Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F7B995447EA11EFB5D28841C4F9AE02.roa
File: 0F7B995447EA11EFB5D28841C4F9AE02.roa (raw, json)
Hash identifier: F2tHTtuCELF0F/KAbh3sfSV2bGWSaItOp+1fW7ZJWxU=
Subject key identifier: 83:03:01:20:CD:F8:70:CE:A8:DC:9A:5F:EA:D5:4B:BB:2A:75:EE:BF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1483
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F7B995447EA11EFB5D28841C4F9AE02.roa
Signing time: Mon 22 Jul 2024 07:59:11 +0000
ROA not before: Mon 22 Jul 2024 07:59:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 06:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5251 (0x1483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 22 07:59:11 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=669e114f-d2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:42:df:43:ba:04:0e:2d:6d:65:6d:f5:38:
23:d0:e7:e6:77:34:e0:ba:f7:d9:5a:0a:75:93:93:
92:7a:12:1a:7a:5e:79:3c:01:1a:1b:b7:97:35:91:
70:96:fe:94:43:33:e4:26:77:2e:13:4a:37:24:44:
6f:4d:26:ee:1b:0a:68:90:b9:41:79:e7:ad:86:05:
f3:0b:dc:60:13:f6:9a:8d:c3:8a:05:c3:75:2b:ce:
a7:30:ee:74:b3:fa:e1:fe:ad:10:7a:d8:65:87:1b:
47:9c:d3:74:de:d0:48:20:47:3c:57:9f:20:51:8c:
2f:5a:f1:8b:fe:57:03:b4:08:ed:63:be:33:8c:92:
b9:58:7c:cd:ca:0d:ab:a8:11:22:18:f2:3c:d8:9b:
4a:fa:09:7b:8e:e4:e9:70:e2:e0:c8:2a:30:cb:eb:
27:3c:e4:ec:07:ee:c6:2c:61:f7:8b:01:5f:4c:c9:
33:18:2e:19:39:dc:c1:52:38:bc:c5:a3:16:9f:fb:
86:e8:1c:de:9a:05:8c:67:b7:54:4a:70:66:38:11:
a9:01:31:b4:12:e4:d7:12:b8:df:7b:47:4c:f5:5d:
34:47:1a:e2:2e:c3:b5:09:67:b6:b9:f8:36:d5:cc:
db:74:20:c2:62:f7:79:b9:17:45:87:6d:f3:7f:3e:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:01:20:CD:F8:70:CE:A8:DC:9A:5F:EA:D5:4B:BB:2A:75:EE:BF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F7B995447EA11EFB5D28841C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
115.167.50.0/24
115.167.64.0/24
115.167.66.0/23
115.167.76.0/24
Signature Algorithm: sha256WithRSAEncryption
78:55:59:d2:76:d4:56:76:da:01:93:13:60:eb:b9:64:39:15:
cb:93:2b:c2:7a:c0:a8:48:ae:1d:66:0e:0b:4c:4f:46:23:8a:
59:79:77:3d:da:10:46:7c:c3:fc:7c:7b:8c:5a:5f:76:b5:40:
2f:93:cc:88:38:c5:89:98:70:e0:32:f4:cb:fd:c1:8b:2d:24:
e2:ad:6b:95:8d:03:93:af:85:0a:db:59:e8:07:d1:0d:f2:0d:
b4:ae:80:21:b1:66:7a:44:7a:62:95:44:8d:3d:41:eb:99:d8:
b8:a4:ab:2d:5c:11:72:4f:72:15:c6:91:39:66:51:75:53:52:
04:1a:b4:70:b5:c5:f2:13:f7:ca:c9:56:0c:0c:e5:6f:cb:9a:
7c:a2:81:d6:a1:c2:dc:8d:c2:1c:ad:02:a7:6d:11:99:af:49:
6f:6b:b2:eb:97:70:bd:1d:49:ae:74:bf:70:d9:18:c1:ca:8a:
97:4b:6e:99:a6:92:fe:d0:0d:0f:c0:8a:28:e8:a4:f7:22:c6:
8b:94:dd:8a:90:5d:6e:6d:5d:fe:35:82:a0:5b:7d:d7:32:ae:
d6:ef:a3:73:e2:1b:58:e6:33:96:0b:eb:e7:27:91:cd:9f:e5:
cc:c1:b1:49:1d:90:d6:93:4b:bf:2d:ce:c8:ca:73:65:9e:08:
8a:09:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:42 2025 by rpki-client