Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FFDE405EE9E811EF88716915C4F9AE02.roa
File: FFDE405EE9E811EF88716915C4F9AE02.roa (raw, json)
Hash identifier: oTwdA12XmzGkXLDbi1u9wHqWrbw4vXfXaVdi5fRku/c=
Subject key identifier: 49:0C:8A:71:FA:42:3F:74:AA:D2:0F:2C:33:E2:05:61:FE:46:5E:01
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2390
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FFDE405EE9E811EF88716915C4F9AE02.roa
Signing time: Tue 18 Feb 2025 07:54:53 +0000
ROA not before: Tue 18 Feb 2025 07:54:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.224.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 07:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9104 (0x2390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 18 07:54:53 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67b43ccd-bb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:a9:32:52:1e:d7:c7:20:77:e3:a7:8a:98:
0c:f5:5d:78:94:0e:87:d4:34:70:c3:32:d8:3f:2d:
eb:81:fa:f5:4a:8c:46:02:76:0f:ac:a9:b2:dc:d0:
8f:01:90:93:a3:da:38:15:26:e4:84:01:60:66:0d:
5e:8c:44:ee:8c:52:e3:fe:88:22:51:4a:66:78:c6:
1a:62:4f:e2:65:4a:9a:fd:89:47:6a:4f:33:5d:f6:
25:23:fd:44:d8:55:2f:66:8b:d3:9f:1d:ff:f6:26:
2b:79:68:e3:9a:43:8d:71:28:c1:9a:2a:5f:fd:00:
78:d0:cf:80:bb:f4:70:51:6d:83:18:74:59:4c:51:
3f:0b:8c:ad:dd:ee:80:6b:a5:13:dd:d8:d0:13:92:
3b:e3:ee:bd:46:0d:ab:b1:df:4b:16:0f:36:06:72:
d8:01:e8:8d:cd:8f:91:fd:be:ba:d9:cd:ca:d6:f6:
78:76:cd:8d:3f:9e:da:24:27:b1:5d:41:4a:72:63:
f4:15:97:99:ad:36:d8:e7:59:2a:a4:bb:1d:6c:7b:
b8:7a:e5:85:88:f0:9c:07:63:5a:57:e1:ec:1a:f4:
2a:1c:88:ae:62:f9:a1:3f:83:aa:70:be:9f:57:f3:
c4:b2:f3:67:e0:81:c5:59:87:06:34:94:09:30:92:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:8A:71:FA:42:3F:74:AA:D2:0F:2C:33:E2:05:61:FE:46:5E:01
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FFDE405EE9E811EF88716915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.224.0/24
115.167.50.0/24
115.167.73.0/24
115.167.78.0/24
175.110.89.0/24
202.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:68:dc:c5:9a:5a:70:27:f9:88:1d:66:98:eb:54:aa:fd:81:
c4:95:34:e8:58:94:b5:74:77:d1:91:3d:be:6d:de:f0:34:b6:
05:7a:7e:57:76:53:03:97:f4:80:45:33:9f:89:72:e7:1f:6f:
22:3d:0e:19:79:da:a7:99:b7:d7:a8:66:61:7a:8d:2d:54:2b:
54:a2:db:41:47:47:d5:5f:b9:cc:b3:c5:0b:fc:78:4d:bf:14:
9b:7e:f9:15:87:af:e3:02:b2:b9:82:82:c8:be:31:d7:48:07:
ea:c0:7e:38:ca:d7:00:2a:43:dc:53:25:c7:17:ea:6d:aa:71:
f4:aa:55:df:68:60:43:24:df:c3:f2:64:e3:6e:ed:d0:84:3c:
ae:22:e4:7c:99:81:b8:ce:28:93:97:4c:ae:f7:70:f1:37:62:
6b:fb:30:9f:47:8e:27:e2:37:76:ef:c9:40:c7:1d:22:30:31:
d8:8d:02:19:01:3d:e6:6d:4a:73:ea:1b:b1:9e:c6:bf:18:23:
ec:03:78:1d:ba:27:bd:22:f9:3e:a2:96:62:37:2a:39:ed:64:
6e:75:97:b7:34:d8:34:f4:79:ef:b9:e0:28:10:30:6e:70:bd:
40:67:37:94:d0:a0:fb:65:f9:21:e5:88:d7:86:d2:c6:c6:11:
64:3d:a7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:31 2025 by rpki-client