Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5F8CA20A72D11EFB70AC684C4F9AE02.roa
File: B5F8CA20A72D11EFB70AC684C4F9AE02.roa (raw, json)
Hash identifier: DJWLipuuboMRe+R9AAq5Gmvx3f0ela2FFQzLIuSK+0Y=
Subject key identifier: 39:1D:6F:E2:2B:56:70:6A:0E:15:09:EE:8D:F4:19:AC:61:A4:BD:3A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1D9E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5F8CA20A72D11EFB70AC684C4F9AE02.roa
Signing time: Wed 20 Nov 2024 11:03:47 +0000
ROA not before: Wed 20 Nov 2024 11:03:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 113.203.210.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 06:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7582 (0x1d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 20 11:03:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673dc213-47e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:88:56:eb:59:a9:ab:fa:3e:01:4f:4a:96:bf:
9d:49:34:36:12:13:f9:27:07:3a:70:37:4b:95:eb:
04:ea:b4:ad:e5:0a:49:f8:15:a0:e4:f5:a8:de:ab:
76:91:e6:cf:81:e9:30:61:be:33:6b:55:85:e7:48:
0c:aa:94:55:a3:8f:75:c2:b0:41:79:5e:0c:7a:71:
cb:7a:7c:b9:cd:44:11:36:d6:ed:0e:0f:c6:ad:54:
71:46:5b:0d:e6:af:90:c3:29:26:40:bf:05:08:3d:
93:4b:c1:f0:70:e5:84:be:a7:92:68:ec:0c:ae:e4:
7e:ad:01:fc:d1:46:9d:e2:96:f8:7a:2a:2c:de:3b:
15:4f:a1:93:04:af:0e:8d:8a:eb:3d:92:12:2d:cb:
a3:c0:26:07:a7:1a:73:08:05:37:b3:61:d8:3e:27:
f0:d1:c2:8f:13:02:9d:05:d0:49:97:82:54:47:9d:
6e:bc:ea:81:9c:04:2e:25:25:db:df:6a:e9:28:55:
31:ea:59:ff:55:68:83:bb:b2:d5:8b:30:8a:4e:c8:
3e:d9:dd:5e:d6:ca:13:c8:4a:8e:20:1e:98:91:c8:
66:c6:3a:95:d1:9d:35:72:26:ab:03:12:96:b0:72:
97:c0:93:d9:c7:2b:86:4e:6b:d9:c2:93:cb:f7:bb:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:6F:E2:2B:56:70:6A:0E:15:09:EE:8D:F4:19:AC:61:A4:BD:3A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5F8CA20A72D11EFB70AC684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.210.0/24
113.203.217.0/24
113.203.220.0/24
113.203.231.0/24
113.203.246.0/24
115.167.20.0/22
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.56.0/22
180.178.161.0/24
180.178.188.0/24
223.29.229.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d4:fe:4d:0f:47:dd:d9:de:21:f3:9f:e6:8f:e0:64:50:2d:
fc:d4:1d:cf:ee:93:60:6b:ba:54:f1:66:31:89:90:61:b4:f0:
fb:09:11:e5:d8:4c:4e:42:9e:a2:ee:0f:10:cf:ec:15:9f:cc:
24:2d:00:5b:29:c7:68:1e:08:ae:19:9f:81:24:ec:49:18:d0:
2a:e4:c7:7a:a6:c6:ca:40:a4:69:4a:8e:e4:cf:87:7e:46:c9:
b8:42:69:97:ab:13:00:4b:a6:3c:c2:88:9b:fd:ae:c5:8d:9e:
a4:2a:ce:8a:f9:85:50:46:2d:1b:99:bd:b6:04:99:b3:ef:08:
a2:af:50:4a:50:a4:5f:85:f5:ad:03:18:f6:b5:99:39:67:55:
e3:d3:1c:e7:b3:1c:a3:a7:b7:db:91:43:c4:7c:4f:5b:b3:54:
4e:44:ab:1e:76:15:f9:db:0f:d4:c3:09:d1:31:ad:68:4f:58:
b7:76:ff:0e:1a:4c:fa:cc:0a:21:1b:c6:c6:73:19:3a:00:9a:
e7:36:03:22:ae:88:de:c9:d0:a0:67:b3:68:5e:44:ec:53:fa:
46:dc:e6:52:06:d9:84:7e:9a:6d:59:c5:01:74:35:56:e5:52:
33:ed:d1:30:21:bc:fb:71:ad:a5:94:5f:1b:1e:8c:45:7c:15:
a6:69:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:49 2025 by rpki-client