Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0AF35D4CBC5011EFAA71BF52C4F9AE02.roa
File: 0AF35D4CBC5011EFAA71BF52C4F9AE02.roa (raw, json)
Hash identifier: MIXGh2FTJf+Ew+Ix8M/lpycxQgCYrEdomKGeqcJCCT0=
Subject key identifier: 19:07:25:FD:3B:B5:CB:47:46:6B:D3:64:FE:F3:7C:71:4A:7C:93:A3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1FF3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0AF35D4CBC5011EFAA71BF52C4F9AE02.roa
Signing time: Tue 17 Dec 2024 08:22:24 +0000
ROA not before: Tue 17 Dec 2024 08:22:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.252.0/22 maxlen: 22
115.167.117.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 05:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8179 (0x1ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 17 08:22:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=676134c0-10f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:9f:42:1c:7c:12:50:ef:48:d7:af:f8:8d:
78:a6:b3:ce:79:73:b1:56:63:85:b1:35:8a:d4:97:
ed:51:4a:40:ed:f8:b5:2b:2d:cc:c5:53:ac:82:7f:
8b:57:c2:d9:97:41:25:f5:cd:69:4b:10:3e:d8:cd:
dc:24:b1:26:f6:48:2c:85:10:99:1c:03:ce:5c:2f:
05:cd:8d:5c:41:8e:58:14:4b:01:d3:17:ab:0e:36:
74:63:8f:13:c8:f2:fd:af:14:2f:04:f4:08:7c:fd:
96:e3:8a:86:02:c1:58:7f:87:c0:76:29:fc:18:37:
08:77:9e:b9:3f:f0:ee:32:99:4b:96:3d:47:91:b3:
82:23:96:1f:b4:50:46:c9:9c:0f:cc:6b:21:b0:bb:
ca:81:33:e1:e2:32:91:41:ff:7b:ad:e1:dc:cf:bb:
1b:7e:72:04:9c:5f:98:96:c6:3d:74:44:e7:c3:33:
fb:29:a8:86:42:74:c6:7a:e8:6d:2e:8b:b8:4c:b3:
74:79:5c:59:25:9f:73:cf:f2:6d:da:18:87:a7:96:
5f:1e:47:04:33:c0:c8:c2:5d:bc:6c:cc:ec:36:78:
ad:d4:4a:6f:ce:99:34:fc:9c:dd:c4:8e:05:44:53:
74:c6:19:0f:88:5a:4a:23:60:d0:67:a9:74:e2:75:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:25:FD:3B:B5:CB:47:46:6B:D3:64:FE:F3:7C:71:4A:7C:93:A3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0AF35D4CBC5011EFAA71BF52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.226.0/24
113.203.228.0/24
113.203.244.0/24
113.203.252.0/22
115.167.117.0/24
115.167.119.0/24
115.167.122.0/23
175.110.90.0/24
202.92.18.0/24
202.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:61:93:b6:39:b5:af:1f:0e:f5:25:57:1d:10:23:7d:82:b4:
81:6c:2d:54:99:f0:a2:69:e5:75:4f:66:f5:78:b1:ad:c5:97:
45:d2:53:bc:6a:c8:fb:81:c1:66:50:7c:f1:71:51:7c:8f:ca:
e2:df:66:0c:ad:f0:da:34:96:2e:e0:d7:8a:81:ba:c2:44:80:
42:4a:0f:99:18:15:67:fa:08:66:f2:cd:c9:74:63:07:ef:fd:
22:4e:d5:3a:58:0e:9c:d9:4e:d3:05:b6:6e:88:83:92:57:b5:
39:59:e7:35:2c:d7:3b:ed:f2:0b:bb:1d:b7:da:bd:97:7c:db:
43:56:15:91:36:19:7f:fd:be:26:7c:46:39:9f:69:de:26:0f:
c7:c5:81:05:df:67:6a:2f:c1:3b:93:9e:8e:96:c7:d2:36:46:
b7:d8:55:ce:38:e5:28:6e:56:ac:49:1f:80:27:b9:b0:bf:cd:
1e:c3:0e:26:47:ce:15:00:01:53:d4:2f:81:f7:36:b7:79:85:
e5:e7:3e:32:59:10:17:93:33:5c:6e:1b:6b:ac:2e:4e:db:22:
46:87:11:be:87:eb:ae:dc:13:9f:4c:84:2f:93:dc:f9:36:56:
47:76:ce:83:8d:9d:ee:bd:b6:45:5b:ee:65:d1:92:69:c4:f2:
81:10:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:04 2025 by rpki-client