Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B94ECB7AE51C11EF9D064C34C4F9AE02.roa
File: B94ECB7AE51C11EF9D064C34C4F9AE02.roa (raw, json)
Hash identifier: JFNw028zzyHAvHUXDl+7m//fNXFPqQ/WEokX6fSanFY=
Subject key identifier: 8E:8E:39:30:CC:AF:31:06:40:8B:F3:DE:29:CF:76:FC:49:0C:93:9E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 228D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B94ECB7AE51C11EF9D064C34C4F9AE02.roa
Signing time: Fri 07 Feb 2025 06:28:20 +0000
ROA not before: Fri 07 Feb 2025 06:28:20 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 113.203.243.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 12:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8845 (0x228d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 7 06:28:20 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a5a804-2cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:f5:e4:a1:da:f9:53:90:a3:bc:72:c2:c8:
70:af:8f:98:bf:0a:9e:98:cb:a0:8d:02:18:43:e7:
b9:51:34:96:ad:e8:bc:1e:96:62:1c:5e:86:e0:96:
7f:ff:1d:7c:11:b4:e9:5d:38:05:81:44:09:1c:f0:
4d:55:d3:93:29:59:29:30:7e:34:11:10:20:dc:64:
70:15:84:68:1b:7e:aa:7a:b7:32:60:9f:63:ff:e2:
61:3a:a7:d7:ea:19:73:9b:bf:bf:d3:69:c2:ee:71:
86:ca:e9:9c:37:69:8a:a4:0f:f7:31:07:e6:98:df:
b8:b9:5b:6e:17:1d:59:55:f9:da:1c:63:db:db:0a:
13:71:60:26:70:17:04:75:9f:a0:0c:61:36:6c:92:
6f:7a:7b:f5:42:f4:00:fa:10:65:dc:2e:03:1b:17:
13:80:f9:5a:f3:e4:46:96:34:06:01:a2:a5:a8:9b:
15:0c:0b:41:05:cb:f1:87:35:ee:c6:5c:be:c2:9c:
c4:80:c3:1a:79:96:f2:14:66:1f:47:fa:42:05:37:
83:f3:2b:4f:e8:d0:3c:d5:b0:3d:e2:5c:7a:5c:dd:
0e:57:02:f3:11:85:cb:e1:0c:53:ae:99:52:18:6d:
a7:66:9e:dd:75:bb:75:63:e5:c9:7b:ad:70:ab:86:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:39:30:CC:AF:31:06:40:8B:F3:DE:29:CF:76:FC:49:0C:93:9E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B94ECB7AE51C11EF9D064C34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.243.0/24
175.110.89.0/24
202.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:50:45:75:f0:49:7d:05:5f:cb:c1:ee:3c:8b:c6:e2:01:5c:
ca:bd:36:e3:2c:5e:f7:e1:c4:1b:e5:07:04:90:08:d7:fe:40:
d2:36:9d:1e:da:3d:fa:5b:10:24:14:ac:68:f3:ee:b2:59:7e:
2c:28:e5:16:00:b4:d2:9d:2c:1a:87:bc:78:51:62:9f:34:ea:
96:7f:df:22:41:52:5c:57:9f:b7:71:25:64:9b:df:dc:75:68:
2a:3e:f3:93:47:e9:69:2b:78:67:06:4e:c4:40:ec:77:65:92:
fd:97:a0:87:3b:df:f3:55:da:29:00:ec:c6:a2:a9:63:54:df:
6b:39:fb:15:77:b9:47:9e:a4:e3:06:66:9b:6e:82:75:e0:9d:
7c:55:4c:1f:0d:ff:92:76:54:b6:29:3b:78:05:1b:ba:63:d2:
b6:08:de:99:5d:47:8f:d4:d8:b5:1f:7d:d4:19:a5:8b:5d:54:
81:7c:3b:c6:f2:3e:e4:c9:9a:20:20:7a:a7:02:f9:8c:b1:35:
0b:d8:74:aa:cc:f3:9f:eb:6d:e9:74:25:17:26:e5:33:db:8b:
8d:69:6d:52:34:0e:7e:35:93:7f:e3:49:0f:cc:65:83:34:c6:
00:b9:ed:95:c6:c2:8b:43:eb:c7:01:98:9c:fb:57:ec:6c:c0:
16:da:ca:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:50 2025 by rpki-client