Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7CEF1D147F1A11EFA9D55C44C4F9AE02.roa
File: 7CEF1D147F1A11EFA9D55C44C4F9AE02.roa (raw, json)
Hash identifier: 1nEhdJlGGOpbyxyBI9c/UDOOoLv4qQLiaphO4+3dLLY=
Subject key identifier: F2:2D:B2:CC:D1:DF:ED:BB:07:62:1F:68:13:2A:E1:81:D3:23:A8:82
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1851
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7CEF1D147F1A11EFA9D55C44C4F9AE02.roa
Signing time: Tue 22 Oct 2024 04:45:44 +0000
ROA not before: Tue 22 Oct 2024 04:45:44 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
115.167.12.0/22 maxlen: 22
115.167.16.0/22 maxlen: 22
115.167.20.0/22 maxlen: 22
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 22
115.167.60.0/22 maxlen: 22
115.167.102.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6225 (0x1851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 22 04:45:44 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67172df8-1746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:44:d4:43:8c:71:29:8f:63:e1:68:78:3d:
66:07:fd:15:84:79:1e:57:b9:70:b1:e3:2c:86:04:
82:c3:34:b6:40:c4:75:e9:f5:e4:0a:13:43:f9:8e:
95:cd:dc:c7:e8:1a:52:c0:df:d6:45:53:1e:3d:a0:
19:cf:70:3a:81:8f:99:c9:e5:5c:e8:35:cb:30:97:
0c:e1:57:38:6c:9b:f1:cb:57:c2:0a:b8:49:ba:f7:
06:7e:22:6c:b1:c0:82:b3:34:42:8a:cf:01:3d:40:
4c:f7:61:b6:04:e4:ba:17:47:e6:9b:ab:2e:99:52:
32:6c:52:92:a5:88:70:84:b5:83:4f:44:74:55:63:
fe:97:76:74:92:0c:ec:97:1e:27:97:b3:8d:84:7a:
2d:67:85:83:9f:5c:0b:2d:28:62:71:c0:5b:98:c5:
00:b5:2f:41:a9:cd:82:83:14:64:34:ba:72:85:dd:
b2:c6:9f:18:1a:10:42:40:7c:fe:fd:fb:43:3d:d8:
9b:05:42:9f:fc:53:24:3c:37:7c:a9:8a:7a:0c:32:
f6:5b:3a:9e:cc:76:34:da:a2:0d:b2:08:1e:ef:f6:
14:c7:b6:2b:d9:a5:a5:75:fd:a2:5a:ac:f9:53:b8:
24:a6:fb:1d:e2:52:8e:1c:3d:a6:11:58:e2:16:2d:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:B2:CC:D1:DF:ED:BB:07:62:1F:68:13:2A:E1:81:D3:23:A8:82
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7CEF1D147F1A11EFA9D55C44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.215.0/24
113.203.219.0/24
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/21
115.167.102.0/24
175.110.89.0/24
175.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d7:6f:04:18:ea:73:c0:44:81:1a:85:e4:83:c7:fa:bc:cf:
f3:6a:f1:19:f0:fb:69:3f:8d:c4:1e:4e:dc:5a:05:8a:99:77:
18:5e:e2:a6:dd:25:21:d5:d2:f7:e9:28:15:fc:32:68:ec:e6:
78:da:65:9b:5a:59:7c:69:f9:c4:e7:77:2c:76:80:6c:71:a5:
d2:80:20:83:b5:dc:f8:b9:c9:4a:34:f4:09:8a:17:40:61:ab:
0b:16:76:10:9c:82:f9:4b:60:17:90:8f:43:f6:ed:bd:81:08:
f2:d8:ba:cc:6a:2c:71:84:f4:75:8a:6d:9a:94:30:76:69:15:
21:b5:75:e3:9d:33:18:b7:15:f7:17:43:d7:08:02:e1:b3:7d:
72:70:20:29:c2:0d:b8:97:65:4a:11:a7:e4:3e:87:57:95:75:
a1:70:32:24:7e:71:ee:f7:26:1e:fe:57:ce:d9:ab:9f:ae:1b:
d1:e1:84:72:e2:e7:95:e1:76:3b:18:90:5f:b9:5e:65:6b:ae:
92:24:4e:4f:8b:98:40:1d:c7:34:a2:c1:9a:1a:e1:e0:5a:7f:
33:34:02:80:84:e7:6e:5a:2e:95:71:9e:8d:d1:21:ad:5a:a9:
6a:fb:73:d5:f4:6c:68:ce:b2:0f:28:31:88:9a:a2:a3:07:2a:
27:21:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:09 2025 by rpki-client