Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AA3E1028929C11EFAA3DE185C4F9AE02.roa
File: AA3E1028929C11EFAA3DE185C4F9AE02.roa (raw, json)
Hash identifier: cRXrqzntkLlOO74g/WANTWtudeGkiahNAQB7NzPnb4Q=
Subject key identifier: FC:E2:20:40:0A:4D:F9:7F:AE:C7:C1:9D:2A:16:84:55:FB:8F:E0:22
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1915
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AA3E1028929C11EFAA3DE185C4F9AE02.roa
Signing time: Fri 25 Oct 2024 06:45:04 +0000
ROA not before: Fri 25 Oct 2024 06:45:04 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 12:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6421 (0x1915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 25 06:45:04 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=671b3e70-b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:02:6f:f8:34:4e:bd:b1:6e:1c:d2:0f:40:9c:
15:3b:2f:ea:d1:64:da:32:21:4e:20:7e:86:e8:ee:
39:4e:0a:c9:fd:46:1e:24:19:a4:0c:da:0b:4b:a2:
77:b3:ed:83:ad:ac:b8:03:2d:a4:45:a7:d7:3a:bf:
57:c6:70:6e:76:ae:ae:d0:1e:b6:ec:7a:0f:a2:0a:
71:ce:0d:43:e9:02:37:65:59:b9:d6:5f:4c:45:86:
bf:64:24:35:96:9c:ab:f9:65:2d:8e:c9:58:56:8d:
e5:94:62:55:0e:26:23:92:22:a6:30:6c:3b:3f:ba:
73:1d:83:8c:f4:a9:0b:4d:6f:32:3b:8e:98:b1:d1:
71:01:b4:ff:26:86:47:d2:e2:d9:af:b6:55:d4:58:
8d:7b:eb:63:00:28:45:6b:4f:00:f3:85:e8:bc:f8:
e2:03:e5:dc:f7:bf:d7:aa:89:6f:39:86:4f:10:c6:
56:64:03:35:83:1d:04:03:22:15:d6:29:49:2b:68:
d9:09:ee:4b:f1:a6:1a:6b:4b:26:15:07:1a:0d:06:
88:0d:9b:8c:ff:0f:ec:23:26:83:96:2e:66:a3:ea:
56:d7:3c:fb:10:bb:7c:d5:34:96:5a:ad:df:c8:e1:
54:bb:0d:d4:8e:9a:00:37:f3:4b:fd:a1:6b:ed:9d:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:20:40:0A:4D:F9:7F:AE:C7:C1:9D:2A:16:84:55:FB:8F:E0:22
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AA3E1028929C11EFAA3DE185C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.222.0/24
113.203.224.0/23
115.167.29.0-115.167.31.255
115.167.77.0/24
180.178.149.0-180.178.150.255
180.178.163.0/24
180.178.168.0/24
180.178.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ac:d0:37:13:93:b6:90:92:fe:ac:ef:50:c3:4e:eb:fa:c7:
e0:d5:78:fa:80:c8:ba:92:ab:aa:56:3f:84:0b:f4:75:16:31:
16:1f:60:42:08:9b:f7:78:29:ef:5e:5c:91:51:8c:5e:01:01:
75:68:92:82:cc:61:0f:cc:b2:6b:db:24:2e:1e:c0:9f:fc:27:
80:f6:94:3d:46:67:70:eb:f8:8a:09:8d:ba:91:51:6f:02:98:
e3:15:f1:bb:79:4b:72:48:25:d6:30:05:59:84:4d:42:33:40:
4b:6b:54:eb:b5:04:03:01:a8:a4:6b:cc:37:1e:ec:49:21:23:
6b:ef:c4:c8:be:7f:8f:38:13:61:c2:10:6d:cf:d4:55:9d:f7:
15:92:15:e1:04:d9:53:e5:24:de:d4:d3:c2:44:b3:e8:54:6c:
2c:e4:0e:68:4e:fe:aa:06:4a:b0:e3:d0:92:ce:f4:53:a8:c1:
63:f5:37:84:ca:68:ba:e2:6c:b7:41:52:ef:63:65:fe:2c:d9:
54:63:31:8d:32:ef:0e:31:43:63:ba:fb:2f:bb:eb:e6:d5:a4:
86:87:27:36:d0:60:08:c0:2a:13:85:71:2d:83:54:1f:ba:02:
7d:72:85:6e:2c:8c:94:a4:2e:53:b4:88:5f:e1:ea:7c:83:84:
f1:39:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:23 2025 by rpki-client