Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/761D04DCB2EC11EF9AE5225FC4F9AE02.roa
File: 761D04DCB2EC11EF9AE5225FC4F9AE02.roa (raw, json)
Hash identifier: 7qALc/yuX+OTVldJBSCnrqsKa7//2G3Vcw9qQREeGWs=
Subject key identifier: 63:D3:98:9A:50:87:1D:1D:22:DB:D2:DC:A3:D1:BD:EA:AE:0F:AD:55
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1E8E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/761D04DCB2EC11EF9AE5225FC4F9AE02.roa
Signing time: Thu 05 Dec 2024 09:36:53 +0000
ROA not before: Thu 05 Dec 2024 09:36:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213990
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.60.0/23 maxlen: 23
115.167.62.0/23 maxlen: 23
175.110.64.0/22 maxlen: 22
175.110.105.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 11:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7822 (0x1e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 5 09:36:53 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67517435-b140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:d3:8b:1f:2d:d0:e4:e9:78:c9:4c:9e:9e:
28:43:54:43:be:6d:a8:a6:88:1c:3d:3d:d0:b8:44:
36:29:16:0a:9a:b9:59:44:5f:03:89:74:b3:b0:dc:
da:b4:1d:fc:a9:90:3d:c0:71:e0:db:9e:43:5c:eb:
b8:c8:03:c8:5c:21:66:d0:c9:ea:8d:3b:01:c7:7e:
54:ce:01:2a:3a:33:13:69:75:f4:d1:63:0d:c3:53:
cb:1b:8e:9d:6c:e2:8e:a1:cb:33:ac:30:ac:c8:59:
d3:ac:ac:16:f2:b1:7d:de:ec:6d:a8:67:82:a0:0c:
63:a2:04:c6:da:62:fe:a6:a7:f2:30:4d:35:4a:98:
15:87:da:96:dd:7b:9e:0f:81:30:e9:37:ee:63:0e:
2b:8f:52:df:02:b6:9e:66:1c:54:65:25:ef:af:d3:
86:57:53:19:04:b7:ae:c4:6f:f7:9e:2b:27:54:31:
0f:a8:f6:b6:58:fd:32:b3:48:5b:19:5f:1e:1e:57:
2c:4d:9a:06:b8:98:4c:4a:29:8a:b4:f7:c4:66:43:
c2:3b:d4:1d:b1:bf:50:de:93:14:a9:98:7b:7d:01:
85:f4:e4:72:a0:03:13:c1:77:07:0e:c1:d5:4f:a3:
c4:e2:bc:9a:11:fe:ab:87:2b:7c:b2:8c:5c:f7:da:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D3:98:9A:50:87:1D:1D:22:DB:D2:DC:A3:D1:BD:EA:AE:0F:AD:55
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/761D04DCB2EC11EF9AE5225FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/23
113.203.212.0/24
113.203.233.0/24
113.203.245.0/24
115.167.6.0/24
115.167.48.0/24
115.167.60.0/22
175.110.64.0/22
175.110.105.0/24
175.110.111.0/24
180.178.164.0/24
180.178.190.0/24
223.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
43:68:1a:db:55:d0:df:3d:0b:2b:c8:01:a7:a0:98:bb:f8:7c:
a6:ef:db:68:90:e8:0e:92:b0:61:f7:02:bb:0c:20:9d:cc:84:
a5:19:dd:87:03:04:2e:cc:10:8e:61:c8:98:4e:32:30:34:a8:
17:19:49:a6:26:73:b0:d7:49:29:64:a2:23:2c:5a:0c:d2:6e:
e9:14:d0:f5:cd:8c:35:ff:41:fb:51:02:a4:04:58:5d:cb:bf:
21:c1:d3:87:4c:5e:e0:8f:bc:5d:dd:94:0b:e0:a5:a2:e3:9e:
25:fe:37:1b:11:f2:a2:8f:3d:28:3e:fd:1d:01:84:26:42:7b:
95:69:e0:d8:9b:e3:c5:9e:64:14:6b:e0:b9:c1:b4:7f:73:16:
cc:af:81:9d:93:a3:f2:bc:c8:f8:be:45:b1:30:cb:8a:56:9f:
fb:47:5e:f8:44:72:5d:56:6a:5d:32:c6:99:3f:9e:52:30:58:
7f:1c:e2:f7:8f:5c:71:eb:c6:49:40:e4:d6:0c:c0:f9:da:17:
e3:f9:fc:ac:15:35:8a:62:68:4e:ed:f3:0d:1e:13:a5:6f:94:
31:a6:ea:c6:49:a1:27:d3:6f:fa:5e:6c:0a:fd:53:49:45:b0:
8b:e2:19:94:8f:55:58:da:0a:c6:4f:a7:0e:2e:be:44:9f:67:
a6:57:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:01 2025 by rpki-client