Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46049B324F0711EFB32AEB78C4F9AE02.roa
File: 46049B324F0711EFB32AEB78C4F9AE02.roa (raw, json)
Hash identifier: cezW4cpNnodU/knYeRIkj5kjS7JCKUU8MoMGXDbDI2c=
Subject key identifier: 99:79:8B:D4:35:77:0E:A7:DF:ED:56:09:1A:FC:53:F4:FC:41:91:6A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 149B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46049B324F0711EFB32AEB78C4F9AE02.roa
Signing time: Wed 31 Jul 2024 06:36:53 +0000
ROA not before: Wed 31 Jul 2024 06:36:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 08:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5275 (0x149b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 31 06:36:53 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66a9db85-e117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:59:1f:fc:0b:7b:17:0d:8e:e8:ff:41:66:
b8:83:55:0b:de:05:ca:62:1f:36:54:90:03:2a:04:
5c:19:e9:4e:b9:98:f0:42:e9:23:d4:a2:d6:9f:59:
ee:41:12:52:88:1b:db:e0:a7:e4:ec:cc:d9:18:10:
ce:48:a7:f4:8f:00:92:64:e7:0f:1b:bd:a3:9b:35:
71:14:c9:54:96:5b:35:72:03:c0:19:6f:0e:f8:b3:
97:85:03:7f:d5:c6:80:f6:6f:0d:47:ea:f9:3d:39:
51:1a:91:54:03:4e:52:0c:7e:9c:1b:40:47:04:41:
3b:1e:05:be:1a:7f:02:7a:60:4f:75:dc:67:8f:4b:
02:53:98:df:e4:f1:11:e5:91:4e:3f:da:69:21:d2:
01:d7:4d:d8:10:e8:ae:d1:4a:ff:5d:ba:6f:f5:e8:
c4:76:34:29:71:6f:c9:f8:4c:b9:89:13:ac:83:3c:
61:6d:02:03:90:be:7b:7e:5a:92:9e:40:5e:60:9b:
4a:2b:56:6d:80:37:59:58:f2:38:50:98:10:6e:86:
95:de:73:48:e4:25:a2:55:41:5e:f1:e0:b2:fa:31:
c5:dd:ee:2a:2b:a0:a0:5d:e1:ab:22:16:fc:34:f9:
a3:b2:f9:fe:83:13:a3:c4:63:38:7a:4c:0f:a7:9a:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:79:8B:D4:35:77:0E:A7:DF:ED:56:09:1A:FC:53:F4:FC:41:91:6A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46049B324F0711EFB32AEB78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
115.167.50.0/24
115.167.64.0/24
115.167.66.0/24
115.167.76.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bc:a0:cb:e9:b6:37:47:ff:8c:27:44:a6:0e:fa:b0:49:e7:
e5:3e:c7:0d:5b:42:09:7e:ea:e7:65:8f:7b:ab:61:23:7f:68:
c1:7e:8b:07:9d:ef:56:56:6b:84:d4:ea:d4:4f:47:2a:7e:b0:
b1:b9:94:dd:51:92:cc:eb:e8:66:cd:13:41:ed:ec:97:b7:23:
62:e6:b3:05:14:31:53:44:c6:2a:d7:cd:1e:e6:7f:62:51:d0:
4a:5a:d0:56:89:8f:17:67:6d:d4:dc:4f:93:d0:63:93:7f:7a:
14:40:8a:24:be:52:9b:7a:d1:ce:34:ce:79:f3:8e:cc:e9:c4:
ca:1a:1c:75:3a:27:bc:c3:5b:35:8b:48:e4:7c:a0:90:97:9f:
ff:8d:2e:d0:a3:45:04:52:dc:8b:ef:cc:b1:91:45:51:7b:e4:
ed:e9:24:7e:dc:17:9f:70:e7:16:14:6a:7a:b9:2b:16:02:ff:
3e:1e:21:93:98:c1:a6:6f:3a:41:30:0b:97:73:98:96:80:e2:
05:e2:7b:e2:b4:53:70:78:a4:80:bf:da:10:e3:95:ed:97:fe:
37:07:10:8b:4d:72:05:54:8d:8e:4d:9f:32:9c:a0:dc:19:99:
b8:f1:22:d0:92:d7:85:b8:b5:b7:a3:f3:cd:c8:57:7c:29:26:
f2:cf:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:39 2025 by rpki-client