Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3C4B5F8CCE8B11EFA81B3A37C4F9AE02.roa
File: 3C4B5F8CCE8B11EFA81B3A37C4F9AE02.roa (raw, json)
Hash identifier: G22Ucfkssz0+NkskcimKZAuxxvr4UKigPKMyU1jR8sI=
Subject key identifier: FD:B5:74:9A:A6:74:8D:4A:28:22:7F:26:60:27:FF:2C:02:68:47:AF
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0D17
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3C4B5F8CCE8B11EFA81B3A37C4F9AE02.roa
Signing time: Fri 10 Jan 2025 10:29:18 +0000
ROA not before: Fri 10 Jan 2025 10:29:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/24 maxlen: 24
139.190.1.0/24 maxlen: 24
139.190.2.0/24 maxlen: 24
139.190.3.0/24 maxlen: 24
139.190.4.0/24 maxlen: 24
139.190.5.0/24 maxlen: 24
139.190.6.0/24 maxlen: 24
139.190.7.0/24 maxlen: 24
139.190.9.0/24 maxlen: 24
139.190.10.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.16.0/24 maxlen: 24
139.190.18.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/24 maxlen: 24
139.190.25.0/24 maxlen: 24
139.190.26.0/24 maxlen: 24
139.190.27.0/24 maxlen: 24
139.190.28.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.32.0/21 maxlen: 24
139.190.40.0/24 maxlen: 24
139.190.41.0/24 maxlen: 24
139.190.42.0/24 maxlen: 24
139.190.43.0/24 maxlen: 24
139.190.44.0/24 maxlen: 24
139.190.45.0/24 maxlen: 24
139.190.46.0/24 maxlen: 24
139.190.47.0/24 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.52.0/22 maxlen: 24
139.190.56.0/22 maxlen: 24
139.190.60.0/24 maxlen: 24
139.190.61.0/24 maxlen: 24
139.190.62.0/24 maxlen: 24
139.190.63.0/24 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.80.0/24 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 11:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 10 10:29:18 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6780f67e-e97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:6f:cc:9f:d1:da:5b:8d:70:bf:8a:85:fe:
a9:52:fb:9f:0b:15:c4:0d:f0:05:95:90:b2:67:64:
be:76:5c:e7:8d:1f:82:06:47:e8:f9:f9:95:26:2a:
0b:4c:8d:38:3d:10:9f:47:f1:f6:a6:a8:12:dd:97:
60:83:64:c3:07:f5:e4:25:63:6b:15:0f:68:f8:b3:
e9:c2:da:22:52:ab:75:1a:70:1c:5b:c9:94:9f:be:
19:81:62:0f:21:1d:49:3f:17:c6:f9:0b:c0:58:ed:
22:d2:3a:3d:eb:5d:33:fc:3b:e2:8d:ea:e0:9b:48:
6a:bf:3e:9a:ae:58:28:26:67:71:7d:e2:18:9d:38:
8f:44:99:dd:ff:f1:8f:66:f0:aa:9c:3e:cb:37:89:
ab:d5:4f:1a:4b:f4:18:58:56:87:6b:1d:17:39:11:
6c:9b:a1:a8:80:0b:83:53:5f:39:57:0e:49:07:72:
49:e7:98:e0:b4:28:23:41:8f:0b:cc:9d:ee:45:98:
2d:36:02:98:95:80:1c:38:56:1a:52:0f:13:55:62:
92:f2:66:03:36:a6:5a:dc:5f:34:fc:f6:cb:2b:52:
1f:17:0a:9e:3c:c1:53:8a:e5:fb:30:51:f0:c1:28:
41:39:1f:47:a4:70:fa:9c:ea:51:be:a6:13:c1:09:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:74:9A:A6:74:8D:4A:28:22:7F:26:60:27:FF:2C:02:68:47:AF
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3C4B5F8CCE8B11EFA81B3A37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/21
139.190.9.0-139.190.10.255
139.190.12.0/24
139.190.14.0/24
139.190.16.0/24
139.190.18.0/23
139.190.21.0-139.190.29.255
139.190.32.0/19
139.190.68.0/22
139.190.80.0/24
139.190.88.0/21
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:33:fb:5e:09:bd:5b:81:44:9e:ea:2e:08:3c:49:72:04:b0:
57:3c:a7:cd:9c:22:4c:d1:44:36:3b:a8:e8:48:8e:da:9b:32:
2a:3b:b5:b3:9d:6d:bf:04:4f:40:b7:ea:03:c8:6c:48:b2:f5:
d9:01:bd:34:04:83:51:cf:43:70:b5:02:c7:51:18:4c:3d:e1:
1a:78:7e:e7:33:3a:77:11:f8:10:8e:76:65:f0:a2:2a:7c:e6:
85:60:c1:96:8e:4a:31:fe:69:dc:9c:65:fa:0c:7e:96:40:b8:
f1:53:d3:f0:1c:55:d0:d5:94:05:a3:e2:f7:be:9a:5c:84:6b:
61:48:3b:0b:5f:0f:a0:1f:7e:17:7c:2c:45:bd:47:80:2d:be:
90:06:c8:ba:a0:e8:46:de:e1:90:7d:61:ed:3e:ed:49:f5:9c:
f1:00:61:4f:fc:3e:b9:c0:a3:70:fa:54:0d:a3:26:6c:22:a8:
cc:a5:84:a0:a9:b2:73:f2:6e:82:7a:1e:59:06:3b:f4:b3:33:
ae:3f:7c:32:18:c1:a5:44:da:fd:41:a8:2b:66:a9:ed:ed:1b:
79:94:47:32:5b:3e:fc:fa:7f:b0:6b:16:b2:26:0a:fd:92:20:
39:db:a6:d5:03:f4:a1:3f:60:ac:39:ef:c6:68:4e:7e:8e:8d:
19:89:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:59 2025 by rpki-client