Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7391DA23D1011EF95FA3162C4F9AE02.roa
File: D7391DA23D1011EF95FA3162C4F9AE02.roa (raw, json)
Hash identifier: Q3zatUE85N8scgl9pz5J9bJElW7UVPs2L/71CWsHWhU=
Subject key identifier: 06:C7:80:16:50:69:58:98:1C:79:50:68:03:C7:91:2E:A9:51:8B:D9
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 144C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7391DA23D1011EF95FA3162C4F9AE02.roa
Signing time: Mon 08 Jul 2024 10:00:01 +0000
ROA not before: Mon 08 Jul 2024 10:00:01 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 06:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5196 (0x144c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 8 10:00:01 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=668bb8a1-6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:03:9d:85:a6:48:dd:4e:e0:d8:8c:b2:59:
3a:a5:dd:4d:b0:0e:a2:b9:23:ea:38:2d:78:25:2b:
a6:25:11:27:fd:99:e4:fe:93:18:c4:07:d8:c0:18:
cd:27:66:e2:45:ee:28:1b:50:70:d3:01:38:91:64:
61:28:6d:c3:60:eb:02:2c:28:62:c7:e5:bc:9d:fc:
3a:4c:50:d7:6b:81:8b:0b:37:4d:1a:21:a6:ff:88:
53:df:84:5f:dc:7a:93:77:34:e6:84:c7:42:da:74:
f1:b5:e4:16:8c:1d:80:76:55:2d:71:48:1c:47:ff:
15:86:2b:be:cd:3c:13:1b:50:6c:ef:6d:f5:45:31:
7b:45:56:4b:c2:2f:0c:d2:d7:65:67:c1:f8:f5:28:
c2:0c:2f:a0:bd:40:f5:95:04:06:5c:c1:d1:0e:48:
56:0a:8f:b2:03:ef:c6:eb:2a:84:eb:c5:1d:86:d8:
87:2f:ee:4b:1a:46:28:a0:71:e1:4b:9c:6c:e9:89:
b0:74:cc:ff:43:04:a2:4c:2e:94:ff:a0:f7:1b:3a:
32:69:53:fa:7c:7a:3b:bc:a6:d8:23:d5:ae:f4:04:
53:b5:19:aa:6d:16:ff:9e:64:bc:a7:56:bf:66:45:
4f:49:4c:a7:e8:0e:80:29:11:b5:9e:3a:b7:3c:7b:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:80:16:50:69:58:98:1C:79:50:68:03:C7:91:2E:A9:51:8B:D9
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7391DA23D1011EF95FA3162C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.241.0/24
115.167.50.0/24
115.167.64.0/24
115.167.66.0/23
115.167.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ef:d7:06:a4:ab:09:23:08:71:79:83:b8:2d:42:b3:d9:07:
82:9e:86:ca:68:14:04:25:e8:7d:10:2a:00:af:e7:04:84:48:
12:e6:52:f4:b3:11:93:74:08:a8:fc:0c:10:89:e0:eb:08:8e:
d7:f7:5a:a2:cd:03:2a:db:9e:d6:73:42:98:ad:fa:a4:66:e3:
04:e0:cd:9f:ec:48:ff:34:60:1a:8a:09:c3:11:e3:05:92:2d:
22:10:9c:a2:2e:c2:30:3b:e4:82:a0:c8:bc:e7:ef:42:7f:15:
56:52:f8:f1:8e:fc:bc:5d:e1:6b:ae:db:18:1d:29:ef:80:1c:
af:36:c4:95:a7:37:2a:a9:8d:ff:e0:97:74:dc:3c:87:45:99:
dc:85:d7:bc:29:7a:b8:44:d1:a1:a3:91:cc:64:76:10:b9:d4:
3d:20:df:91:31:53:eb:52:52:9a:f7:16:e0:b3:c9:d8:dc:03:
ec:25:92:42:ac:99:88:77:8a:1e:03:3a:56:01:89:08:6a:f1:
48:d6:ee:50:64:a4:45:e7:50:b3:42:e3:d8:aa:b1:ea:ed:fa:
d1:ae:06:e2:fb:44:ea:22:40:a9:70:a2:a0:43:ad:3f:5f:24:
35:e2:7c:87:72:42:3f:41:63:b8:72:19:5f:b7:37:fb:76:12:
51:bb:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:46:02 2025 by rpki-client