Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A8175F24CDAD11EFAA565314C4F9AE02.roa
File: A8175F24CDAD11EFAA565314C4F9AE02.roa (raw, json)
Hash identifier: 53Rk1tuxXVLy8VGPJfc8Ry+Gf7JdBmc7rQcUaK9ArL8=
Subject key identifier: 7E:89:CD:19:69:78:9D:3D:BB:00:1C:42:5E:FA:7D:03:E5:16:9B:C8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2189
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A8175F24CDAD11EFAA565314C4F9AE02.roa
Signing time: Thu 09 Jan 2025 12:00:22 +0000
ROA not before: Thu 09 Jan 2025 12:00:22 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 329007
IP address blocks: 113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
175.110.80.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 05:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8585 (0x2189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 9 12:00:22 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677fba56-0066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:03:85:7f:eb:70:07:a6:6e:d4:0a:b1:ee:
7e:b3:09:29:d2:72:3f:2d:e0:5a:2a:a8:36:84:f5:
ea:3c:67:38:93:af:5a:cd:ec:30:7e:c8:d1:f7:a9:
23:41:31:8a:ed:3b:2a:d4:60:dc:39:61:a5:72:fc:
53:40:fc:37:d3:6b:f7:1c:76:e7:59:58:db:4e:9f:
31:b0:a5:17:f2:1a:9c:31:92:ac:f9:58:84:0b:a5:
2e:a0:12:66:d7:98:01:c3:7a:b0:90:5a:27:9d:25:
a5:69:e0:24:de:01:c1:0f:ea:c2:d0:3a:ce:81:41:
51:4e:ab:f9:9d:1e:5e:90:dd:e5:c6:7e:de:ef:52:
4f:fe:f3:4a:41:63:c4:7c:3a:e1:32:99:40:0f:ce:
25:12:72:b6:ad:71:ad:4d:6b:11:0c:1d:d3:bc:99:
e2:2c:84:1e:d0:87:92:a2:e3:27:28:a8:b6:bf:af:
cb:48:e7:a7:f8:40:76:ea:e8:50:d6:7f:52:29:7b:
db:bb:e9:78:fb:37:8c:65:c5:f3:0b:27:78:f3:c7:
10:d0:07:2c:31:b6:e8:0c:27:e5:4b:6e:f2:31:d1:
48:b1:08:a1:f0:08:f8:30:a2:44:19:5a:83:cc:b6:
dd:66:f3:e5:41:00:86:84:3d:c9:6d:3a:56:d4:6e:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:CD:19:69:78:9D:3D:BB:00:1C:42:5E:FA:7D:03:E5:16:9B:C8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A8175F24CDAD11EFAA565314C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.231.0/24
113.203.233.0/24
113.203.245.0/24
115.167.117.0/24
175.110.80.0/22
175.110.89.0-175.110.90.255
223.29.225.0-223.29.226.255
223.29.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:92:95:b9:64:e7:5c:25:67:b7:47:b2:c1:86:45:45:86:28:
35:3f:65:53:c7:ff:0b:36:17:da:e7:e6:a8:df:9e:ed:0f:e4:
02:4d:3a:0b:b4:c4:87:eb:13:36:35:41:be:75:a0:e4:7f:ae:
76:6a:85:9b:8d:a3:ee:80:6d:39:8a:c0:c1:f9:fa:86:b6:0c:
6d:ca:55:87:05:21:22:16:8c:5b:55:37:bc:20:8c:5f:91:17:
b3:97:7f:05:f7:d4:6a:e2:d3:72:73:35:1d:89:6c:10:5b:7d:
3d:91:ce:91:52:7d:46:41:04:ae:25:54:39:81:7b:b0:07:2e:
92:6a:25:5d:c6:1f:8b:f6:22:70:c9:e5:6a:d8:c3:f1:33:cf:
a0:f5:8c:7f:a1:76:54:56:cd:a1:ef:57:6e:ca:9d:8d:00:38:
cb:91:4c:ab:2b:5b:95:7f:01:8c:7f:fd:4a:1d:a2:90:3d:cb:
61:89:a8:e3:76:57:55:ee:00:b2:9e:f4:ab:71:c5:9f:23:36:
35:1e:68:23:d1:ca:18:b4:5a:34:d2:bf:e2:1f:bb:2c:d6:3a:
ab:03:cc:f9:8c:52:15:7c:c6:9e:43:75:92:c0:75:19:4b:6d:
7a:f5:32:51:bd:0d:06:62:bc:cc:82:33:10:d4:c3:c1:07:e9:
80:0b:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:43 2025 by rpki-client