Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/913E6E7CC44411EF81953A76C4F9AE02.roa
File: 913E6E7CC44411EF81953A76C4F9AE02.roa (raw, json)
Hash identifier: mSUsZvaAN65XWsvZCxYZLHz2GruksIVC8iZvUGnY7Pk=
Subject key identifier: 45:93:FA:12:E2:C6:07:31:19:AC:28:35:75:CE:19:D2:92:FC:F1:C2
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 22D8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/913E6E7CC44411EF81953A76C4F9AE02.roa
Signing time: Tue 11 Feb 2025 09:29:07 +0000
ROA not before: Tue 11 Feb 2025 09:29:07 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 08:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8920 (0x22d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 11 09:29:07 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67ab1862-ce43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:ff:7f:3e:48:70:2b:3f:8b:01:28:8e:10:
db:34:15:ee:ad:25:7e:05:80:81:1c:24:70:e3:48:
56:17:7c:69:8f:bd:33:86:7b:b8:80:36:bc:5f:9f:
55:95:fd:82:a3:e6:44:cd:c7:be:2f:d6:79:bd:33:
28:9c:d7:35:98:33:72:77:2a:c0:61:86:d7:d8:29:
ec:a6:a3:14:ac:32:e4:2e:6c:52:34:37:41:a0:d7:
51:f5:e6:4d:41:ec:67:f7:83:93:37:78:f1:2f:76:
ea:ad:2d:2f:86:4b:3c:1b:ec:e9:58:6f:33:f0:78:
d2:a1:b7:ee:33:4d:e5:25:f9:0d:dd:e7:15:64:d2:
de:98:8a:d2:65:e7:99:2d:f7:d3:82:07:cf:03:19:
f1:88:05:7a:04:76:79:ff:38:64:70:ae:9c:73:27:
47:e5:d6:aa:fc:ee:70:72:0d:7b:90:f5:ea:51:fc:
7f:9e:19:e8:83:eb:a6:01:d7:2a:e3:52:a6:63:ba:
9e:8d:f1:51:58:29:ab:d3:1f:65:f1:4c:16:36:b0:
00:39:b0:4c:6a:1a:ff:13:ad:0c:0b:26:d7:47:b6:
0f:7d:b9:85:40:54:70:26:b9:b1:d1:7a:c7:2b:dd:
ed:96:1a:2d:d0:3e:09:7b:de:bc:25:4a:4d:45:6c:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:FA:12:E2:C6:07:31:19:AC:28:35:75:CE:19:D2:92:FC:F1:C2
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/913E6E7CC44411EF81953A76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.248.0/24
113.203.252.0/24
115.167.50.0/24
115.167.66.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f4:a1:3a:70:d9:57:29:11:c3:79:7b:da:4c:4a:a0:33:64:
c7:70:b6:9e:3c:5c:37:20:f8:bf:7e:c6:ec:44:ad:4e:74:d7:
f7:d9:78:a9:76:02:a0:9b:1e:44:70:f4:e2:d6:ee:78:0a:5e:
16:c3:1a:f0:5e:b4:b0:53:6a:77:16:99:2a:3b:6c:92:66:e3:
7d:70:df:04:64:f6:80:94:43:21:c9:48:1d:1a:78:6c:23:2a:
a2:85:cc:e1:a9:00:4c:8f:42:cb:35:c5:3a:22:c2:e2:40:28:
8d:5c:4d:70:9d:fd:25:b6:1c:22:1f:03:02:85:91:67:f2:9c:
b7:3b:00:66:93:4d:d8:f9:9b:08:e8:0d:54:8d:6e:df:0b:5d:
b5:3a:5e:d4:8a:c7:c7:18:b7:ca:41:0c:90:a8:d3:27:80:95:
e6:33:30:c6:e2:32:29:1b:92:ba:2e:3f:39:96:b5:73:2f:32:
7d:64:73:df:76:98:aa:9d:26:17:32:2a:7b:99:7c:1e:61:61:
67:8b:45:93:4d:d2:5a:e2:ef:35:a2:71:90:d5:ee:b5:cd:9e:
8a:87:6c:f3:f2:3c:3a:3c:83:99:7d:13:33:69:e7:bb:ff:88:
05:09:6e:3a:ad:ef:58:b9:b8:9b:dd:de:40:d8:3a:4d:4a:a5:
90:4d:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:51 2025 by rpki-client