Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/C5C139C49C1A11EFB5E75281C4F9AE02.roa
File: C5C139C49C1A11EFB5E75281C4F9AE02.roa (raw, json)
Hash identifier: cpXHO1Na1zhOzh8H/WrcgBFsWeQWG+CbmOIqSzu3DmE=
Subject key identifier: 10:8F:3C:5F:7E:3A:BC:AD:2E:D3:3C:53:F8:27:40:A8:1C:08:CD:1E
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 17E1
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/C5C139C49C1A11EFB5E75281C4F9AE02.roa
Signing time: Wed 06 Nov 2024 08:40:28 +0000
ROA not before: Wed 06 Nov 2024 08:40:28 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 17911
IP address blocks: 122.129.64.0/24 maxlen: 24
122.129.65.0/24 maxlen: 24
122.129.66.0/24 maxlen: 24
122.129.67.0/24 maxlen: 24
122.129.68.0/24 maxlen: 24
122.129.69.0/24 maxlen: 24
122.129.70.0/24 maxlen: 24
122.129.71.0/24 maxlen: 24
122.129.72.0/24 maxlen: 24
122.129.73.0/24 maxlen: 24
122.129.74.0/24 maxlen: 24
122.129.75.0/24 maxlen: 24
122.129.76.0/24 maxlen: 24
122.129.77.0/24 maxlen: 24
122.129.78.0/24 maxlen: 24
122.129.79.0/24 maxlen: 24
122.129.80.0/24 maxlen: 24
122.129.81.0/24 maxlen: 24
122.129.82.0/24 maxlen: 24
122.129.83.0/24 maxlen: 24
122.129.84.0/24 maxlen: 24
122.129.85.0/24 maxlen: 24
122.129.86.0/24 maxlen: 24
122.129.87.0/24 maxlen: 24
122.129.88.0/24 maxlen: 24
122.129.89.0/24 maxlen: 24
122.129.90.0/24 maxlen: 24
122.129.91.0/24 maxlen: 24
122.129.92.0/24 maxlen: 24
122.129.93.0/24 maxlen: 24
122.129.94.0/24 maxlen: 24
122.129.95.0/24 maxlen: 24
203.128.0.0/24 maxlen: 24
203.128.1.0/24 maxlen: 24
203.128.2.0/24 maxlen: 24
203.128.3.0/24 maxlen: 24
203.128.4.0/24 maxlen: 24
203.128.5.0/24 maxlen: 24
203.128.6.0/24 maxlen: 24
203.128.7.0/24 maxlen: 24
203.128.8.0/24 maxlen: 24
203.128.9.0/24 maxlen: 24
203.128.10.0/24 maxlen: 24
203.128.11.0/24 maxlen: 24
203.128.12.0/24 maxlen: 24
203.128.13.0/24 maxlen: 24
203.128.14.0/24 maxlen: 24
203.128.15.0/24 maxlen: 24
203.128.16.0/24 maxlen: 24
203.128.17.0/24 maxlen: 24
203.128.18.0/24 maxlen: 24
203.128.19.0/24 maxlen: 24
203.128.20.0/24 maxlen: 24
203.128.21.0/24 maxlen: 24
203.128.22.0/24 maxlen: 24
203.128.24.0/24 maxlen: 24
203.128.25.0/24 maxlen: 24
203.128.26.0/24 maxlen: 24
203.128.27.0/24 maxlen: 24
203.128.28.0/24 maxlen: 24
203.128.29.0/24 maxlen: 24
203.128.30.0/24 maxlen: 24
203.128.31.0/24 maxlen: 24
2400:4f00::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 16 Nov 2024 10:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6113 (0x17e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Nov 6 08:40:28 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=672b2b7b-a2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:27:27:42:a6:60:e7:f9:38:e3:ef:3a:ab:
05:2f:5d:4f:c0:86:fb:e5:01:07:99:cf:e7:da:3b:
5a:9e:7d:62:b6:eb:ec:d7:9b:c0:3d:41:f6:1b:17:
d2:d1:f3:ec:08:10:db:41:6d:7f:ed:a6:d1:66:99:
62:49:01:9b:4f:42:69:57:84:3c:df:d7:a4:b3:f3:
52:40:94:b4:a9:b2:b6:f0:98:0d:2f:0f:69:03:dc:
e5:07:10:aa:5b:52:5e:e0:4f:c3:19:7d:5e:20:23:
46:b1:ba:69:07:bd:62:80:64:95:c5:c7:81:8e:4c:
8a:ed:91:cd:a0:d5:73:8d:2e:0f:c4:f2:40:1e:bd:
56:f5:c9:6e:dc:0a:f5:a4:95:5e:ad:f8:8e:fc:b9:
ff:81:c5:65:99:bb:2b:d5:9b:7b:84:a5:04:49:62:
f7:2d:17:6b:59:ce:4b:b3:53:83:12:5b:15:ef:52:
4c:29:25:5a:26:52:2e:37:eb:ac:b7:a0:8c:51:e9:
51:51:63:df:bb:4e:14:ae:33:b1:34:62:c9:08:f5:
61:56:9b:89:8f:d7:b0:a1:aa:54:98:20:d5:33:6a:
22:35:dc:e5:d7:3c:a3:9d:c4:27:b0:5b:1e:fd:d8:
8f:6c:72:30:60:13:4c:37:11:e3:de:8b:55:aa:95:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:3C:5F:7E:3A:BC:AD:2E:D3:3C:53:F8:27:40:A8:1C:08:CD:1E
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/C5C139C49C1A11EFB5E75281C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.129.64.0/19
203.128.0.0-203.128.22.255
203.128.24.0/21
IPv6:
2400:4f00::/36
Signature Algorithm: sha256WithRSAEncryption
c0:d9:80:1d:53:7a:c9:a8:1a:74:0d:d3:3d:66:51:36:0e:f1:
6f:1d:92:fa:a5:f8:3c:0e:25:a7:e8:85:c4:be:22:98:a9:5e:
3a:71:00:42:53:8b:12:3d:b2:d7:84:17:e3:02:e0:ec:a4:e3:
32:58:82:3b:c9:33:19:3a:36:4a:72:bd:5e:50:ce:c3:f1:28:
65:89:9f:a4:0a:ab:cb:c3:07:38:b1:cf:37:60:86:5e:4c:b9:
8a:7e:3e:3e:23:c0:bd:1d:ed:d6:2f:8c:52:65:69:a2:f7:29:
89:c3:28:99:d2:b6:dd:1b:37:aa:29:a2:61:3c:8e:ee:c9:47:
64:c3:ef:8f:70:15:fc:df:41:5c:cb:6d:a0:a0:d9:ae:66:19:
41:38:60:67:bf:25:e5:f2:c9:b8:77:3b:7a:32:62:a5:0b:14:
b8:b3:a7:d9:65:2a:81:48:9a:f4:7b:83:1c:b2:56:15:f7:e4:
bd:ab:0e:e5:c7:19:0c:66:f4:34:bf:a0:cd:4f:e8:f8:28:23:
ee:6c:f0:d3:70:30:4b:0c:27:cd:7b:6e:65:52:43:66:a9:e9:
80:55:87:7c:35:bd:d3:42:20:12:4a:b4:88:c4:9a:d6:0a:a9:
bd:5e:af:18:73:18:6d:54:e8:3b:0e:32:20:5c:28:58:77:76:
eb:83:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 12:15:40 2024 by rpki-client on console-fra.rpki-client.org