Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/65F75510259F11EFB2D0EA55C4F9AE02.roa
File: 65F75510259F11EFB2D0EA55C4F9AE02.roa (raw, json)
Hash identifier: af9HO6h6sA6eMP012cuAdjxWK4f09jYg2x13OJLDf/Q=
Subject key identifier: C1:EA:61:61:26:0B:25:DA:0C:02:3E:A5:11:9C:E9:5E:8E:F9:FB:E4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 130A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/65F75510259F11EFB2D0EA55C4F9AE02.roa
Signing time: Sat 08 Jun 2024 14:00:01 +0000
ROA not before: Sat 08 Jun 2024 14:00:01 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4874 (0x130a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 8 14:00:01 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=666463e1-108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:7d:5a:44:af:77:ab:37:20:17:d6:78:10:
ad:95:7c:10:6e:3a:51:be:3d:25:94:ee:bc:45:48:
0c:5a:48:0d:4f:d7:bb:20:85:43:45:68:6e:fe:d4:
da:f1:4e:6b:c6:d8:07:8b:1b:f2:92:41:41:05:fd:
54:6b:e6:e4:17:84:ce:7c:bb:76:ff:8a:a0:30:46:
ff:b2:a9:d1:f8:73:38:69:b2:23:40:38:93:af:1b:
3b:df:1f:2f:f5:6b:41:6d:44:57:d1:48:61:6c:88:
ad:9b:e4:83:d9:4f:e3:bd:65:ec:71:2c:72:c0:31:
30:71:28:8a:82:c8:2a:7d:33:f2:a1:b4:c7:a9:6a:
35:8f:0a:07:7f:49:55:1d:56:49:f5:92:cc:c3:2c:
bc:9d:c3:44:05:19:86:11:63:9a:56:0f:30:e6:9e:
f7:d0:24:11:e2:27:cd:99:2b:bb:26:39:7c:88:4a:
14:ee:8e:c1:5a:c4:39:53:9e:03:4d:2d:db:79:84:
1b:2a:59:95:9c:11:e0:a4:3c:e7:41:35:f6:a1:26:
3e:20:a3:84:d8:b9:37:28:38:67:f7:af:a6:05:26:
bd:2e:05:d4:a1:6f:f3:af:5c:3a:64:85:28:4e:64:
38:2d:c9:8e:e5:56:aa:c3:86:f7:68:61:c3:52:46:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:61:61:26:0B:25:DA:0C:02:3E:A5:11:9C:E9:5E:8E:F9:FB:E4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/65F75510259F11EFB2D0EA55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.234.0-113.203.240.255
113.203.253.0/24
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.147.0/24
180.178.172.0/24
180.178.174.0/23
223.29.226.0/24
223.29.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:74:c6:cc:f1:ff:b6:34:4e:65:14:b1:29:58:9c:83:a8:9f:
49:5e:d9:35:ea:83:fa:ed:aa:05:77:49:8d:0d:80:84:57:6d:
91:cb:f0:30:dc:c2:65:0a:0f:1f:e5:61:bc:33:51:99:07:d2:
4c:09:e4:74:7c:2c:af:b2:ef:60:9f:14:1a:df:7c:9f:c6:a8:
bf:d6:24:6b:4c:2e:06:01:43:26:ad:3d:ab:a6:8f:31:1e:f6:
65:b2:88:76:f4:44:80:9a:d7:f6:19:18:64:60:72:44:d0:0f:
12:f6:b9:af:10:80:53:66:3d:8a:89:87:52:f6:9d:b8:1e:4f:
18:da:13:55:97:c7:9d:71:e7:00:10:0e:be:e0:bb:16:1d:35:
a3:d8:8a:03:ad:71:3f:81:d2:f8:3d:ee:bd:b8:82:b4:0c:4d:
30:fe:1d:4d:6a:53:2b:da:1c:1d:12:1b:7f:37:bd:74:74:04:
32:9f:db:82:2c:53:b6:00:55:75:30:96:e2:af:0d:a0:05:5d:
89:49:9b:a1:c7:9d:af:a6:84:30:6c:2b:67:cd:d8:8b:f9:62:
48:87:21:23:e6:22:e7:df:0b:2c:03:85:ca:59:44:b4:fd:fe:
3d:c7:11:56:ce:75:f7:15:21:0a:8e:8a:76:0d:67:01:7c:3e:
8f:a6:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:03 2025 by rpki-client