Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/53022EF42FBB11F0A11E8945C4F9AE02.roa
File: 53022EF42FBB11F0A11E8945C4F9AE02.roa (raw, json)
Hash identifier: 4EAjKqX1IcV0Pq5etANyaV6djsWfCsJhtMKeo36lDL4=
Subject key identifier: 53:C7:B4:06:9B:EA:33:4E:46:C7:81:27:64:A8:61:E5:DB:04:80:23
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 10DC
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/53022EF42FBB11F0A11E8945C4F9AE02.roa
Signing time: Tue 13 May 2025 05:30:05 +0000
ROA not before: Tue 13 May 2025 05:30:05 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 139.190.1.0/24 maxlen: 24
139.190.3.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 16 May 2025 06:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4316 (0x10dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 13 05:30:05 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6822d8dc-960a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:af:cc:da:50:47:00:a7:77:77:08:59:8a:
24:a8:23:23:4a:85:18:c3:43:87:8c:95:e9:12:2e:
94:c4:a0:1b:c9:df:67:fe:df:54:a2:7f:84:c9:eb:
7c:03:8e:3c:1b:c0:f4:ab:83:82:05:e5:a7:0e:1e:
26:50:68:c6:98:7c:58:94:b9:af:fe:0f:a0:16:67:
89:00:e0:a3:c7:6d:eb:6a:4b:a4:4f:ae:d2:72:3d:
da:e3:13:6c:60:4d:5b:68:3d:0d:2d:71:2c:c3:cb:
ec:49:a4:ab:5b:a9:bc:a1:fe:05:4f:90:c5:89:56:
ee:14:26:a2:7d:e0:ca:0e:bb:29:67:92:82:cf:fa:
b9:ba:a3:38:3f:8d:df:45:e0:a7:86:89:a1:f6:f9:
9b:35:01:3b:df:c9:a8:09:22:ba:09:27:08:9c:6e:
52:d9:ab:5a:88:4c:f8:77:1a:e9:72:70:18:ba:45:
22:0d:4d:20:1c:7e:74:5b:e1:63:a3:54:b5:d7:f5:
ae:b2:94:a0:ab:f3:fe:a1:77:54:ae:04:9a:48:21:
e5:b6:50:88:e0:29:60:61:03:67:2f:fb:9a:d7:35:
56:9f:a3:0a:2f:97:9b:fb:31:ce:c1:41:39:a6:f1:
e0:02:d0:eb:de:64:af:44:a8:c3:c0:ad:48:63:5f:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:B4:06:9B:EA:33:4E:46:C7:81:27:64:A8:61:E5:DB:04:80:23
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/53022EF42FBB11F0A11E8945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.1.0/24
139.190.3.0/24
139.190.12.0/24
139.190.14.0/24
139.190.124.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ec:2d:f7:70:a7:39:a5:ee:9e:e3:7a:f2:12:27:69:17:d8:
b9:8e:c0:ab:af:fc:5c:73:25:30:1a:6f:a8:4a:25:77:65:b1:
4a:34:87:8e:a4:0e:76:a1:4d:f0:78:01:73:1d:90:46:02:00:
f8:9a:43:44:ab:53:23:27:18:4f:5e:9b:b8:eb:7b:fb:4e:82:
b3:8b:d9:d6:19:69:1a:99:44:bb:5c:bf:98:35:dc:8a:13:27:
59:4a:44:f1:5f:49:65:25:59:ce:87:f4:76:62:77:67:27:33:
4b:20:d4:f3:24:f5:36:5f:77:aa:2c:bc:bf:ad:39:d0:a3:1e:
c5:69:3a:75:64:1a:92:7b:40:6e:44:bd:e6:29:14:5e:e5:f9:
ca:f6:85:e5:ab:91:9c:c9:33:1b:43:79:8b:f2:6a:6c:65:cc:
86:bb:e0:0b:25:21:4f:ef:17:34:56:14:4f:22:ce:f5:53:d7:
80:1d:05:99:6d:6c:92:e4:3a:df:3b:24:7d:29:c1:c9:a4:28:
19:64:26:81:df:e8:61:d5:69:31:08:3a:86:f6:f3:59:8e:e7:
c6:42:5d:01:45:df:d4:7b:be:e6:af:12:c3:f0:fa:e6:84:07:
8f:eb:2b:3a:f8:18:2c:07:29:ab:3f:96:4b:ac:f3:07:4a:2a:
71:0c:09:d2
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICENwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjUwNTEzMDUzMDA1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODIyZDhkYy05NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ZyvzNpQRwCnd3cIWYokqCMjSoUYw0OHjJXpEi6UxKAbyd9n/t9Uon+Eyet8
A448G8D0q4OCBeWnDh4mUGjGmHxYlLmv/g+gFmeJAOCjx23rakukT67Scj3a4xNs
YE1baD0NLXEsw8vsSaSrW6m8of4FT5DFiVbuFCaifeDKDrspZ5KCz/q5uqM4P43f
ReCnhomh9vmbNQE738moCSK6CScInG5S2ataiEz4dxrpcnAYukUiDU0gHH50W+Fj
o1S11/WuspSgq/P+oXdUrgSaSCHltlCI4ClgYQNnL/ua1zVWn6MKL5eb+zHOwUE5
pvHgAtDr3mSvRKjDwK1IY1+HvQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFPHtAab
6jNORseBJ2SoYeXbBIAjMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNTMwMjJFRjQy
RkJCMTFGMEExMUU4OTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBACLvgEDBACLvgMDBACLvgwDBACLvg4DBAKLvnwwDQYJKoZI
hvcNAQELBQADggEBAFPsLfdwpzml7p7jevISJ2kX2LmOwKuv/FxzJTAab6hKJXdl
sUo0h46kDnahTfB4AXMdkEYCAPiaQ0SrUyMnGE9em7jre/tOgrOL2dYZaRqZRLtc
v5g13IoTJ1lKRPFfSWUlWc6H9HZid2cnM0sg1PMk9TZfd6osvL+tOdCjHsVpOnVk
GpJ7QG5EveYpFF7l+cr2heWrkZzJMxtDeYvyamxlzIa74AslIU/vFzRWFE8izvVT
14AdBZltbJLkOt87JH0pwcmkKBlkJoHf6GHVaTEIOob281mO58ZCXQFF39R7vuav
EsPw+uaEB4/rKzr4GCwHKas/lkus8wdKKnEMCdI=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:40 2025 by rpki-client