Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A9D3AB4C249D11EF873A536DC4F9AE02.roa
File: A9D3AB4C249D11EF873A536DC4F9AE02.roa (raw, json)
Hash identifier: BFRByNQ9affjny2WWhzovS7ImKvHfD+q8/ILIlgWm/U=
Subject key identifier: 08:B2:7B:32:AF:BD:DE:15:24:93:F8:C2:D6:EB:B4:1A:19:07:4E:C5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 13CA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A9D3AB4C249D11EF873A536DC4F9AE02.roa
Signing time: Mon 10 Jun 2024 07:46:40 +0000
ROA not before: Mon 10 Jun 2024 07:46:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jun 2024 09:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5066 (0x13ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 10 07:46:40 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6666af5f-ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:49:01:32:4a:68:9b:57:f2:05:75:39:44:
25:af:9c:51:6b:33:2d:54:79:6e:ca:0e:fd:d4:75:
e0:1c:04:91:1e:0e:8f:ff:c8:51:0f:dd:e0:cc:e6:
83:4e:85:c3:56:e8:64:98:71:44:00:45:0f:b9:2f:
f5:8e:12:a1:96:38:85:e1:bb:f0:85:13:02:01:82:
2b:a5:26:bb:7e:0e:31:db:ef:bf:ba:9f:8a:f6:cc:
03:3d:3d:61:cb:65:b3:d1:22:30:d6:fe:ca:12:64:
be:50:82:eb:3d:37:b0:31:78:78:86:a0:b4:95:79:
5e:d4:94:51:6c:36:16:cd:1c:be:b9:d6:b7:93:9d:
f7:cb:be:88:3e:83:72:46:47:f5:5f:06:b5:6a:eb:
00:b3:7d:be:4c:ca:d9:e5:01:1a:68:3b:4a:3f:43:
4b:9f:e5:ad:31:65:f5:28:17:7c:33:0f:a0:8a:2c:
ad:97:34:32:b9:c1:b0:89:70:2f:cd:f5:f2:fc:bf:
22:f0:ee:58:b6:40:4c:57:25:50:1d:1d:62:84:8a:
8d:ac:75:db:df:a4:dd:2c:aa:4d:34:f8:52:a1:04:
69:fd:6e:b8:95:ef:3f:d8:ac:94:94:37:72:e9:f7:
74:4b:54:66:9d:88:32:8b:ea:4d:7b:ff:64:6e:66:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:7B:32:AF:BD:DE:15:24:93:F8:C2:D6:EB:B4:1A:19:07:4E:C5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A9D3AB4C249D11EF873A536DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.241.0/24
115.167.50.0/24
115.167.64.0/24
115.167.66.0/23
115.167.76.0/24
115.167.124.0/23
Signature Algorithm: sha256WithRSAEncryption
19:8b:c4:11:c9:0b:88:6d:3b:b5:e5:eb:e7:33:df:c0:0e:86:
e9:28:00:4c:7d:d6:fb:91:7a:c6:75:2c:9b:5b:d8:89:a1:15:
5e:83:59:b1:5f:6c:f7:c9:a9:92:28:24:b4:3f:16:bc:ef:71:
c1:cb:66:42:ea:6f:ab:69:5d:5c:b4:22:eb:db:25:51:38:5e:
2f:75:b5:ec:0a:40:58:8c:c9:51:61:b8:ac:c7:05:e3:8e:b2:
ee:17:e8:02:bb:3d:c6:76:86:1d:a1:8c:b4:d2:de:8d:3d:fd:
74:7f:b6:13:61:25:ae:68:56:1b:6a:36:f1:7f:b3:26:30:cb:
80:1c:3c:61:b6:f4:42:22:7a:87:6d:f5:06:e8:c2:2d:6f:86:
7d:ee:9a:30:f5:a2:18:a2:1b:a3:65:4a:75:c0:e6:27:cf:c1:
7f:60:e9:0a:36:28:c2:6f:26:14:72:31:e3:3a:05:fb:22:72:
1b:e5:f9:3b:c7:37:f2:5f:b4:1d:44:e7:58:73:09:2b:c6:c4:
5e:1b:b8:77:85:f0:0a:fe:f9:a6:98:fe:f2:67:22:f6:f9:8b:
75:7b:12:da:2f:cd:ac:ec:22:c3:72:82:a6:5a:6b:b6:5a:b7:
2b:01:91:e3:ec:21:86:0e:6b:3b:11:a7:f4:d2:59:36:be:c5:
5a:7a:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:11 2025 by rpki-client