Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0AA33CD0F33811EF9D82C960C4F9AE02.roa
File: 0AA33CD0F33811EF9D82C960C4F9AE02.roa (raw, json)
Hash identifier: fXJzM5AawqgD1J4oOtBdzfPDdqhhegkIm0BPLht7sBc=
Subject key identifier: 38:24:3A:02:1B:8C:3D:8F:54:39:D5:9A:DC:A4:E4:CC:39:A5:6F:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0F17
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0AA33CD0F33811EF9D82C960C4F9AE02.roa
Signing time: Tue 25 Feb 2025 05:19:10 +0000
ROA not before: Tue 25 Feb 2025 05:19:10 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.9.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.32.0/24 maxlen: 24
139.190.33.0/24 maxlen: 24
139.190.34.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.49.0/24 maxlen: 24
139.190.69.0/24 maxlen: 24
139.190.70.0/24 maxlen: 24
139.190.71.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 12:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3863 (0xf17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 25 05:19:10 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67bd52cd-6b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:31:95:a9:bb:ca:d4:66:58:e2:b8:20:d4:
cb:58:7c:32:3f:db:44:71:f9:02:8f:39:08:2a:9b:
f4:86:16:cb:28:9c:42:37:3a:a9:bd:e5:22:63:35:
fa:b3:a0:09:43:b9:d5:08:c5:6e:d9:ee:49:2d:82:
cf:66:ac:73:b5:89:ea:c2:75:18:14:f4:33:b6:a8:
b8:c5:a1:87:f3:19:bc:10:9b:a7:57:e3:d3:8d:ac:
29:76:64:7b:4d:6a:0d:9d:ce:e4:c1:9e:22:b1:f8:
36:e7:41:be:d9:75:20:94:74:f2:42:ba:cf:42:ab:
3b:64:f2:cd:39:8a:a3:8c:ad:1a:e1:64:d8:30:67:
72:25:3d:ba:80:3d:f7:bf:05:7a:bd:19:f6:16:b9:
a1:85:06:aa:45:5d:2c:50:75:88:6c:7a:b4:4c:3e:
ad:26:ce:63:c6:7f:23:ca:98:19:6c:a9:30:70:5d:
26:65:5a:ff:f4:ca:81:3d:63:29:5c:52:3d:e1:fe:
dc:c5:c8:8e:26:b1:13:7b:2e:ef:8e:b7:40:af:8c:
aa:0f:16:11:2e:da:c9:89:8d:82:4b:83:65:d4:af:
4d:4c:d1:a8:76:56:22:44:5a:d9:b5:d3:fa:ab:b8:
36:1e:1b:6e:37:24:70:0e:9a:b0:61:6c:4a:2c:94:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:3A:02:1B:8C:3D:8F:54:39:D5:9A:DC:A4:E4:CC:39:A5:6F:D3
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0AA33CD0F33811EF9D82C960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/23
139.190.11.0/24
139.190.13.0-139.190.15.255
139.190.17.0/24
139.190.20.0/24
139.190.24.0/22
139.190.30.0-139.190.34.255
139.190.36.0/22
139.190.49.0/24
139.190.69.0-139.190.71.255
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
03:17:20:d9:3b:4e:54:12:a4:99:b2:17:88:1d:92:f1:15:30:
64:78:67:2b:1a:f9:80:9b:84:fe:66:9d:12:02:2e:18:fa:d0:
54:6c:c0:d8:a4:ec:23:41:f7:27:42:5f:d2:17:19:b3:31:93:
d1:b9:ee:d3:fa:51:10:a6:37:ed:5e:b8:7b:52:b4:cb:6f:58:
cc:88:f3:ce:a6:cd:10:09:a9:a4:48:5e:86:70:68:12:db:6f:
56:85:1d:f0:b2:27:d6:9b:0b:e2:98:1e:33:d7:cf:59:1d:8f:
60:9d:20:9a:01:b7:09:c2:a9:17:94:3f:ab:93:b8:37:66:4b:
71:15:a9:3a:d0:eb:83:43:96:4d:9f:48:29:7a:67:cf:11:83:
69:e7:c7:cb:0a:2f:a5:3e:9a:9d:ae:89:a9:cc:1e:0a:3e:92:
9d:7d:68:4a:4f:40:9f:9b:ee:6d:76:40:50:03:5d:96:fe:92:
59:bd:38:fc:e7:57:19:d0:ab:8b:2b:f5:84:3b:e1:83:1f:aa:
ab:8c:60:49:d6:7c:81:8a:40:6c:b3:f6:04:9d:24:fd:6f:91:
ee:3e:38:20:3b:07:68:dd:91:0f:5d:91:eb:61:19:12:de:57:
41:78:3e:77:1e:db:4b:51:41:e8:33:a6:d4:74:0b:3c:5f:b7:
6b:ab:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:59:31 2025 by rpki-client