Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0BAEFEE4BC5011EFAA71BF52C4F9AE02.roa
File: 0BAEFEE4BC5011EFAA71BF52C4F9AE02.roa (raw, json)
Hash identifier: PtGLyrCKkE+aiYFgeBzO92J19IJbcg9Bmva8zPorW8M=
Subject key identifier: 9C:05:65:8B:47:17:0B:41:31:93:EB:17:01:2D:D4:DB:9F:62:C9:AF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1FF4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0BAEFEE4BC5011EFAA71BF52C4F9AE02.roa
Signing time: Tue 17 Dec 2024 08:22:25 +0000
ROA not before: Tue 17 Dec 2024 08:22:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213990
IP address blocks: 113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.60.0/23 maxlen: 23
115.167.62.0/23 maxlen: 23
175.110.64.0/22 maxlen: 22
223.29.226.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 11:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8180 (0x1ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 17 08:22:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=676134c1-dcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:84:0e:9b:5e:fd:ab:48:eb:ec:a2:70:8c:
88:cc:86:7d:be:4d:15:67:c1:33:d2:b3:c3:ba:c2:
d5:ec:28:84:c5:dd:f4:e9:a3:90:ea:b7:84:97:08:
7d:a2:f2:df:35:b7:4b:0c:7f:24:85:14:3d:7d:e5:
25:76:6b:40:4b:ca:f0:50:2e:f7:9a:6d:24:ae:b1:
94:17:0c:49:61:22:6b:4f:ff:b8:87:11:7b:53:a1:
ed:0e:e9:9e:aa:5f:0c:07:28:44:82:05:00:41:25:
4f:89:10:10:de:b3:ff:e5:a6:c3:b3:41:76:60:a4:
84:cf:ac:b4:68:ee:9b:a8:2c:23:65:2d:54:74:64:
1c:e9:76:ac:7e:5d:e3:89:01:00:61:a3:f6:4c:c7:
f8:8b:be:ae:48:20:1f:54:3e:d0:7c:29:96:26:00:
96:c6:1f:39:04:f2:32:fb:98:40:32:b7:ee:91:32:
0a:a9:e7:87:05:e9:07:0a:81:30:81:09:2c:e7:f1:
74:f4:58:6e:b1:1e:c3:94:20:24:07:14:fb:91:0d:
a6:42:1c:db:34:90:52:ce:bf:24:66:4d:c5:c3:76:
8a:77:4a:dc:bc:d2:52:4a:ae:0c:b8:3c:c7:57:d5:
39:c1:9c:62:7e:51:ea:2b:9e:27:2e:90:33:c2:f1:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:65:8B:47:17:0B:41:31:93:EB:17:01:2D:D4:DB:9F:62:C9:AF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0BAEFEE4BC5011EFAA71BF52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.233.0/24
113.203.245.0/24
115.167.29.0-115.167.30.255
115.167.60.0/22
175.110.64.0/22
223.29.226.0/24
223.29.229.0/24
Signature Algorithm: sha256WithRSAEncryption
51:62:5b:c2:8c:00:11:01:82:b9:4c:60:62:58:65:f8:cc:58:
0d:cd:f7:45:78:b6:4e:69:8f:d4:96:4f:0e:f4:1b:f2:6e:d2:
5c:53:c8:95:18:e9:8e:ae:0f:ea:0d:35:21:41:36:d4:8b:4d:
1b:ff:e0:c7:73:fc:81:30:9b:fc:db:a7:8b:eb:34:0b:87:64:
a9:06:7f:72:2b:e2:d5:5c:c2:3a:a2:21:d5:97:50:18:81:46:
9c:17:7f:d4:60:4e:be:3f:24:75:b7:62:24:4d:0e:db:a1:c7:
ae:f9:60:f0:db:2f:50:91:78:19:75:60:57:7f:e4:38:d2:74:
11:1b:01:44:65:ea:3b:c9:d2:5a:5e:1e:39:82:1d:c6:42:84:
40:db:d5:4f:ff:57:1f:04:33:2c:1d:f0:f1:44:7c:45:ea:49:
f0:e5:4b:67:29:6a:7b:ad:fa:31:4f:ac:b5:54:69:aa:b2:d8:
13:06:ea:23:45:14:9c:d1:a7:08:39:94:68:f6:c0:07:45:c4:
fb:aa:e2:a7:e2:50:6a:8d:e4:b8:97:a0:f7:d6:52:52:b3:08:
16:15:41:07:45:12:41:fa:48:59:6c:2e:64:61:fe:8e:46:f5:
f8:38:0a:20:b0:f1:14:84:32:af:2f:6e:37:b2:b6:63:12:75:
ba:f4:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:28 2025 by rpki-client