Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/7B6600CA4B0911EEA98A477BC4F9AE02.roa
File: 7B6600CA4B0911EEA98A477BC4F9AE02.roa (raw, json)
Hash identifier: apAXHtzT0Qt3FmzLECVB7FymgavVDPto0UHp4ErgYms=
Subject key identifier: C8:55:7E:02:FA:9F:26:49:B4:A6:5D:9F:8B:4B:00:28:5A:71:FA:D7
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 074E
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/7B6600CA4B0911EEA98A477BC4F9AE02.roa
Signing time: Fri 24 Jan 2025 21:40:52 +0000
ROA not before: Fri 24 Jan 2025 21:40:52 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139831
IP address blocks: 131.226.64.0/18 maxlen: 18
131.226.64.0/22 maxlen: 24
131.226.68.0/22 maxlen: 24
131.226.74.0/23 maxlen: 24
131.226.76.0/23 maxlen: 24
131.226.80.0/22 maxlen: 24
131.226.84.0/22 maxlen: 24
131.226.88.0/22 maxlen: 24
131.226.92.0/22 maxlen: 24
131.226.96.0/22 maxlen: 23
131.226.100.0/22 maxlen: 23
131.226.100.0/24 maxlen: 24
131.226.104.0/22 maxlen: 23
131.226.108.0/22 maxlen: 23
131.226.112.0/22 maxlen: 23
131.226.116.0/23 maxlen: 23
131.226.118.0/23 maxlen: 23
131.226.120.0/23 maxlen: 23
131.226.122.0/23 maxlen: 23
131.226.124.0/23 maxlen: 23
131.226.126.0/24 maxlen: 24
131.226.127.0/24 maxlen: 24
139.135.64.0/18 maxlen: 18
139.135.64.0/22 maxlen: 22
139.135.68.0/22 maxlen: 22
139.135.72.0/22 maxlen: 22
139.135.76.0/22 maxlen: 22
139.135.80.0/22 maxlen: 22
139.135.88.0/22 maxlen: 22
139.135.104.0/24 maxlen: 24
139.135.105.0/24 maxlen: 24
139.135.106.0/24 maxlen: 24
139.135.107.0/24 maxlen: 24
139.135.108.0/24 maxlen: 24
139.135.109.0/24 maxlen: 24
139.135.110.0/24 maxlen: 24
139.135.111.0/24 maxlen: 24
139.135.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Mar 2025 08:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Jan 24 21:40:52 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=679408e4-e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:f9:4e:59:12:53:db:5a:aa:2b:5d:ee:33:
c9:2e:e7:54:33:13:31:82:8d:f1:ad:53:91:1a:16:
01:dd:ef:9f:51:c2:59:3b:b6:9d:5e:05:1e:32:26:
b2:e1:73:24:8a:c4:ed:59:2c:a1:4c:35:3c:b6:28:
4f:7c:ad:2a:88:27:bb:8f:cc:a0:8a:8f:2a:4d:84:
40:c7:11:e3:b0:40:a6:cb:e5:c7:8d:09:0d:86:b7:
c5:81:65:9e:a7:1b:b3:87:2c:83:fa:e2:f5:90:13:
da:06:47:e6:a7:1b:a9:cb:b0:9b:06:ae:25:33:de:
b6:ea:c1:a0:0d:3c:38:2c:22:7d:d5:bc:c9:ce:88:
0b:5a:fc:a2:07:e3:1c:31:19:4e:a0:84:d4:ef:3c:
98:83:d9:1e:50:1c:01:da:25:60:04:49:14:b8:d1:
b6:01:5a:17:48:5b:75:90:50:b4:02:86:a3:85:fc:
3a:20:90:8e:72:59:2d:00:00:59:aa:88:a6:f9:70:
ac:b2:45:73:e8:20:b3:38:a5:e0:31:74:07:db:0f:
84:19:43:b0:e5:52:85:6e:88:3b:62:91:e0:b9:f5:
b5:20:64:7e:ee:b1:eb:05:60:67:41:2e:13:f7:a2:
17:d7:c0:95:f2:9b:5c:33:14:20:cd:99:14:36:cf:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:7E:02:FA:9F:26:49:B4:A6:5D:9F:8B:4B:00:28:5A:71:FA:D7
