Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/973A7650E51811EF8EE53A4BC4F9AE02.roa
File: 973A7650E51811EF8EE53A4BC4F9AE02.roa (raw, json)
Hash identifier: da1E226zCfH8E09jE2OdQLyUN2jjRCpqlK3y5aLW4gk=
Subject key identifier: 14:AC:75:B9:49:98:A7:58:85:C7:C4:39:D8:B6:93:09:88:1F:EF:85
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2342
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/973A7650E51811EF8EE53A4BC4F9AE02.roa
Signing time: Mon 17 Feb 2025 06:58:33 +0000
ROA not before: Mon 17 Feb 2025 06:58:33 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 12:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9026 (0x2342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 17 06:58:33 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67b2de19-28a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:9d:29:81:5b:15:59:58:42:66:c2:51:c1:
ca:42:38:2f:2b:f0:f2:10:dd:22:20:28:fb:38:48:
be:fa:96:d2:00:22:52:f2:32:b9:0a:2d:89:b8:03:
0e:50:8f:2c:20:82:fe:90:5c:3f:7e:7f:c1:3c:07:
91:19:54:82:74:c3:a5:c7:0a:81:21:ad:05:be:3b:
85:2c:2d:b1:e1:51:fd:5e:08:13:d2:4b:a2:08:c3:
c8:23:ab:e7:bd:71:0f:cc:23:d6:1f:cd:aa:67:5f:
f4:93:ae:ae:b8:69:82:91:bf:ef:28:84:2c:eb:16:
bc:75:13:be:af:d9:bf:8c:7e:3b:75:c5:bb:51:ff:
52:79:f5:fb:ac:3c:6b:53:c8:c3:2c:03:b3:9d:a7:
9d:27:93:d4:09:f9:c5:aa:5b:ae:b5:f1:d9:fa:14:
de:5d:ff:f1:81:f1:46:7d:7c:1b:7a:c1:1e:68:3e:
1e:f1:e5:e0:f1:8c:b7:bd:c7:14:8a:e4:02:6e:a4:
37:42:dd:00:7b:a4:7f:92:b4:28:e5:34:a5:70:cf:
16:41:78:54:dd:ac:b7:aa:45:66:2f:48:17:1a:31:
ce:d3:78:8c:7e:0c:3e:c9:e9:13:d8:c3:a5:bb:19:
5b:35:62:c7:3e:78:be:de:16:e7:c8:4b:4b:b9:cb:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AC:75:B9:49:98:A7:58:85:C7:C4:39:D8:B6:93:09:88:1F:EF:85
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/973A7650E51811EF8EE53A4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.228.0-113.203.230.255
113.203.241.0-113.203.242.255
113.203.244.0/24
113.203.248.0/24
113.203.252.0-113.203.254.255
115.167.9.0/24
115.167.29.0-115.167.31.255
115.167.76.0/24
115.167.119.0/24
115.167.122.0-115.167.124.255
223.29.228.0/22
223.29.235.0/24
223.29.237.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
14:7f:cf:02:c8:c3:09:64:92:6f:8b:39:d4:61:d8:be:27:a4:
16:a1:0a:76:b1:41:04:ed:80:54:d0:96:86:f1:d7:99:b6:b7:
64:2f:83:b8:2a:61:a1:8f:70:51:52:f2:68:3e:2c:f9:5e:4a:
7e:53:93:7f:42:e8:7d:a9:38:0a:ed:2a:0e:5a:21:cf:6b:f2:
93:5a:23:b3:99:f6:b9:1b:c7:3d:d3:3f:7d:1d:74:74:88:71:
15:00:99:c4:96:c6:88:91:ce:00:a6:f1:09:f8:99:96:f7:09:
3d:c2:30:57:f9:7a:fb:8d:db:9a:74:83:24:8f:9a:4b:c9:9b:
79:7b:a7:0c:ef:43:f2:50:af:54:93:f2:04:93:cb:24:6d:28:
ba:b2:2e:c3:37:fd:5a:f9:13:97:7c:31:e3:d2:26:70:2f:43:
00:84:6a:63:76:be:ef:3a:5f:41:56:ee:8c:1a:51:b8:fc:2c:
c9:29:30:13:e2:93:51:b6:ae:7b:af:c3:12:24:5e:fc:76:16:
3e:4e:2d:51:4e:a7:e1:a6:63:93:a2:a4:51:7b:3b:28:ae:51:
88:b2:b9:25:cc:bb:ce:2c:2f:55:de:4a:a3:c4:2b:bf:03:d4:
89:c1:66:dd:22:e3:48:8b:58:bc:86:dd:7e:aa:d3:41:ab:f7:
66:4a:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:27 2025 by rpki-client