj/EnihoS2iVAr224x
moRyy6uzpQixAiCb+pvuI9b4m4LiOzioP97gAD+I1G/po8VHv47bcCTIFpakYR2E
BZ+2phfYzwWEYEAv5VWUJlXBjf3Lur4cQMzvg1Xawquq1PdkOESsUEL/8FPfjuEU
JBcwFfmBg1u2AgEEGHbWQpV+DQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFP/CEkn0
xMT+LEa8Gmgym0lR2iRdMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5
RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvNTk3MTcxOUM4
MjNCMTFFRjkzRjczQTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E
OzA5MCgEAgABMCIwDAMEBBtv0AMEAhtv4AMEAHZntzAMAwQDyk/IAwQFyk/AMA0E
AgACMAcDBQAkA7EAMA0GCSqGSIb3DQEBCwUAA4IBAQA3pOZgpaWJUwnpGJWh+jlx
rTGeBI0PknnPhMP+1LNbTZvM056B06dc8SjgBs8zm/9xpXYNLHfk+1OAE1PlG3d9
fI8CE8zWOr8KZ3mj4nIiIJ4xgMyU6lxsbs7IR5RnUpkR6kJ2eHjhODzPFwGJgnwK
GW6hbyhJWsv1mZOSxYmd1kKM0mLy2GAE/v74Sa6EV2hu8tPbRGSVFr1xuEHN82g2
QhjL1N+J2LId+YH/WXmlqrWBonlPnXHJfPbxu71JAjFlX9TDzbvn32I4FDk+88gh
vs+QKnmdn5p0TOmFIEZaTt4kxNrt8FxjfjxtWS7oXBB60AnJwCcMubieGLBkgS3K
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:52:43 2025 by rpki-client