Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E1B7B226E7A511EFA346DA7FC4F9AE02.roa
File: E1B7B226E7A511EFA346DA7FC4F9AE02.roa (raw, json)
Hash identifier: DCnoSQ1m0ER2hWifTOYVkkKsTsawZDGPzqgNTNmrL2Y=
Subject key identifier: 68:45:A6:EC:92:84:D1:1B:97:9D:CE:D1:29:1F:09:2D:B3:2D:77:13
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 22C5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E1B7B226E7A511EFA346DA7FC4F9AE02.roa
Signing time: Mon 10 Feb 2025 12:19:21 +0000
ROA not before: Mon 10 Feb 2025 12:19:21 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 113.203.224.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 05:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8901 (0x22c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 10 12:19:21 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a9eec8-9fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:63:ef:f4:ea:97:82:a5:2a:3c:99:d4:8e:
48:76:31:a7:83:2a:d7:0f:71:84:b2:f5:47:1c:a7:
ff:af:04:39:8e:b3:27:1d:df:c5:22:d0:fb:40:03:
43:95:fe:57:4b:b7:44:23:13:0d:8e:c3:fc:72:6e:
06:a1:c9:d8:6f:4e:5b:38:3d:b3:34:8b:43:ec:17:
3e:91:13:89:1e:e6:da:46:77:4f:39:53:50:61:0e:
53:03:12:5f:a1:9b:4e:fc:8f:94:48:9d:e4:4b:6f:
ea:2e:31:b9:a5:74:af:1d:0b:6c:23:e4:65:d2:e2:
3b:ee:4a:4d:58:11:84:41:13:f2:05:ba:34:e3:dd:
9f:e3:80:cd:f5:b6:db:75:11:42:6d:17:cb:12:ab:
89:2d:ab:c8:4c:7a:fb:83:fd:b3:b2:40:cf:c2:ed:
7c:91:d8:db:fc:32:7e:8a:f6:62:d3:71:78:27:77:
da:3d:de:b7:d4:45:e6:ce:b4:8c:a5:1e:ea:8d:38:
03:a8:62:51:ab:3e:43:0f:7f:a8:97:5c:a5:32:d0:
e3:aa:12:35:43:62:a2:cd:2a:8a:57:25:0f:9d:06:
7c:a4:9b:b6:fc:54:09:a1:73:03:c6:92:57:01:45:
48:15:d8:73:1c:28:2f:dc:74:73:0a:b3:df:f3:bd:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:A6:EC:92:84:D1:1B:97:9D:CE:D1:29:1F:09:2D:B3:2D:77:13
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E1B7B226E7A511EFA346DA7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.224.0/24
115.167.73.0/24
115.167.78.0/24
175.110.89.0/24
202.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7b:2b:3b:99:f9:6d:38:a9:e2:ff:7b:8c:d8:84:19:7f:42:
35:91:30:2e:fb:d6:71:11:bc:b4:95:79:42:47:cd:b4:20:e2:
6c:b8:30:aa:83:0e:51:ef:58:c9:db:9c:99:13:95:5b:e0:17:
68:e0:b9:76:2d:33:ad:bb:64:c4:91:09:96:21:0b:f0:bc:14:
5a:60:25:30:13:94:c1:10:bf:be:82:43:4f:8f:50:98:ab:d0:
44:14:c0:ac:ee:e6:1c:1c:8f:fd:09:0e:2a:fb:a1:eb:75:76:
33:c3:f5:c6:6c:3e:ad:f9:ec:c1:cb:e7:49:d0:8a:24:3f:23:
4b:70:18:81:ea:77:ab:82:d8:3e:1f:d3:8d:2a:45:25:93:8a:
b1:1c:76:e7:59:63:72:f4:04:04:23:6e:61:df:65:97:82:a5:
32:27:2b:df:cb:63:e5:3a:b4:b1:2a:29:94:70:06:f5:3b:82:
df:e1:a9:9f:72:68:0e:e7:1e:b4:e3:33:5b:b2:52:e8:69:11:
20:73:34:91:fb:0c:25:26:7a:56:d5:ba:81:33:b8:82:72:cc:
eb:2c:f5:53:b9:5a:d9:87:92:de:26:8b:52:cd:80:96:96:79:
c0:02:c9:72:58:12:15:54:3b:3c:b5:ae:9b:93:53:07:e9:ef:
ac:d5:f5:06
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICIsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwMjEwMTIxOTIxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2E5ZWVjOC05ZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1pj7/Tql4KlKjyZ1I5IdjGngyrXD3GEsvVHHKf/rwQ5jrMnHd/FItD7QAND
lf5XS7dEIxMNjsP8cm4GocnYb05bOD2zNItD7Bc+kROJHubaRndPOVNQYQ5TAxJf
oZtO/I+USJ3kS2/qLjG5pXSvHQtsI+Rl0uI77kpNWBGEQRPyBbo0492f44DN9bbb
dRFCbRfLEquJLavITHr7g/2zskDPwu18kdjb/DJ+ivZi03F4J3faPd631EXmzrSM
pR7qjTgDqGJRqz5DD3+ol1ylMtDjqhI1Q2KizSqKVyUPnQZ8pJu2/FQJoXMDxpJX
AUVIFdhzHCgv3HRzCrPf871BEQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGhFpuyS
hNEbl53O0SkfCS2zLXcTMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTFCN0IyMjZF
N0E1MTFFRkEzNDZEQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBABxy+ADBABzp0kDBABzp04DBACvblkDBADKXBIwDQYJKoZI
hvcNAQELBQADggEBACd7KzuZ+W04qeL/e4zYhBl/QjWRMC771nERvLSVeUJHzbQg
4my4MKqDDlHvWMnbnJkTlVvgF2jguXYtM627ZMSRCZYhC/C8FFpgJTATlMEQv76C
Q0+PUJir0EQUwKzu5hwcj/0JDir7oet1djPD9cZsPq357MHL50nQiiQ/I0twGIHq
d6uC2D4f040qRSWTirEcdudZY3L0BAQjbmHfZZeCpTInK9/LY+U6tLEqKZRwBvU7
gt/hqZ9yaA7nHrTjM1uyUuhpESBzNJH7DCUmelbVuoEzuIJyzOss9VO5WtmHkt4m
i1LNgJaWecACyXJYEhVUOzy1rpuTUwfp76zV9QY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:46:01 2025 by rpki-client