Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/035D3E4EAAF911EF8784F235C4F9AE02.roa
File: 035D3E4EAAF911EF8784F235C4F9AE02.roa (raw, json)
Hash identifier: AfD6OTrvDi8qTn6hl/yZZyR8i5MNknHLjIvAQsAlYEI=
Subject key identifier: 02:D4:9E:E1:F3:20:6D:31:5B:69:DF:A8:49:90:CC:F6:B0:4A:7C:66
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1DAD
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/035D3E4EAAF911EF8784F235C4F9AE02.roa
Signing time: Mon 25 Nov 2024 06:46:35 +0000
ROA not before: Mon 25 Nov 2024 06:46:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 113.203.210.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 08:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7597 (0x1dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 25 06:46:35 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67441d4b-50ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:dd:82:d3:1f:67:20:83:e4:d1:d9:ad:0d:
80:9a:83:95:aa:b6:d2:bc:e6:fc:e1:34:20:d6:6a:
79:ec:4c:3e:d1:1e:e8:1b:51:d6:af:54:25:c9:77:
58:cd:67:d4:9c:ee:50:3d:2c:31:b2:01:af:32:93:
47:a9:02:f8:d3:b2:c7:f5:7d:73:3c:ef:d3:9e:81:
b2:21:a5:fc:93:e5:5f:f9:8e:f5:08:bc:db:fb:f4:
8d:37:bc:07:04:ac:84:4b:f2:48:ce:60:48:8b:74:
24:c9:d7:1c:05:5e:9a:75:f9:04:9c:79:46:cf:e3:
4e:e5:26:60:d7:6c:80:05:21:d9:51:3c:d0:54:21:
76:1c:88:e8:f1:ca:ec:4b:82:58:b4:24:c7:8a:66:
d8:11:0f:a3:df:01:a3:1a:12:26:f0:c6:11:dc:80:
29:8d:3a:fc:ec:b5:d6:7d:96:14:b8:22:de:f3:4b:
f4:ab:1f:82:52:84:fb:d7:8a:d9:0b:09:c3:7f:ee:
32:60:4e:f2:58:c9:8c:60:d2:b2:79:c5:f1:af:8c:
eb:66:44:cb:c2:d8:b4:3e:50:75:20:d3:ee:1b:47:
30:a1:09:86:42:89:ec:c8:4c:72:11:a0:06:ae:ed:
ba:c3:a7:18:dc:ab:0f:ab:09:41:6e:f0:76:bf:49:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:9E:E1:F3:20:6D:31:5B:69:DF:A8:49:90:CC:F6:B0:4A:7C:66
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/035D3E4EAAF911EF8784F235C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.210.0/24
113.203.217.0/24
113.203.220.0/24
113.203.246.0/24
115.167.20.0/22
115.167.48.0/24
115.167.56.0/22
Signature Algorithm: sha256WithRSAEncryption
31:17:26:25:2d:37:bc:f4:a3:06:65:93:a4:83:e2:51:76:7b:
75:90:be:ed:ff:c3:9e:96:f7:ff:3b:2c:75:8a:1a:8e:2e:7b:
6a:36:fe:7d:6c:f9:da:f4:a6:b7:57:dc:d7:1f:0c:b2:87:5a:
c5:bb:28:6f:33:8c:dd:82:52:c1:a0:b6:d0:ec:51:b2:3a:86:
26:9c:69:5a:d9:f9:5e:4d:d1:a7:1a:ca:44:c6:44:2a:a8:67:
1c:d6:44:88:73:b4:a9:01:06:36:7a:43:ae:ce:fb:30:2f:35:
a5:70:45:74:e6:a1:62:fc:0c:b1:31:55:7a:1e:7e:88:a4:b9:
18:35:65:5e:cc:7c:2f:da:b1:4b:c5:a0:61:18:07:ee:bf:67:
88:a6:74:fb:96:b8:fc:0a:24:0d:d0:71:78:6c:51:4b:f0:61:
f5:31:66:66:10:2c:34:81:f0:84:a1:9a:69:5a:04:b1:65:5f:
38:f0:56:fc:9a:81:66:22:66:cb:59:d9:cb:ac:d8:db:08:29:
01:e7:ec:93:16:d5:20:9a:26:2b:ab:89:07:a2:2f:79:f3:f7:
5a:64:53:8b:91:07:63:f4:83:bd:64:08:0b:8e:36:7b:75:96:
9f:cf:14:88:be:5f:08:e9:18:fd:4f:f5:43:71:19:a1:bd:5b:
fc:48:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:00 2025 by rpki-client