Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64BFE00C96B711EF834BCA17C4F9AE02.roa
File: 64BFE00C96B711EF834BCA17C4F9AE02.roa (raw, json)
Hash identifier: zNJ+wUAeilHtCk+egkDybki/A8s6SMWWJu6JOnXSDHc=
Subject key identifier: F4:B0:08:E6:CF:7C:B7:FA:AE:04:FB:4E:6B:4A:F8:98:BC:86:57:90
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1ABE
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64BFE00C96B711EF834BCA17C4F9AE02.roa
Signing time: Wed 30 Oct 2024 12:06:29 +0000
ROA not before: Wed 30 Oct 2024 12:06:29 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.225.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 10:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6846 (0x1abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 30 12:06:29 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67222144-6f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:5b:8d:2d:a8:b1:61:5e:3b:48:db:62:55:
5b:c4:03:3c:60:7f:3d:ba:2b:a1:bf:01:1e:67:1c:
06:78:0a:c4:8a:91:c3:57:a8:0f:63:45:45:d0:8a:
1e:91:44:e6:ee:95:53:38:dc:7e:77:6e:05:39:d7:
d6:5e:21:8b:05:be:4a:6f:72:75:09:8c:2b:6c:99:
a6:46:32:7e:5f:2e:34:92:ff:d2:0d:d5:13:37:42:
65:49:2a:38:36:3f:a6:10:21:34:12:77:a1:c2:e1:
a9:fb:10:5c:82:a1:0f:50:56:f9:ee:31:06:cf:e3:
5c:cc:84:b7:ec:95:2f:04:dd:48:06:6b:d3:2b:79:
ce:f4:39:af:1a:5f:81:39:80:33:c0:e5:8b:cd:b9:
6c:2c:88:74:70:f1:4f:d8:13:14:b9:80:fa:e7:29:
7e:32:9d:a4:15:56:d1:ee:1f:93:49:cb:0a:d9:43:
45:a4:8d:3b:4c:f9:21:a8:ec:b2:2f:88:df:20:57:
82:da:d2:ad:b6:16:97:4b:61:ec:62:95:9e:31:f6:
2b:45:5f:7a:04:ab:3e:e2:5a:a5:54:7b:7a:7c:8d:
cd:c7:af:98:5f:93:9f:ec:56:84:57:05:25:2f:5a:
e8:f5:0c:9e:2d:28:fe:5e:82:20:21:c4:32:52:96:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B0:08:E6:CF:7C:B7:FA:AE:04:FB:4E:6B:4A:F8:98:BC:86:57:90
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64BFE00C96B711EF834BCA17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.225.0/24
115.167.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2f:de:00:f1:44:a5:88:cc:68:35:5c:6c:00:bc:86:cd:b7:
3c:0d:fe:4f:d5:88:94:05:e3:0c:13:88:48:97:a8:1a:d3:14:
3f:e3:fd:f5:98:3e:4b:e7:9d:cd:b4:ea:9f:3e:fd:e9:3c:99:
98:2a:38:49:3d:b1:7b:37:13:a0:ab:e8:fb:d2:6a:c7:b3:f4:
c5:7d:22:ce:3c:3e:3d:56:4b:68:0b:ec:10:56:3a:43:9f:69:
ff:6b:8a:02:51:d7:05:b0:8b:d4:75:36:33:0b:57:92:34:73:
82:36:9a:22:44:6e:0d:c2:df:24:fa:af:07:8c:d2:2e:e2:0e:
b7:c1:0b:8d:12:3a:1a:da:3a:39:f5:60:0e:fb:02:66:8c:15:
43:20:6f:e4:2f:09:d6:f1:a3:2d:74:e9:49:2e:ab:81:f2:ac:
2e:6a:76:0e:60:e2:26:49:eb:de:42:ca:a0:58:4a:bd:58:0f:
0b:cf:e2:31:06:fc:dc:08:54:80:02:9d:f5:15:fc:5d:9d:88:
a1:01:6d:40:e0:d6:19:b2:cb:c7:d3:7b:c9:45:f9:20:f3:4b:
1d:52:23:80:99:df:b0:f5:c3:46:21:7d:eb:1b:0c:b8:86:d7:
55:cd:34:79:8d:a4:63:8f:69:12:46:ab:95:4a:9a:22:c1:cd:
f8:77:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:51 2025 by rpki-client