Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C9620D7886EF11EFBBDDC087C4F9AE02.roa
File: C9620D7886EF11EFBBDDC087C4F9AE02.roa (raw, json)
Hash identifier: BRsCZK+uLfOwRHTpAZLQ6HnTnvjInDFSfa/Pbanl8KU=
Subject key identifier: 09:E4:27:CE:9D:FC:B5:26:91:C0:CC:C5:E6:F5:FE:82:BF:6F:5A:E6
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 175A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C9620D7886EF11EFBBDDC087C4F9AE02.roa
Signing time: Thu 10 Oct 2024 10:12:07 +0000
ROA not before: Thu 10 Oct 2024 10:12:07 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 113.203.209.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.24.0/22 maxlen: 22
115.167.48.0/24 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.100.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 10:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5978 (0x175a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 10 10:12:07 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6707a877-835a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:49:c0:47:51:8f:55:20:1e:81:54:8a:ea:
d8:dd:41:65:d1:82:b8:88:3a:dd:5a:7b:d4:51:77:
69:b0:a5:53:0d:4b:94:fb:75:d5:d7:d6:63:f3:7c:
e3:f8:13:c8:26:e3:bd:15:2b:c7:c0:c0:d2:97:aa:
74:7c:c3:31:da:99:23:2d:5c:70:c8:5e:9c:22:53:
c7:2d:4a:12:83:b4:0c:b8:a5:60:8a:68:41:00:af:
79:c2:ad:29:58:d2:94:fb:33:fc:22:72:25:92:05:
d5:fc:4c:1b:64:8c:c0:df:7b:0d:e8:7b:42:97:21:
98:69:5b:a3:fe:fb:f0:00:56:e9:ee:a5:f8:6e:1a:
72:e3:74:1c:b4:b3:7c:c3:73:05:1d:19:c4:cd:d6:
2e:de:83:bf:7d:a3:5b:4f:d7:9a:24:e1:f7:08:e1:
c9:01:83:aa:e0:0b:ae:d7:bf:56:71:45:f0:42:0b:
ae:85:9e:e6:f2:31:95:26:c3:7d:d0:8a:bc:54:39:
53:bf:92:da:6e:5d:26:0b:95:70:ef:ee:22:8a:4c:
8f:04:cb:45:74:bc:52:c7:b4:a9:c3:9f:62:5d:94:
87:be:c6:aa:ae:eb:73:87:a5:9b:7d:e7:5a:d3:30:
e7:3b:75:eb:74:81:68:91:cd:f1:ed:c6:be:3d:37:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:27:CE:9D:FC:B5:26:91:C0:CC:C5:E6:F5:FE:82:BF:6F:5A:E6
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C9620D7886EF11EFBBDDC087C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.209.0/24
113.203.241.0/24
113.203.246.0/24
115.167.1.0/24
115.167.24.0/22
115.167.48.0/24
115.167.52.0/22
115.167.77.0/24
115.167.100.0/24
115.167.102.0/24
115.167.104.0/22
115.167.112.0/22
175.110.64.0/22
175.110.72.0/22
175.110.84.0/22
175.110.96.0/24
180.178.151.0/24
180.178.161.0/24
180.178.188.0/24
180.178.190.0/24
223.29.225.0-223.29.228.255
Signature Algorithm: sha256WithRSAEncryption
af:d7:b4:a6:e2:5d:81:6c:ab:d2:e9:04:46:7e:70:ed:8d:1c:
9e:6f:62:ed:47:ed:67:fc:f8:ca:f3:aa:10:9d:be:d0:8f:ae:
7d:35:1a:e3:57:c1:55:d5:8f:8f:9e:34:39:9d:6d:1e:73:90:
6d:21:c1:93:1a:a4:10:a9:6c:ac:62:f9:5c:94:64:ca:11:79:
d6:35:c4:73:3e:27:24:3b:1e:4c:b3:b3:c2:20:13:aa:10:79:
5d:b7:22:a0:9e:db:ea:1a:6f:ac:59:c1:a1:06:40:26:92:ab:
f9:07:84:b5:9b:09:6d:54:c6:d8:69:71:67:76:6b:e8:5c:5d:
bd:5e:65:43:e4:df:46:19:46:74:37:df:67:a8:dc:5a:ab:b8:
eb:70:5e:19:80:8d:ae:e7:6d:ae:69:4f:fd:77:36:9e:6d:2e:
a1:11:ae:19:dd:57:f1:50:f5:33:93:58:a2:ac:19:69:1a:25:
85:a9:17:7f:18:21:e6:36:2b:6b:2c:4f:e7:60:93:f2:c5:93:
35:fd:45:60:6c:1d:82:2d:7a:a4:5f:dc:24:91:8a:e5:f3:81:
2d:d3:0b:3a:c5:77:6e:4c:f2:cd:2c:8f:15:01:fb:c2:41:3f:
62:2e:a7:36:c3:8e:7e:c9:f5:f4:ba:b2:5e:8e:d0:ad:63:50:
99:f7:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:14 2025 by rpki-client