Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/575CC8C6DE2911EFA7F04E18C4F9AE02.roa
File: 575CC8C6DE2911EFA7F04E18C4F9AE02.roa (raw, json)
Hash identifier: 9NDRhw3nueUYhRuoJpJDdIdFpEeoR9YDDhvqNgAkSRQ=
Subject key identifier: E7:8E:AE:3D:E3:C3:8C:8D:46:FC:29:CA:01:37:96:3F:E6:AF:C4:9B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 226D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/575CC8C6DE2911EFA7F04E18C4F9AE02.roa
Signing time: Wed 29 Jan 2025 10:11:01 +0000
ROA not before: Wed 29 Jan 2025 10:11:01 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 113.203.243.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 05:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8813 (0x226d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 29 10:11:01 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6799feb5-4bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:6d:f9:54:83:69:23:53:8c:67:ce:ea:33:
1c:6a:3f:52:71:07:10:da:e5:79:d1:ef:3d:36:06:
68:c4:f6:f3:ab:40:2a:8b:1e:5a:0b:62:75:ab:23:
6f:c7:2a:5f:1c:14:b3:64:47:42:b2:dc:2b:e1:ed:
fa:7a:13:ff:9f:cf:49:46:28:0c:22:8b:36:01:67:
27:98:10:24:e6:91:58:31:90:6b:08:5b:3b:37:03:
28:c8:ed:1d:23:a1:39:65:9b:16:7c:64:31:e3:1a:
09:0c:98:99:8a:94:55:57:f9:a1:ea:c2:87:e7:97:
4d:cb:ec:18:54:eb:7c:23:fa:25:3c:bd:6c:a4:f2:
5e:02:c6:07:80:2c:48:05:da:99:c8:a4:d7:7f:81:
27:ce:22:a4:ec:fa:05:ec:cf:0c:6a:08:56:73:47:
87:6e:45:cb:02:79:70:e0:d9:51:0a:cf:38:fa:54:
ed:96:f7:31:5f:85:c0:90:f2:1b:48:7b:ec:9c:15:
0b:7e:f0:5b:5d:4f:28:2c:48:3f:7b:df:b6:e3:14:
48:58:f7:fe:82:8d:e9:be:9f:42:44:f0:4c:f3:9f:
5b:ad:e6:de:f4:c0:da:32:11:b5:94:d3:63:87:bb:
4e:c6:de:44:c3:52:a0:8c:61:ca:82:4d:7b:29:b5:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:AE:3D:E3:C3:8C:8D:46:FC:29:CA:01:37:96:3F:E6:AF:C4:9B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/575CC8C6DE2911EFA7F04E18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.243.0/24
115.167.119.0/24
115.167.122.0/24
175.110.89.0/24
202.92.18.0/24
223.29.228.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1e:23:91:6f:de:b5:cb:d7:69:c0:78:b5:f3:60:62:02:8d:
63:bf:79:44:78:b8:f6:6e:0e:89:39:c2:b3:f8:e6:05:05:9b:
0e:aa:38:ad:2c:12:3e:70:33:8e:36:69:75:f4:f4:f4:99:89:
d9:4b:54:9d:df:fd:57:2d:45:ea:bf:c9:25:6b:3d:27:0f:ab:
05:45:45:b5:67:17:5c:56:3b:6c:be:f7:93:3e:fa:96:09:15:
a0:5d:6c:02:02:e5:6e:99:cf:54:0a:64:7a:c2:e4:c5:9a:19:
97:61:d4:d4:03:e8:9c:b6:78:2f:04:df:d3:30:e9:8d:01:e1:
5f:e1:e3:80:c7:2b:48:2b:c4:76:92:bc:91:9c:e1:4b:fa:75:
f7:b3:8f:bf:2d:f7:d6:9c:a7:f2:2f:bd:58:5c:67:ce:77:2b:
bd:59:66:0d:c6:95:53:23:c6:9f:14:37:f7:b7:b1:67:08:23:
06:5f:12:af:a8:dd:71:22:bf:92:9c:e9:0b:cb:83:32:02:dd:
14:a8:6d:82:33:45:fa:7b:d8:4e:6e:68:c0:ee:ea:ac:b7:c7:
d6:92:6f:a1:18:53:97:75:7a:83:da:a0:66:25:56:1e:8f:04:
8c:17:2a:f5:60:f5:9b:3a:40:d6:4b:28:3f:65:c8:ca:2e:84:
89:e3:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:10 2025 by rpki-client