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/7B6600CA4B0911EEA98A477BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.226.64.0/18
139.135.64.0/18
Signature Algorithm: sha256WithRSAEncryption
71:16:7c:f8:68:4d:23:11:88:03:63:a6:27:1c:b3:cd:e1:f0:
b2:dc:3e:3b:f9:64:00:ce:04:b5:6d:4e:f4:91:b5:49:1f:eb:
23:cf:3d:4b:bb:7e:8c:42:25:48:77:87:31:5e:a2:11:6d:3e:
91:ee:5c:4a:38:71:c5:07:7a:aa:66:ee:27:3e:2b:7f:b6:54:
0e:78:b9:ba:c6:08:77:c1:0f:ad:0e:f4:d8:6a:ab:cd:d5:81:
95:4a:2d:36:d1:a0:c3:e8:a4:22:9d:69:57:cc:83:72:bc:15:
f3:7a:e7:1e:0b:86:66:37:5a:11:55:8e:6c:49:b8:36:64:20:
9d:76:c1:24:b1:2a:d6:a8:85:98:99:dc:c9:93:5b:c9:d2:76:
05:5c:08:22:b8:21:de:31:3d:b4:67:b4:24:27:7a:42:38:2e:
d2:8b:b9:87:ff:fd:c1:48:5b:33:3c:7f:9b:8b:c9:1d:0b:e0:
6c:95:28:47:fd:fe:7a:f8:d4:90:f6:e5:46:ba:c0:0f:ad:07:
94:07:25:18:a2:c3:0c:33:19:57:06:97:d5:f9:9e:24:12:04:
4d:6c:88:dd:19:17:7c:65:1f:bf:5c:1d:16:16:8e:07:5b:95:
0b:90:ed:29:77:6a:66:af:6a:79:30:12:90:72:67:f3:bb:bd:
cb:7f:a6:9b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0NTYxMTAvBgNVBAUTKDNGQjBBNTZFMjBGMTk0Qzc3NDk4NzlENEQyMjVCM0Y5
N0U5RUJFQ0YwHhcNMjUwMTI0MjE0MDUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk0MDhlNC1lMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7WH5TlkSU9taqitd7jPJLudUMxMxgo3xrVORGhYB3e+fUcJZO7adXgUeMiay
4XMkisTtWSyhTDU8tihPfK0qiCe7j8ygio8qTYRAxxHjsECmy+XHjQkNhrfFgWWe
pxuzhyyD+uL1kBPaBkfmpxupy7CbBq4lM9626sGgDTw4LCJ91bzJzogLWvyiB+Mc
MRlOoITU7zyYg9keUBwB2iVgBEkUuNG2AVoXSFt1kFC0Aoajhfw6IJCOclktAABZ
qoim+XCsskVz6CCzOKXgMXQH2w+EGUOw5VKFbog7YpHgufW1IGR+7rHrBWBnQS4T
96IX18CV8ptcMxQgzZkUNs8MdwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMhVfgL6
nyZJtKZdn4tLAChacfrXMB8GA1UdIwQYMBaAFD+wpW4g8ZTHdJh51NIls/l+nr7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni83NzE5QzcxMDMw
NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9QN0NsYmlEeGxNZDBtSG5VMGlXei1YNmV2
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3Q2xiaUR4bE1kMG1IblUwaVd6LVg2ZXZzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU0NTYvNzcxOUM3MTAzMDY2MTFFQjg1MjUxMzU1QzRGOUFFMDIvN0I2NjAwQ0E0
QjA5MTFFRUE5OEE0NzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAaD4kADBAaLh0AwDQYJKoZIhvcNAQELBQADggEBAHEWfPho
TSMRiANjpiccs83h8LLcPjv5ZADOBLVtTvSRtUkf6yPPPUu7foxCJUh3hzFeohFt
PpHuXEo4ccUHeqpm7ic+K3+2VA54ubrGCHfBD60O9Nhqq83VgZVKLTbRoMPopCKd
aVfMg3K8FfN65x4LhmY3WhFVjmxJuDZkIJ12wSSxKtaohZiZ3MmTW8nSdgVcCCK4
Id4xPbRntCQnekI4LtKLuYf//cFIWzM8f5uLyR0L4GyVKEf9/nr41JD25Ua6wA+t
B5QHJRiiwwwzGVcGl9X5niQSBE1siN0ZF3xlH79cHRYWjgdblQuQ7Sl3amavankw
EpByZ/O7vct/pps=
-----END CERTIFICATE-----
Generated at Mon Apr 14 12:04:06 2025 by rpki-client