Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64F1CB08B87C11EF9207CE2BC4F9AE02.roa
File: 64F1CB08B87C11EF9207CE2BC4F9AE02.roa (raw, json)
Hash identifier: fWYHgIleqv5Ir+sFcJVQrpAv21CFEq9JVXexCqBgPQc=
Subject key identifier: 17:48:3D:89:76:49:D1:4A:ED:2A:7D:E5:BE:AA:80:39:9D:A0:C4:4F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1F66
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64F1CB08B87C11EF9207CE2BC4F9AE02.roa
Signing time: Thu 12 Dec 2024 11:29:48 +0000
ROA not before: Thu 12 Dec 2024 11:29:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 215479
IP address blocks: 113.203.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 09:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8038 (0x1f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 12 11:29:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=675ac92c-8023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:2f:00:3d:86:2e:6e:4f:23:28:81:c0:8c:
3b:4a:02:ca:83:8f:0c:d5:7a:04:00:10:f5:f0:a4:
51:ed:f3:19:c2:9c:40:6c:59:47:5b:41:af:dc:1e:
73:2c:a2:31:f4:13:1d:86:cc:e7:ad:96:7b:cf:10:
ab:fd:d1:2a:d7:a4:9a:70:0b:cf:0d:ea:b2:04:72:
eb:b5:47:a5:53:3c:bf:29:d4:c9:f6:37:84:f0:e3:
71:51:0b:55:85:90:da:51:17:f1:80:0a:27:6d:23:
d6:ad:99:67:10:f1:cf:97:6d:c0:d7:bf:1b:16:86:
79:e2:55:b6:64:43:71:13:dc:80:c7:7b:05:9a:b2:
fd:37:b9:1a:14:a5:ab:54:51:d6:fe:5d:c5:82:92:
61:65:25:7a:07:c8:e0:8c:1f:b6:f5:67:ee:04:41:
4a:16:9e:81:7d:d4:26:77:a6:97:19:e9:4b:b6:21:
ad:05:18:fc:0b:fc:6e:d9:fe:64:a5:7c:06:2f:65:
83:b8:4e:c8:3c:9e:b4:dc:3a:ad:aa:85:c9:5e:12:
49:0b:77:5d:a9:2f:47:a1:54:52:17:97:c8:3d:49:
df:6f:98:69:57:19:75:2a:66:59:66:51:fc:33:c8:
ac:3f:81:9f:e8:cc:18:25:59:95:c3:39:9d:12:47:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:3D:89:76:49:D1:4A:ED:2A:7D:E5:BE:AA:80:39:9D:A0:C4:4F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64F1CB08B87C11EF9207CE2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:83:43:36:2e:1e:01:33:39:6a:2c:c7:de:93:db:5c:fa:30:
b9:88:4c:9c:fd:a6:0a:fe:cc:eb:6d:28:ad:8c:fb:b7:7a:db:
da:43:16:db:09:1a:b1:1a:fe:36:a2:57:e3:9a:be:3e:1e:de:
42:c1:d1:19:d1:97:6d:9a:3e:02:89:6d:ab:89:d2:9f:f5:03:
b3:7f:dd:93:2b:d8:40:53:22:4c:01:8b:58:58:c2:81:da:88:
9f:81:e2:cd:a4:88:2a:3d:5d:fe:7b:3b:68:7b:42:c0:0f:e6:
0a:dc:c5:0b:d3:26:20:d7:d0:44:bd:e7:b8:9d:58:83:14:2a:
f7:e0:db:9e:df:b6:37:ae:e0:59:f8:01:4a:55:90:c7:37:b8:
d1:e3:87:34:7a:e6:58:7a:86:40:3f:eb:a0:a0:d6:be:f1:69:
7f:67:2f:3d:94:17:08:01:f1:54:c2:b0:c3:55:3a:44:87:a3:
f8:3e:ef:ba:75:18:52:35:2a:9a:b0:a2:84:a7:0d:8f:f9:cf:
a2:54:d3:bb:c9:f6:e0:58:5d:b7:cf:48:ca:00:45:17:c0:4b:
65:19:3f:32:4a:d6:44:d3:1b:da:2f:bf:a8:fc:59:05:43:ee:
e0:bd:e6:2b:a4:4a:9b:c4:32:7b:2f:f6:e7:4b:e6:56:89:71:
23:f8:d9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:12 2025 by rpki-client