Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F994F5BABBD711EFA331CC0FC4F9AE02.roa
File: F994F5BABBD711EFA331CC0FC4F9AE02.roa (raw, json)
Hash identifier: b2ZoJBVIraP5cjPMdfYG3kJIG4anuzqhqKVFUya+Ito=
Subject key identifier: 7D:9E:C4:73:8C:6C:51:7B:4B:85:57:9C:DA:15:73:DE:21:9E:CC:C4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1FCF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F994F5BABBD711EFA331CC0FC4F9AE02.roa
Signing time: Mon 16 Dec 2024 18:02:55 +0000
ROA not before: Mon 16 Dec 2024 18:02:55 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213990
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.60.0/23 maxlen: 23
115.167.62.0/23 maxlen: 23
175.110.64.0/22 maxlen: 22
175.110.105.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 08:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8143 (0x1fcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 16 18:02:55 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67606b4f-b781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:fb:fa:b2:6b:4a:95:2c:ec:de:dc:21:97:
67:28:70:87:81:45:47:0f:49:2c:ef:14:a1:1d:8a:
e0:31:32:84:41:c2:9f:1c:a8:ce:11:57:8c:f6:4c:
82:3a:25:89:4d:c4:97:b3:10:dd:8c:2b:be:fe:71:
95:8c:3f:38:e1:a8:dc:cf:e8:ae:8c:38:a7:c7:62:
19:7b:86:b1:4e:f8:a9:d8:a8:dc:8c:ce:a1:5a:47:
d7:d7:d3:28:82:1c:47:d7:9d:48:68:3f:1a:d0:f6:
75:51:90:a0:67:95:26:a1:5f:99:43:4f:60:23:f7:
df:2b:1d:83:fb:b3:de:6c:b5:21:94:db:91:7f:c8:
ad:78:52:b6:4b:63:4b:b1:a9:c6:50:7a:32:f5:32:
c2:35:27:cc:ce:a3:7b:df:cf:c5:50:b8:e8:e0:cc:
b8:6f:b8:4d:8b:10:4f:59:f3:b6:92:9f:98:d0:8d:
82:e3:53:a5:84:10:d0:4b:11:13:cc:af:17:71:40:
d6:65:13:fa:c5:73:12:70:b2:e5:77:48:9c:fe:66:
d9:6b:8f:a4:82:d3:82:8c:32:4e:7a:ef:fb:39:50:
07:a0:e7:81:68:c5:b7:87:9e:7f:b6:5e:07:3d:d7:
a5:e0:00:cc:3e:85:a7:f9:b4:ec:bb:63:65:bd:96:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:C4:73:8C:6C:51:7B:4B:85:57:9C:DA:15:73:DE:21:9E:CC:C4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F994F5BABBD711EFA331CC0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/23
113.203.212.0/24
113.203.214.0/24
113.203.222.0/24
113.203.233.0/24
113.203.245.0/24
115.167.29.0-115.167.30.255
115.167.60.0/22
175.110.64.0/22
175.110.105.0/24
180.178.164.0/24
180.178.190.0/24
223.29.226.0/24
223.29.229.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d0:1a:2b:02:ac:da:74:ea:01:f0:1f:de:0e:43:b9:c0:05:
66:07:58:fc:9a:2c:a1:5c:8e:42:57:35:3e:07:1d:f7:24:21:
ab:ac:45:37:1c:0a:88:a7:83:a4:4d:7e:29:df:5e:9d:e3:3c:
0a:77:7b:09:d9:a3:72:a5:4e:c0:dc:07:b1:45:ca:b4:99:95:
31:59:cf:21:75:43:2c:6a:80:c7:70:ba:f7:72:66:d9:64:06:
84:48:78:3b:29:f1:97:fe:47:2a:6e:87:d8:60:7b:13:77:ba:
f9:d6:02:56:18:2a:ed:0d:c4:fd:f8:58:a7:51:59:55:7c:b1:
e6:2a:03:71:ec:bb:b6:46:79:85:e5:50:a3:83:72:18:ac:4b:
a2:2f:c1:c8:bc:41:0b:34:21:1b:23:cb:2e:ed:0f:da:e0:bc:
fa:08:7d:a5:19:5e:d7:cd:07:6a:68:3b:3b:ab:a2:51:69:15:
38:1f:4a:a3:29:65:2e:e7:ab:d8:d0:55:21:49:3f:88:ed:4a:
82:8c:4d:07:da:58:26:3d:00:a3:49:01:ef:74:57:9d:b7:0b:
95:14:cc:d2:30:94:3a:3f:94:d4:66:6c:8e:9b:87:de:84:5e:
01:be:bd:86:5c:08:ba:d6:de:34:8f:d1:80:1c:0d:df:00:a2:
98:62:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:50 2025 by rpki-client