Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/794E571008B611EDACE57065C4F9AE02.roa
File: 794E571008B611EDACE57065C4F9AE02.roa (raw, json)
Hash identifier: 9Mc26lTV0bSayljeK2Ebdpo5R6WrAbLKm+9rLdLYds4=
Subject key identifier: CD:51:A5:79:13:35:2B:7C:A1:6F:DF:05:BA:BC:22:6F:9D:5A:9C:76
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 057D
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/794E571008B611EDACE57065C4F9AE02.roa
Signing time: Mon 14 Oct 2024 05:32:11 +0000
ROA not before: Mon 14 Oct 2024 05:32:11 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 55808
IP address blocks: 110.164.135.0/24 maxlen: 24
110.164.146.0/24 maxlen: 24
110.164.184.0/24 maxlen: 24
110.164.185.0/24 maxlen: 24
110.164.186.0/24 maxlen: 24
110.164.187.0/24 maxlen: 24
110.164.203.0/24 maxlen: 24
110.164.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 09:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561
Validity
Not Before: Oct 14 05:32:11 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=670cacdb-b619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:8a:95:03:f3:f8:7e:10:56:e5:1e:ac:7d:
c1:bc:3f:16:4a:2f:ca:96:3b:a8:16:75:ef:21:bd:
35:e6:73:df:9c:7a:90:24:0c:50:8a:36:b0:2d:47:
d8:cb:60:8b:a3:ba:37:18:f9:54:33:f7:da:81:3f:
be:17:a9:bc:f0:fe:05:00:ca:5a:16:71:30:ea:e9:
79:ef:cb:81:b3:c1:f3:91:f5:87:e8:4e:36:ea:f0:
57:eb:0d:90:83:77:5b:20:c9:8c:12:26:8d:ed:87:
a6:aa:44:40:8e:3b:6c:b2:b9:64:8c:b0:b8:70:41:
74:5c:ce:0c:2f:ac:d2:ce:ad:57:be:af:38:4e:cc:
a4:26:f2:c0:de:82:62:09:ed:30:f3:50:e3:e8:a8:
d5:e2:0c:e9:e3:ff:f1:8a:d7:f0:49:83:1e:76:59:
96:76:66:04:23:77:c9:c4:54:15:94:f6:6b:3f:df:
40:89:a4:dd:8b:f2:08:99:9a:7d:76:de:31:50:d1:
70:bc:a8:5c:41:40:f1:fc:d7:57:87:1a:10:03:21:
ec:5f:ff:d8:32:25:28:06:80:28:7f:e0:90:dc:a1:
04:20:cb:75:ca:12:79:91:ae:a4:f0:27:01:cb:10:
ff:97:de:41:e0:0b:d3:8d:bf:9f:f6:16:9e:bf:ab:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:A5:79:13:35:2B:7C:A1:6F:DF:05:BA:BC:22:6F:9D:5A:9C:76
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/794E571008B611EDACE57065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.135.0/24
110.164.146.0/24
110.164.184.0/22
110.164.203.0/24
110.164.236.0/24
Signature Algorithm: sha256WithRSAEncryption
74:be:d1:19:ee:bf:e3:be:a3:af:25:3f:05:ee:62:f9:96:e8:
1f:58:77:ea:d9:97:5e:b4:ca:8d:9e:2e:c6:eb:fe:1b:3b:4c:
52:06:5f:c0:bc:f8:2a:49:ac:17:ec:72:73:04:75:d5:65:a7:
f9:4c:e3:be:e5:7d:f1:e7:fb:0b:86:14:88:b3:2a:e0:69:da:
1f:89:e1:38:35:05:26:c7:ae:1d:3f:20:d9:93:9c:5c:bd:fa:
54:84:80:5e:c2:83:72:95:3f:10:94:c1:95:94:d4:f2:6c:2b:
48:43:3f:66:84:44:81:c7:77:e5:0b:f4:03:90:3a:ee:80:b7:
e2:bb:36:7c:10:52:52:81:65:1d:ee:79:dd:af:20:25:e5:1b:
79:ab:97:11:c5:5b:9d:a3:47:a7:2c:ee:35:a0:23:78:99:2e:
f8:5b:88:0d:22:9d:1d:6e:a1:97:30:59:7f:de:b1:8c:9d:1a:
05:70:5f:12:e7:cf:c9:40:8f:cb:db:cc:a2:83:e8:ee:c7:7c:
66:9f:e5:84:33:fa:07:7f:0d:f4:ec:e1:00:38:ca:f1:c1:f8:
8d:fb:af:23:ac:29:e7:d7:21:20:c4:ac:27:12:cb:fd:a3:6b:
da:ee:fa:fb:9b:80:71:29:d1:ac:33:55:19:98:fc:09:6c:f7:
7f:bd:a8:10
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE
RDhDRUNEMDQwHhcNMjQxMDE0MDUzMjExWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzBjYWNkYi1iNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4V6KlQPz+H4QVuUerH3BvD8WSi/KljuoFnXvIb015nPfnHqQJAxQijawLUfY
y2CLo7o3GPlUM/fagT++F6m88P4FAMpaFnEw6ul578uBs8HzkfWH6E426vBX6w2Q
g3dbIMmMEiaN7YemqkRAjjtssrlkjLC4cEF0XM4ML6zSzq1Xvq84TsykJvLA3oJi
Ce0w81Dj6KjV4gzp4//xitfwSYMedlmWdmYEI3fJxFQVlPZrP99AiaTdi/IImZp9
dt4xUNFwvKhcQUDx/NdXhxoQAyHsX//YMiUoBoAof+CQ3KEEIMt1yhJ5ka6k8CcB
yxD/l95B4AvTjb+f9haev6vD4QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFM1RpXkT
NSt8oW/fBbq8Im+dWpx2MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1
NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNzk0RTU3MTAw
OEI2MTFFREFDRTU3MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBABupIcDBABupJIDBAJupLgDBABupMsDBABupOwwDQYJKoZI
hvcNAQELBQADggEBAHS+0Rnuv+O+o68lPwXuYvmW6B9Yd+rZl160yo2eLsbr/hs7
TFIGX8C8+CpJrBfscnMEddVlp/lM477lffHn+wuGFIizKuBp2h+J4Tg1BSbHrh0/
INmTnFy9+lSEgF7Cg3KVPxCUwZWU1PJsK0hDP2aERIHHd+UL9AOQOu6At+K7NnwQ
UlKBZR3ued2vICXlG3mrlxHFW52jR6cs7jWgI3iZLvhbiA0inR1uoZcwWX/esYyd
GgVwXxLnz8lAj8vbzKKD6O7HfGaf5YQz+gd/DfTs4QA4yvHB+I37ryOsKefXISDE
rCcSy/2ja9ru+vubgHEp0awzVRmY/Als93+9qBA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:03:06 2025 by rpki-client