Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5C031DB87F0F11EFA08ED140C4F9AE02.roa
File: 5C031DB87F0F11EFA08ED140C4F9AE02.roa (raw, json)
Hash identifier: 7fpTD9F7MS9k6SnB/1bmVyKDyA2og10PzuIkod5aBeI=
Subject key identifier: 73:9D:3F:05:9E:10:17:39:37:98:1E:74:17:E2:23:14:C1:14:E9:B1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 16BB
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5C031DB87F0F11EFA08ED140C4F9AE02.roa
Signing time: Mon 30 Sep 2024 09:38:49 +0000
ROA not before: Mon 30 Sep 2024 09:38:49 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 04:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5819 (0x16bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 30 09:38:49 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66fa71a9-cc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:50:3a:2e:09:47:02:2a:36:02:9d:07:ac:
79:c2:18:47:30:f1:15:44:47:26:77:5d:d3:b2:52:
c0:02:98:67:45:2e:17:18:aa:36:63:2a:e7:46:62:
38:b1:0e:cf:ec:55:d9:20:36:00:70:a3:5e:24:5d:
47:52:cb:52:d8:f7:4e:19:6c:76:fa:a2:a5:7a:df:
3f:07:0a:b3:d4:1d:54:9e:2b:07:be:28:72:45:df:
1d:21:29:cd:b9:10:d9:fd:46:4f:f9:ad:f5:50:78:
c1:98:65:71:b0:81:d7:19:d0:02:f5:a5:7f:16:2c:
4d:d3:9e:32:80:dc:8f:03:8f:36:74:b9:65:12:6f:
76:38:1a:cb:9a:65:02:1d:5e:c5:41:39:06:f7:59:
ca:1a:2c:ba:60:f6:99:77:f5:78:b3:ef:ce:ba:d5:
ec:f1:35:df:6e:7c:3d:d2:49:eb:0b:2c:49:3a:bd:
f6:a3:23:10:f7:59:d6:df:38:23:88:0f:55:6f:96:
b0:20:3d:4c:22:49:ae:06:7c:09:1d:b5:b4:e2:ca:
8b:72:35:d2:ed:c8:0a:80:01:b6:60:2d:9c:17:10:
30:81:20:b5:8d:7a:bf:d9:e9:52:64:a1:e2:a1:32:
1c:e3:35:28:9c:a6:31:75:84:6d:63:87:d1:f6:46:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9D:3F:05:9E:10:17:39:37:98:1E:74:17:E2:23:14:C1:14:E9:B1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5C031DB87F0F11EFA08ED140C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.116.0-115.167.123.255
175.110.90.0/23
175.110.107.0/24
175.110.109.0-175.110.111.255
202.92.18.0/24
202.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
58:32:5f:29:55:73:35:ce:ac:cc:44:40:86:15:5b:65:71:05:
e0:96:68:b9:7f:a9:fa:9f:dd:b3:aa:4b:16:55:4d:6b:37:44:
9e:36:a3:8b:32:2d:24:5d:bd:8a:b1:6e:ed:db:bd:85:b1:39:
9b:31:50:81:7b:99:e3:47:ff:b7:95:ab:a4:2b:54:1d:d5:ec:
89:5d:02:cb:a6:9d:fd:2c:87:69:98:f5:e3:5f:a6:55:15:44:
46:c5:a5:e6:6b:37:a7:4f:8b:ab:5d:c5:cf:9e:b3:d2:1e:cd:
f0:af:df:15:ec:32:1a:8e:2a:8a:3f:66:fe:06:4a:c1:20:a0:
29:9f:1f:03:42:ab:49:c0:9b:0a:00:ef:b0:7f:d8:c0:6a:0c:
70:f4:e6:fb:33:37:64:44:65:06:aa:ea:d9:64:b2:09:7f:45:
cf:db:07:27:98:ff:e8:9c:63:eb:24:09:26:e1:52:58:8c:20:
bc:e6:dc:ba:7b:2d:78:c7:f1:25:91:20:0e:bf:ba:c9:af:0d:
85:18:a2:03:cf:2c:b7:1d:ef:47:b2:9c:19:12:80:79:59:c1:
3e:2c:48:01:36:2b:b9:b9:da:a8:80:58:47:0a:39:2f:4c:9b:
ef:73:cd:3f:93:a2:bc:4c:e9:0f:a2:8e:e5:33:c1:5f:7e:90:
58:cb:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:41 2025 by rpki-client