Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/638A0AEA719211EF8B3DE422C4F9AE02.roa
File: 638A0AEA719211EF8B3DE422C4F9AE02.roa (raw, json)
Hash identifier: JFIQ5ZIzKMSevQIR8iycnK8WLyALY89LjCWxHFXjb3o=
Subject key identifier: 8B:95:A7:B8:1E:DA:C0:52:2A:25:A6:7F:4C:F4:77:13:DE:BC:A1:F2
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15F2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/638A0AEA719211EF8B3DE422C4F9AE02.roa
Signing time: Fri 13 Sep 2024 05:39:29 +0000
ROA not before: Fri 13 Sep 2024 05:39:29 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 10:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5618 (0x15f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 13 05:39:29 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e3d011-db2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:40:2f:2e:f9:62:b8:6e:10:40:9c:70:d6:
72:ef:ce:a6:f0:81:7e:7f:d5:e9:29:4a:f8:a6:e1:
28:7c:cc:24:60:78:6a:fe:44:20:1b:10:1c:e6:07:
3e:39:38:f9:92:71:c3:21:79:4a:35:5e:fb:85:73:
54:0e:e0:8e:52:4e:d2:0c:ea:a9:d2:e8:0e:f9:1a:
4f:21:cc:84:08:80:50:ce:55:90:7b:ca:45:d6:b5:
ca:d7:f6:30:11:de:fe:5b:13:3b:7f:5d:0e:b8:bf:
3f:17:32:19:54:cb:34:c7:d4:b7:bd:d8:73:31:b7:
90:be:ef:94:29:e9:00:cd:aa:7b:77:59:57:8f:ff:
be:b0:db:71:c0:3b:8f:98:a4:a3:1f:9d:af:18:86:
5a:d1:13:17:52:15:20:21:15:bb:7e:96:c0:99:14:
ad:f8:0d:da:7f:b4:db:36:64:c2:90:58:9b:a9:22:
d7:a3:8e:2a:6d:bf:9a:97:c5:72:a0:4f:18:d3:ce:
9f:ae:34:55:d5:9d:2e:b3:75:88:ec:f7:75:84:41:
26:45:47:c2:17:6c:f4:b9:51:dc:31:de:7a:d3:a5:
8f:f0:19:cd:a8:8d:90:60:01:55:88:18:ef:5e:ac:
d2:5c:b8:a8:d7:8e:f7:0c:03:71:8f:e6:1c:68:f3:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:A7:B8:1E:DA:C0:52:2A:25:A6:7F:4C:F4:77:13:DE:BC:A1:F2
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/638A0AEA719211EF8B3DE422C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.215.0/24
113.203.219.0/24
113.203.222.0/24
113.203.227.0/24
113.203.243.0/24
202.92.18.0/24
202.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:bd:0e:81:0a:46:c3:9c:fe:ea:28:21:6e:47:fc:ea:55:44:
8a:9c:13:84:23:2b:34:d5:fc:39:a0:26:14:6d:11:07:7d:ba:
af:a8:2a:7f:a7:66:7b:e0:c0:07:f0:68:e7:05:ff:95:3c:fd:
05:29:8a:12:ca:6f:78:54:ce:bb:4a:d4:05:66:71:65:96:3d:
32:5b:e3:54:37:d7:17:57:2e:df:53:58:27:6c:b1:4e:de:d0:
0e:78:ca:b9:6e:97:27:69:3c:b5:c3:85:ee:f1:38:76:71:01:
33:cd:31:23:a4:77:fd:b6:da:79:2b:a6:c4:5f:e4:13:6d:77:
f2:c7:10:98:ea:15:79:c8:16:2e:f7:b0:a7:35:50:fd:b9:9e:
b1:46:01:16:c6:3c:ce:82:73:18:65:c9:31:8d:f5:9f:8f:15:
8d:e8:c4:70:82:61:fd:04:a5:37:db:53:32:e6:ee:4f:df:22:
38:f1:96:ab:62:14:cf:ea:07:d9:87:b7:fa:23:40:6f:f4:c1:
c8:07:8d:9a:69:8e:84:8d:ff:9d:71:7d:45:6f:32:1b:62:88:
eb:bf:6e:a4:23:2d:52:f7:9c:a0:0e:e0:c2:f5:f3:9f:d4:85:
36:2e:25:c4:a2:2f:e2:33:2b:bc:41:0e:b0:f5:1f:33:0d:1e:
ae:0b:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:32:36 2025 by rpki-client