Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F97EC32892CC11EFB7F89462C4F9AE02.roa
File: F97EC32892CC11EFB7F89462C4F9AE02.roa (raw, json)
Hash identifier: 8yTyVwLiO6PrycMbA/pNBtJssl81oJFbIUokxc2oIoY=
Subject key identifier: C4:54:8C:0B:8B:6D:95:9A:B0:EC:A3:4B:54:E9:D0:7A:64:83:CD:1D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 19EE
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F97EC32892CC11EFB7F89462C4F9AE02.roa
Signing time: Mon 28 Oct 2024 10:58:05 +0000
ROA not before: Mon 28 Oct 2024 10:58:05 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.225.0/24 maxlen: 24
115.167.12.0/22 maxlen: 22
115.167.16.0/22 maxlen: 22
115.167.20.0/22 maxlen: 22
115.167.56.0/22 maxlen: 22
115.167.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 12:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6638 (0x19ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 28 10:58:05 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=671f6e3d-a5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:1d:f8:4e:04:b7:78:d6:fc:ed:7a:5d:95:
cb:46:28:29:a8:3b:98:05:d0:a1:05:1d:30:9c:35:
3b:58:ca:bb:40:95:09:31:41:75:01:21:b9:db:14:
87:6c:eb:09:f0:2c:a2:6d:dd:5e:e1:1e:ad:7f:86:
26:fe:f5:d0:df:ce:6a:38:79:56:0d:fb:24:41:48:
15:42:61:3b:fe:78:31:86:8c:ba:76:a1:79:95:5a:
5f:02:37:d4:74:2c:4c:d9:f7:27:32:73:a2:ef:0f:
df:f3:15:8a:8a:74:e6:60:46:b3:e4:66:f8:25:58:
e5:18:d6:27:b8:04:70:d8:5a:7a:60:25:27:5d:54:
0f:61:a8:47:74:1c:d2:8d:fc:cf:8e:d8:84:49:34:
cc:8b:9b:63:da:93:48:93:1c:3f:ad:46:bc:c6:20:
43:c8:65:2a:d9:39:3c:c7:e7:50:b2:90:41:2a:c3:
90:d4:c5:3e:e6:7f:4c:30:8b:c3:69:59:97:ce:5f:
b2:84:cf:81:44:61:b8:d8:16:58:01:c6:b4:11:1b:
d0:b4:34:4d:bb:78:b1:85:60:05:5a:cb:78:81:90:
34:2f:61:ae:a2:a2:55:80:68:47:1a:e9:9a:8d:c6:
19:bc:27:30:bd:e4:52:9a:96:fa:8b:65:4d:4d:2e:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:8C:0B:8B:6D:95:9A:B0:EC:A3:4B:54:E9:D0:7A:64:83:CD:1D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F97EC32892CC11EFB7F89462C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.225.0/24
115.167.12.0-115.167.23.255
115.167.56.0/22
115.167.77.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0f:7e:cb:3a:63:be:46:b5:a1:62:2c:1e:d6:eb:b7:ef:fb:
79:61:f1:dc:6e:99:8f:c8:b7:1b:91:75:3a:80:b3:da:05:f6:
5e:ab:cf:5c:c1:c5:40:f4:7a:de:26:c6:b0:6a:7f:9c:97:e2:
33:07:e6:58:71:a9:b8:d5:ca:25:51:cf:c6:93:b2:f8:85:4d:
cd:11:15:a7:79:c8:df:6d:e6:d0:65:f8:f3:6b:1d:3e:40:ba:
1d:20:8f:46:48:28:95:db:a2:ce:fc:d3:12:19:f8:bf:6d:c5:
58:bc:7d:bc:b0:ab:4e:ec:f2:d7:80:5f:d9:fc:39:c9:ac:31:
9c:0d:1b:fb:56:c6:99:7c:43:15:0a:0e:f6:ce:9e:96:e0:3a:
d8:d5:f6:29:b5:d2:a6:6f:99:c9:10:19:7e:76:de:5b:8a:e2:
7f:4d:7c:ba:33:00:8e:f9:02:aa:e6:14:19:1f:2e:f1:7c:96:
2d:7a:24:75:35:8f:74:1b:2d:ae:cf:3c:82:b0:ac:69:ff:25:
ce:2d:6e:00:75:87:24:9d:f5:34:69:17:78:c5:d7:96:70:6e:
86:2d:8c:b8:a4:39:d6:7f:53:7d:e5:9d:3b:b8:f3:29:63:9a:
96:ab:13:ca:65:4a:d3:cf:b1:6a:6d:71:dd:ce:3c:97:2e:b4:
6b:8e:67:0a
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICGe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMDI4MTA1ODA1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFmNmUzZC1hNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4j0d+E4Et3jW/O16XZXLRigpqDuYBdChBR0wnDU7WMq7QJUJMUF1ASG52xSH
bOsJ8Cyibd1e4R6tf4Ym/vXQ385qOHlWDfskQUgVQmE7/ngxhoy6dqF5lVpfAjfU
dCxM2fcnMnOi7w/f8xWKinTmYEaz5Gb4JVjlGNYnuARw2Fp6YCUnXVQPYahHdBzS
jfzPjtiESTTMi5tj2pNIkxw/rUa8xiBDyGUq2Tk8x+dQspBBKsOQ1MU+5n9MMIvD
aVmXzl+yhM+BRGG42BZYAca0ERvQtDRNu3ixhWAFWst4gZA0L2GuoqJVgGhHGuma
jcYZvCcwveRSmpb6i2VNTS6zGwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFMRUjAuL
bZWasOyjS1Tp0Hpkg80dMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjk3RUMzMjg5
MkNDMTFFRkI3Rjg5NDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E
KjAoMCYEAgABMCADBABxy+EwDAMEAnOnDAMEA3OnEAMEAnOnOAMEAHOnTTANBgkq
hkiG9w0BAQsFAAOCAQEARw9+yzpjvka1oWIsHtbrt+/7eWHx3G6Zj8i3G5F1OoCz
2gX2XqvPXMHFQPR63ibGsGp/nJfiMwfmWHGpuNXKJVHPxpOy+IVNzREVp3nI323m
0GX482sdPkC6HSCPRkgolduizvzTEhn4v23FWLx9vLCrTuzy14Bf2fw5yawxnA0b
+1bGmXxDFQoO9s6eluA62NX2KbXSpm+ZyRAZfnbeW4rif018ujMAjvkCquYUGR8u
8XyWLXokdTWPdBstrs88grCsaf8lzi1uAHWHJJ31NGkXeMXXlnBuhi2MuKQ51n9T
feWdO7jzKWOalqsTymVK08+xam1x3c48ly60a45nCg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:52 2025 by rpki-client