Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1C3F0AF8CF4511EF8627B15BC4F9AE02.roa
File: 1C3F0AF8CF4511EF8627B15BC4F9AE02.roa (raw, json)
Hash identifier: +dn3Yr+NcnIyJaVjPT3+upIsiH01zX4BMuK3voMXe60=
Subject key identifier: E5:39:9F:3E:AD:EB:83:16:1D:F7:8A:06:19:FF:BD:11:E5:3D:55:25
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0D29
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1C3F0AF8CF4511EF8627B15BC4F9AE02.roa
Signing time: Fri 10 Jan 2025 11:22:01 +0000
ROA not before: Fri 10 Jan 2025 11:22:01 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/24 maxlen: 24
139.190.1.0/24 maxlen: 24
139.190.2.0/24 maxlen: 24
139.190.3.0/24 maxlen: 24
139.190.4.0/24 maxlen: 24
139.190.5.0/24 maxlen: 24
139.190.6.0/24 maxlen: 24
139.190.7.0/24 maxlen: 24
139.190.9.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/24 maxlen: 24
139.190.25.0/24 maxlen: 24
139.190.26.0/24 maxlen: 24
139.190.27.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.32.0/21 maxlen: 24
139.190.40.0/24 maxlen: 24
139.190.41.0/24 maxlen: 24
139.190.42.0/24 maxlen: 24
139.190.43.0/24 maxlen: 24
139.190.44.0/24 maxlen: 24
139.190.45.0/24 maxlen: 24
139.190.46.0/24 maxlen: 24
139.190.47.0/24 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.52.0/22 maxlen: 24
139.190.56.0/22 maxlen: 24
139.190.60.0/24 maxlen: 24
139.190.61.0/24 maxlen: 24
139.190.62.0/24 maxlen: 24
139.190.63.0/24 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 05:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 10 11:22:01 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=678102d8-4a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:ea:b2:be:da:a4:ec:53:b9:f7:09:47:b1:
2f:f9:90:2e:ab:d7:ad:a8:9b:15:0b:a5:c9:bd:64:
d2:3e:6f:21:2c:58:7f:46:53:da:a5:46:88:08:1c:
c0:53:5e:bc:dc:7d:b4:d4:6c:1f:c7:8f:e1:a9:39:
9b:88:67:35:06:8f:b1:e9:a0:90:f5:11:4e:1b:ac:
ec:81:9e:73:89:4e:f1:8d:2b:23:54:51:7f:42:6e:
1e:05:91:16:98:ea:23:47:67:4a:ef:f1:5b:8c:c5:
52:7a:30:ac:ce:33:6b:ba:3e:40:a4:25:a1:ff:16:
61:ca:a9:bb:45:9b:c7:54:c1:63:a4:cc:24:ea:38:
99:f3:17:62:f6:50:b7:87:7e:5b:8d:ff:70:95:fd:
59:c7:a1:a4:c6:39:b2:33:73:cc:14:ed:4b:03:ed:
19:65:d2:ac:1b:c3:ed:ca:58:c7:65:ae:9c:ed:cf:
b8:f7:79:e2:dd:aa:9d:2c:64:e2:c3:2b:60:c2:70:
c1:64:73:a2:d9:40:12:07:e8:f0:23:96:84:ac:76:
be:09:b2:95:42:0e:06:7b:be:d2:7c:40:c3:88:f5:
79:d6:9f:3d:6d:a2:5b:5b:0d:21:69:b1:33:99:db:
45:83:28:94:6b:2c:0d:4d:7f:07:e0:a6:7e:95:d6:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:39:9F:3E:AD:EB:83:16:1D:F7:8A:06:19:FF:BD:11:E5:3D:55:25
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1C3F0AF8CF4511EF8627B15BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/21
139.190.9.0/24
139.190.19.0/24
139.190.21.0-139.190.27.255
139.190.29.0/24
139.190.32.0/19
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
44:fc:70:a6:b5:fe:79:9b:75:53:fd:77:98:49:78:de:65:d0:
c0:c5:2c:e6:bf:cb:4f:f2:1b:88:a7:53:d0:b3:92:08:a7:3a:
68:a5:93:2a:93:ff:72:5f:36:6c:ae:49:02:7d:74:71:2c:68:
a0:e5:74:fe:f1:a6:a2:d4:20:ad:10:dc:82:d9:7a:bd:94:c1:
71:98:ff:f2:81:3c:2e:37:0c:eb:e3:12:13:3b:22:ca:0a:bb:
23:6f:6e:d6:70:f7:5a:f4:0d:17:4f:ae:72:d8:2e:e1:85:c2:
58:dc:39:c5:ad:f5:a9:bb:c7:58:f4:30:c0:21:ce:71:da:ac:
2b:44:92:e1:97:32:91:c0:08:77:b2:78:bb:46:aa:63:5e:25:
19:0c:71:2e:f1:1f:1e:8a:df:2f:8b:95:0a:4d:c1:09:01:d2:
95:11:e5:e1:34:e9:60:02:cb:16:b5:92:9e:57:de:6b:39:aa:
f6:45:ad:4b:0b:2d:e7:45:71:85:6f:ff:26:83:c2:20:4d:5e:
85:a2:97:8e:09:69:9f:bd:fc:15:f4:ac:7b:4b:24:45:3c:58:
19:93:6e:6b:17:bd:ab:25:dd:b2:df:b0:65:44:b8:78:a3:50:
a4:b8:e8:0e:90:54:95:2e:1e:1e:8e:1f:29:77:e3:c8:7e:3d:
e9:ef:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:40 2025 by rpki-client