Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6472C6F46B5711EFA8EAF831C4F9AE02.roa
File: 6472C6F46B5711EFA8EAF831C4F9AE02.roa (raw, json)
Hash identifier: Q+tJLdmE5XP2snDo1CIFmt6rThairMyCcqeW7DVu/dE=
Subject key identifier: 6F:CC:90:57:7E:BC:5E:29:96:0A:08:D6:FF:38:DD:F3:99:3D:9E:65
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1506
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6472C6F46B5711EFA8EAF831C4F9AE02.roa
Signing time: Thu 05 Sep 2024 07:20:56 +0000
ROA not before: Thu 05 Sep 2024 07:20:56 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 113.203.213.0/24 maxlen: 24
115.167.0.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 15:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5382 (0x1506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 5 07:20:56 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d95bd8-a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:1a:4c:61:f6:0b:f5:e3:4b:c3:8d:b9:a0:
15:e2:39:05:7c:d3:cc:ab:33:8e:02:21:0e:d9:ca:
c6:e5:8f:f4:49:b0:37:34:c5:30:d4:8f:55:fc:87:
44:0e:0b:42:03:f4:a1:d8:7e:d5:13:93:1d:d0:22:
db:30:56:0f:94:d9:6e:fe:5c:21:2b:d1:67:54:82:
f4:a0:7e:a9:24:cc:2f:17:13:db:1e:be:69:f9:c3:
6f:7f:77:2a:3e:d5:0c:ad:ea:c1:d0:3e:5e:10:5d:
50:98:5c:96:e7:fd:8c:ea:b0:1c:22:ab:ce:8d:25:
af:cc:96:44:8c:3f:1e:06:12:cd:70:e8:fc:e8:6a:
af:79:03:ca:37:aa:1d:bf:82:ff:53:2a:67:65:23:
b5:7a:b8:31:16:f4:03:c2:03:5c:a3:99:c2:68:01:
9d:bc:10:31:f2:1b:15:1e:96:99:b9:7e:08:57:c3:
0c:bb:fe:92:b1:2b:13:6a:9c:98:52:dd:1f:71:ea:
6d:ea:f6:af:d3:92:1a:be:66:68:27:01:6d:76:3b:
4c:a2:00:86:aa:b3:0c:66:5b:ce:ab:ca:f3:d0:68:
b4:e3:09:5d:ca:41:e8:8b:51:a9:f4:9c:b5:92:33:
a1:d1:94:65:f6:43:fc:13:20:35:75:14:a3:4c:72:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:90:57:7E:BC:5E:29:96:0A:08:D6:FF:38:DD:F3:99:3D:9E:65
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6472C6F46B5711EFA8EAF831C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.213.0/24
115.167.0.0/24
115.167.4.0/24
115.167.108.0/22
115.167.126.0/23
175.110.68.0/22
175.110.80.0/22
Signature Algorithm: sha256WithRSAEncryption
05:cf:8c:42:bb:14:dd:75:99:da:1e:93:ca:10:30:18:ef:af:
98:0c:4f:44:89:ef:83:65:02:74:57:a4:5b:14:20:07:93:4f:
ea:e8:6b:ba:af:07:31:94:80:3e:d9:03:18:fc:94:92:42:24:
40:22:4d:7d:7a:83:c4:f8:1f:37:af:6c:91:ae:ff:c2:7b:fb:
a5:6b:bf:5b:ad:63:a9:9f:82:ac:4d:63:75:41:d2:52:12:7f:
19:89:52:bd:50:e4:2a:6b:3b:12:a6:50:d3:e1:ba:43:b3:62:
3c:cd:e2:30:c3:0e:5a:2d:97:7d:1c:79:62:8b:fa:5b:dd:0a:
b1:12:38:aa:b5:c1:7c:69:63:0b:f0:e4:9a:b6:f2:5d:05:9e:
f2:4e:20:17:2a:e7:34:20:1d:e2:15:b2:e1:92:3f:99:d4:91:
40:70:c6:99:a9:8b:01:72:04:9c:8c:d2:a0:a8:cd:16:68:27:
89:25:5d:84:0d:3c:98:b7:44:16:88:0a:08:b7:ab:db:6d:7c:
22:24:66:86:2f:36:9c:2f:0f:a0:80:7d:58:b8:a7:ba:45:74:
1d:b4:b8:2d:45:35:ce:90:0c:a8:ad:98:92:11:fe:cf:00:3d:
9f:10:00:95:77:35:d9:82:b6:d3:a0:d9:d3:a8:6b:d4:e2:ef:
19:b9:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:47 2025 by rpki-client