Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DE36D74A1D7E11EF8B39EC62C4F9AE02.roa
File: DE36D74A1D7E11EF8B39EC62C4F9AE02.roa (raw, json)
Hash identifier: STKi1uK9+m3HsrziQmnvaQMeBltxTl6ipCiUAnR/crQ=
Subject key identifier: F5:D7:43:8C:41:84:25:8E:C0:D6:9B:FD:FC:52:F2:42:9B:71:E6:BC
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 126A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DE36D74A1D7E11EF8B39EC62C4F9AE02.roa
Signing time: Wed 29 May 2024 05:47:00 +0000
ROA not before: Wed 29 May 2024 05:47:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 07:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4714 (0x126a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 29 05:47:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6656c154-6d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:b0:32:6c:70:ba:e2:96:02:aa:e4:70:2f:
66:0e:33:fc:17:d2:e1:ed:e7:18:8c:44:30:96:47:
9a:b0:7e:8a:29:67:c9:b9:62:05:ea:65:18:90:46:
66:d7:66:94:c8:e2:74:28:a5:7c:95:77:50:c0:a6:
c5:28:be:e2:15:c7:78:64:77:49:03:f0:db:7f:a4:
9e:71:16:fb:58:2c:5c:65:83:9f:78:b7:b1:0c:05:
3a:78:8b:cd:73:f9:a7:42:13:ec:75:84:71:3b:67:
92:8b:36:62:ab:8e:5e:5b:b0:e1:08:b9:b8:2e:84:
0f:61:f6:3c:a4:b4:73:6e:57:0f:9b:03:46:38:52:
f3:9c:3a:6e:4c:ca:e1:8c:ec:ff:f9:18:4a:49:87:
52:43:a4:af:23:ff:98:15:62:ae:77:4b:53:57:00:
ee:9f:c1:1e:9f:28:ba:42:31:7a:fe:db:e8:de:31:
c6:a2:d8:a3:38:f1:36:2d:9d:7a:2b:79:6d:de:28:
1e:ea:0a:5f:d8:65:fb:3f:12:76:e0:2b:00:11:cb:
79:5a:8d:69:42:33:70:c2:2e:d4:88:d1:04:ca:0d:
d4:cd:10:dd:58:1c:91:5b:32:b9:3d:61:9b:4d:84:
8f:51:7a:61:b8:19:97:82:c2:e2:86:2c:bc:c3:84:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:43:8C:41:84:25:8E:C0:D6:9B:FD:FC:52:F2:42:9B:71:E6:BC
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DE36D74A1D7E11EF8B39EC62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.241.0/24
115.167.50.0/24
115.167.64.0/22
115.167.76.0/24
115.167.124.0/23
Signature Algorithm: sha256WithRSAEncryption
26:0c:03:f7:07:a0:93:f2:d1:4f:69:ff:cb:5a:54:bd:4a:75:
56:68:f8:69:d6:e0:48:fc:e0:56:9a:34:93:64:33:29:cb:0d:
91:33:2b:85:23:99:eb:6a:df:2f:ea:ad:08:65:52:e5:9f:69:
41:c4:96:39:12:1c:ba:f3:7e:9a:b0:6e:b4:63:e7:a5:92:c3:
45:e5:3a:86:48:d8:b9:30:83:b1:d1:45:47:d0:2c:2a:fa:60:
9e:69:de:ab:fa:16:d6:c5:49:2c:ba:1d:aa:45:01:dc:58:e7:
58:c4:84:ba:30:b2:30:fc:df:a4:80:a5:6e:39:9f:95:55:51:
3f:e8:bb:73:44:9f:10:55:2e:38:d5:59:9e:bd:fc:5e:ed:8f:
1d:08:3a:d1:56:93:9b:f6:c5:23:25:44:52:51:49:46:dd:77:
a4:35:df:5c:f9:58:6a:dd:fc:4e:d8:c8:80:65:24:00:ce:6f:
00:fe:5b:a1:d3:41:67:85:5b:92:d0:96:30:95:0c:25:ed:41:
fb:a4:4e:c6:2d:75:f2:b0:b5:3a:44:8c:68:82:77:5e:85:d6:
22:fb:d1:47:37:b1:e2:55:0f:91:48:e4:9e:b5:75:f1:fc:fc:
9e:69:43:79:de:b6:b2:3c:9e:34:61:2f:9f:a6:16:8b:f2:41:
f8:b5:ac:bc
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICEmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwNTI5MDU0NzAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU2YzE1NC02ZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA14SwMmxwuuKWAqrkcC9mDjP8F9Lh7ecYjEQwlkeasH6KKWfJuWIF6mUYkEZm
12aUyOJ0KKV8lXdQwKbFKL7iFcd4ZHdJA/Dbf6SecRb7WCxcZYOfeLexDAU6eIvN
c/mnQhPsdYRxO2eSizZiq45eW7DhCLm4LoQPYfY8pLRzblcPmwNGOFLznDpuTMrh
jOz/+RhKSYdSQ6SvI/+YFWKud0tTVwDun8Eenyi6QjF6/tvo3jHGotijOPE2LZ16
K3lt3ige6gpf2GX7PxJ24CsAEct5Wo1pQjNwwi7UiNEEyg3UzRDdWByRWzK5PWGb
TYSPUXphuBmXgsLihiy8w4RD1wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFPXXQ4xB
hCWOwNab/fxS8kKbcea8MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvREUzNkQ3NEEx
RDdFMTFFRjhCMzlFQzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBABnlxoDBABxy/EDBABzpzIDBAJzp0ADBABzp0wDBAFzp3ww
DQYJKoZIhvcNAQELBQADggEBACYMA/cHoJPy0U9p/8taVL1KdVZo+GnW4Ej84Faa
NJNkMynLDZEzK4Ujmetq3y/qrQhlUuWfaUHEljkSHLrzfpqwbrRj56WSw0XlOoZI
2Lkwg7HRRUfQLCr6YJ5p3qv6FtbFSSy6HapFAdxY51jEhLowsjD836SApW45n5VV
UT/ou3NEnxBVLjjVWZ69/F7tjx0IOtFWk5v2xSMlRFJRSUbdd6Q131z5WGrd/E7Y
yIBlJADObwD+W6HTQWeFW5LQljCVDCXtQfukTsYtdfKwtTpEjGiCd16F1iL70Uc3
seJVD5FI5J61dfH8/J5pQ3netrI8njRhL5+mFovyQfi1rLw=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:24:01 2025 by rpki-client