Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/767438B6A18911EF8B1A1A24C4F9AE02.roa
File: 767438B6A18911EF8B1A1A24C4F9AE02.roa (raw, json)
Hash identifier: FeV/Up97L7sGZhFoJ/LsKXvw00km1uC23VooFNPmXZE=
Subject key identifier: 6B:DA:35:B6:57:CA:9F:2F:1B:D8:1D:6E:09:E8:7E:AE:84:63:28:64
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 34C5
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/767438B6A18911EF8B1A1A24C4F9AE02.roa
Signing time: Wed 08 Jan 2025 09:26:37 +0000
ROA not before: Wed 08 Jan 2025 09:26:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38174
IP address blocks: 120.29.234.0/23 maxlen: 24
120.29.239.0/24 maxlen: 24
123.242.244.0/22 maxlen: 24
123.242.252.0/23 maxlen: 24
123.242.254.0/23 maxlen: 23
202.60.60.0/23 maxlen: 23
202.60.60.0/24 maxlen: 24
202.60.61.0/24 maxlen: 24
202.60.62.0/23 maxlen: 24
202.61.10.0/23 maxlen: 23
202.61.10.0/24 maxlen: 24
202.61.11.0/24 maxlen: 24
202.91.136.0/22 maxlen: 22
203.189.180.0/22 maxlen: 22
203.189.180.0/24 maxlen: 24
203.189.181.0/24 maxlen: 24
203.189.182.0/24 maxlen: 24
203.189.183.0/24 maxlen: 24
203.191.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 06:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13509 (0x34c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770
Validity
Not Before: Jan 8 09:26:37 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677e44cd-1ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:f1:82:cb:a9:63:36:27:7d:1e:ba:c4:63:
79:c5:d8:a0:97:b8:47:1a:b2:8c:09:2c:40:96:9e:
12:3a:5a:f8:4d:fc:4a:25:e7:03:12:82:8e:00:d2:
ad:06:62:81:c7:1a:6b:fb:af:99:29:bd:f5:ab:fb:
bc:10:28:73:b7:af:7c:0a:ff:4f:80:0a:e0:c5:3a:
56:48:35:af:a4:23:90:55:90:6e:1c:a9:74:9b:0b:
84:9c:4f:20:7c:27:2d:8c:cb:09:f1:76:08:65:ef:
c7:03:71:5e:4f:31:f4:81:56:be:fc:4b:e4:50:c9:
82:7f:9a:bd:b2:67:17:6a:a2:5e:84:a5:cb:ba:50:
50:d3:a3:3f:c7:64:09:db:87:58:e5:78:62:96:3b:
36:81:60:4c:46:ea:a1:5a:97:78:10:b2:b2:80:82:
36:d3:05:ca:5b:df:b7:d2:9e:83:ea:6d:fa:2a:15:
38:6d:64:66:15:af:1b:ed:ee:dd:ef:62:e3:7c:5a:
a7:54:80:cb:10:96:48:51:3e:88:97:51:cb:9c:02:
0a:4c:38:c6:a0:10:82:88:c7:ec:17:5a:58:8f:91:
63:e5:15:1d:7c:4f:17:94:50:56:1d:63:86:49:8e:
cf:a2:cd:f1:a5:35:2e:69:b9:76:ab:03:93:57:3e:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:35:B6:57:CA:9F:2F:1B:D8:1D:6E:09:E8:7E:AE:84:63:28:64
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/767438B6A18911EF8B1A1A24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.234.0/23
120.29.239.0/24
123.242.244.0/22
123.242.252.0/22
202.60.60.0/22
202.61.10.0/23
202.91.136.0/22
203.189.180.0/22
203.191.34.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:99:b9:38:d9:60:03:48:97:3b:fe:ae:f2:3c:30:51:f6:62:
c9:0f:d3:b9:a1:6f:35:88:9c:a6:66:ef:be:1a:e2:8e:dc:c2:
93:09:2e:e1:2b:18:9c:a3:d1:e5:b3:f3:60:8e:84:0b:d2:24:
80:da:1b:2a:0f:00:05:fc:40:a4:2b:fd:9f:18:6c:fd:c4:2c:
6b:6f:8b:ae:7c:95:22:7b:ff:cf:df:5e:89:e1:d9:49:4f:72:
90:9e:b6:d9:95:34:86:40:9d:10:f2:a6:4b:28:4f:3c:72:0c:
38:4f:85:5f:7c:c8:ed:84:33:d3:1e:31:55:80:a8:06:71:d3:
06:1a:64:4e:6f:a8:23:0e:37:60:13:6b:bd:7f:c6:b3:e0:b3:
f4:8f:86:8c:25:d1:45:c9:3d:06:2a:c1:8f:cc:a5:e5:aa:9b:
d4:f9:b3:4f:c2:98:cb:a1:05:16:b3:6f:a9:7d:f5:5a:d0:fc:
8d:fb:86:9c:e5:60:a1:10:86:21:12:71:d9:17:78:e1:c5:97:
21:b6:36:19:19:ec:8b:6d:eb:47:e7:05:3f:ef:20:9e:14:43:
86:66:dd:c2:0d:d1:1c:cf:ee:17:85:6a:18:3e:64:c0:6e:ad:
bd:9c:2f:46:c4:d8:c7:2f:e6:bd:87:f6:7b:1c:5f:37:08:66:
9b:cd:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:47:46 2025 by rpki-client