Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D60C7226588B11EF979D8D26C4F9AE02.roa
File: D60C7226588B11EF979D8D26C4F9AE02.roa (raw, json)
Hash identifier: 2OwDwdNrGEuSNFAByv/t9/mBgRIrsfwD3LbZqRBa6zw=
Subject key identifier: 87:F0:EC:DB:DC:EA:13:2E:AD:8E:EA:5F:A3:22:CC:5A:40:80:89:E3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 14AF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D60C7226588B11EF979D8D26C4F9AE02.roa
Signing time: Mon 12 Aug 2024 09:18:29 +0000
ROA not before: Mon 12 Aug 2024 09:18:29 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.24.0/22 maxlen: 22
115.167.48.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 04:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5295 (0x14af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 12 09:18:29 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66b9d364-b691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:8d:70:52:a8:e0:d4:23:12:61:92:25:8b:
2e:a1:76:55:ff:d9:94:59:79:5f:54:71:25:9e:c1:
02:a0:83:4a:4c:35:4a:0c:e2:09:70:c5:24:00:c4:
ae:bb:0d:8a:58:b0:75:6b:f6:7d:0b:ee:9b:07:95:
04:ef:c7:72:3c:29:b0:36:c6:81:7f:3b:ec:cd:b7:
12:20:33:6c:de:57:a3:1e:5e:c9:92:95:97:d0:4a:
15:de:cb:c5:40:d3:7c:27:05:23:84:04:1f:d2:4d:
d9:fe:cb:ef:ee:cf:3f:3c:fe:c4:63:b1:a5:c5:c0:
e3:09:2b:33:cb:71:1b:09:a3:b6:7f:85:42:96:36:
b2:84:ce:f2:01:f5:d9:b5:37:58:b3:82:0e:93:29:
0a:e5:30:c5:f8:06:16:67:53:e5:33:95:04:05:ba:
a7:f8:38:10:09:8d:a0:38:63:d7:4a:9b:f0:de:8f:
d2:cc:1e:e3:73:fe:66:47:18:27:28:25:3d:52:e9:
08:97:7d:0e:6e:8b:6e:7f:a9:ad:25:2f:e5:ed:50:
84:2e:62:d2:5a:2e:40:42:ba:1f:8c:b1:db:bd:9e:
a5:63:29:ce:2c:d7:2b:60:c6:50:3c:52:14:7c:a2:
77:75:de:44:c8:d2:e2:77:d6:4d:a2:dd:e8:70:7b:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:EC:DB:DC:EA:13:2E:AD:8E:EA:5F:A3:22:CC:5A:40:80:89:E3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D60C7226588B11EF979D8D26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.24.0/22
115.167.48.0/24
115.167.77.0/24
115.167.100.0-115.167.107.255
115.167.112.0/22
175.110.64.0/22
175.110.72.0/22
175.110.84.0/22
175.110.96.0/24
Signature Algorithm: sha256WithRSAEncryption
be:60:d6:33:f0:9f:ba:ff:bb:91:ab:95:e2:15:fd:9b:35:31:
a2:db:c0:f9:84:41:06:b7:dd:78:9b:66:a9:ce:ff:54:62:81:
4d:f8:7b:8f:3b:5e:f5:72:d0:f4:fc:04:61:3b:e7:d8:f8:c4:
da:fd:47:f7:8c:0d:b1:b8:7d:3b:8f:38:22:c9:fc:25:a7:82:
f4:2a:bc:55:3e:a9:ab:7c:7e:bd:1b:3f:24:cb:16:30:b2:38:
41:f1:4f:b8:e7:41:87:9c:7c:e7:87:24:c7:77:6e:27:c3:e2:
89:f8:22:10:cc:88:46:ff:7e:a2:70:75:d0:9e:9a:ee:84:59:
30:39:cd:ae:e8:54:3e:0f:b8:cd:57:73:31:43:f8:fa:b7:2f:
c6:01:5d:e0:a0:6e:f6:d4:dd:27:af:0e:c0:af:bf:a3:18:9d:
16:80:27:3f:a5:ae:31:61:d0:80:07:7a:dc:5b:92:4b:ae:16:
84:58:1e:cc:b9:a8:0b:51:cb:b0:89:6e:19:47:9e:78:08:8d:
f8:38:66:22:a4:86:a9:5c:17:2c:63:b0:d1:9f:6a:82:1f:ee:
2d:2d:1c:af:bf:e0:3c:1a:31:23:ba:6c:2f:b6:c3:0d:c1:3c:
06:ab:f9:c8:10:c7:86:ed:38:47:14:64:1c:85:fc:da:77:fe:
33:b9:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:39 2025 by rpki-client