Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/90F01ECAC6A111EF8987E881C4F9AE02.roa
File: 90F01ECAC6A111EF8987E881C4F9AE02.roa (raw, json)
Hash identifier: +KRP8weziksuoognjKJS2PSBf9puO1kLUFr/AZqaZ9M=
Subject key identifier: A3:60:05:1E:6B:6F:82:01:35:0E:FB:48:DE:AA:BA:95:B4:4A:67:BA
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 20BA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/90F01ECAC6A111EF8987E881C4F9AE02.roa
Signing time: Mon 30 Dec 2024 11:31:10 +0000
ROA not before: Mon 30 Dec 2024 11:31:10 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 113.203.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 31 Dec 2024 07:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8378 (0x20ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 11:31:10 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6772847d-a3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:0a:f2:36:0d:53:5d:54:98:30:5c:08:4f:
91:d1:9e:a5:f5:1f:2e:d6:60:98:72:dd:0f:ab:9f:
f5:b1:4e:e1:2a:fb:67:30:0e:00:a0:9f:5d:73:ee:
04:aa:55:3f:40:97:18:2b:02:39:fd:14:ab:72:dc:
7c:f0:fc:38:f3:8b:0c:9c:5b:15:ed:c6:4a:31:da:
9b:cd:a2:23:c5:d3:82:69:85:b5:15:e6:24:f3:af:
dd:33:30:0b:f0:4d:93:ed:b9:28:1f:07:1c:4f:cd:
52:38:0d:5f:21:ba:ae:ed:f1:54:5c:eb:7c:0c:bb:
2d:dc:f3:9a:15:30:40:32:4c:78:1f:4f:20:1f:33:
1f:c0:9b:8d:39:b6:d1:f2:ae:4e:71:bd:93:65:eb:
f3:16:e3:8d:2c:f3:7e:5c:18:8b:fe:5c:19:c8:aa:
7b:54:3b:40:21:3d:6a:b1:b5:6d:84:8f:06:38:9e:
01:30:e9:14:8a:ff:be:84:b8:cc:e3:a2:5e:43:e8:
84:33:40:db:e6:cc:39:a0:d6:40:f8:3d:45:8d:38:
fa:a5:5a:93:cd:9f:1a:b1:f1:02:3d:9e:7c:bc:d9:
f9:3f:b9:bc:c7:3d:d4:0d:c1:f8:50:fc:37:f3:7a:
b3:f7:10:4f:7b:bb:f0:5a:48:76:d1:7e:99:04:d6:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:05:1E:6B:6F:82:01:35:0E:FB:48:DE:AA:BA:95:B4:4A:67:BA
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/90F01ECAC6A111EF8987E881C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.252.0/22
Signature Algorithm: sha256WithRSAEncryption
19:58:57:3d:47:e8:da:b8:0f:09:6c:08:ac:74:55:54:1a:ea:
a5:73:b2:c3:79:6e:6c:36:58:77:a9:ea:0a:8f:5b:db:9d:9e:
ed:27:38:17:7d:72:71:5f:ff:d3:77:b3:3a:1c:cf:52:58:79:
95:d9:dc:6e:b4:23:55:57:35:a2:53:6e:5c:3f:f6:25:ac:db:
f5:41:20:6b:cb:20:7a:a4:94:2f:6e:dc:fa:65:e8:eb:c7:0d:
27:ed:83:3a:b1:f2:0c:86:09:3e:5e:54:f1:d3:41:7e:41:79:
92:b6:b9:a7:99:ad:88:2a:2d:49:09:52:a2:6a:78:18:78:2e:
60:23:80:14:d2:2b:56:9f:e5:14:6f:b9:70:9b:e5:9d:11:0e:
27:61:07:d8:c3:7a:bc:6b:5c:8b:89:1d:74:8a:84:f8:c2:93:
90:a0:72:f0:c6:68:b3:52:56:c3:81:63:1a:79:77:9b:72:7f:
d2:43:11:90:6e:d5:00:89:a2:c6:73:62:6b:82:d2:c7:ca:4d:
47:83:5b:ea:fa:53:53:e1:9b:83:ff:c2:c7:7e:01:89:a9:ad:
a6:42:99:b5:81:2a:be:6d:78:d0:fe:85:3d:70:fc:9a:14:34:
df:a8:73:56:c5:31:a1:fd:2e:01:e6:1b:1a:c2:d3:11:45:42:
fd:f7:de:ca
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICILowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMjMwMTEzMTEwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzcyODQ3ZC1hM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6TgK8jYNU11UmDBcCE+R0Z6l9R8u1mCYct0Pq5/1sU7hKvtnMA4AoJ9dc+4E
qlU/QJcYKwI5/RSrctx88Pw484sMnFsV7cZKMdqbzaIjxdOCaYW1FeYk86/dMzAL
8E2T7bkoHwccT81SOA1fIbqu7fFUXOt8DLst3POaFTBAMkx4H08gHzMfwJuNObbR
8q5Ocb2TZevzFuONLPN+XBiL/lwZyKp7VDtAIT1qsbVthI8GOJ4BMOkUiv++hLjM
46JeQ+iEM0Db5sw5oNZA+D1FjTj6pVqTzZ8asfECPZ58vNn5P7m8xz3UDcH4UPw3
83qz9xBPe7vwWkh20X6ZBNY9xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKNgBR5r
b4IBNQ77SN6qupW0Sme6MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOTBGMDFFQ0FD
NkExMTFFRjg5ODdFODgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJxy/wwDQYJKoZIhvcNAQELBQADggEBABlYVz1H6Nq4Dwls
CKx0VVQa6qVzssN5bmw2WHep6gqPW9udnu0nOBd9cnFf/9N3szocz1JYeZXZ3G60
I1VXNaJTblw/9iWs2/VBIGvLIHqklC9u3Ppl6OvHDSftgzqx8gyGCT5eVPHTQX5B
eZK2uaeZrYgqLUkJUqJqeBh4LmAjgBTSK1af5RRvuXCb5Z0RDidhB9jDerxrXIuJ
HXSKhPjCk5CgcvDGaLNSVsOBYxp5d5tyf9JDEZBu1QCJosZzYmuC0sfKTUeDW+r6
U1Phm4P/wsd+AYmpraZCmbWBKr5teND+hT1w/JoUNN+oc1bFMaH9LgHmGxrC0xFF
Qv333so=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:51 2025 by rpki-client