Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/56AE7D02D6F411EFB69B8A29C4F9AE02.roa
File: 56AE7D02D6F411EFB69B8A29C4F9AE02.roa (raw, json)
Hash identifier: IXm2HsdEYaCOi6h4ubXsEi+FEV948MFYW6RsFbYgeGM=
Subject key identifier: 10:9A:64:9C:27:9E:7C:0D:61:9D:0F:A5:F4:69:F8:7C:DC:A3:02:85
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0D92
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/56AE7D02D6F411EFB69B8A29C4F9AE02.roa
Signing time: Mon 20 Jan 2025 06:10:31 +0000
ROA not before: Mon 20 Jan 2025 06:10:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.9.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 11:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 20 06:10:31 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=678de8d7-44d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:4a:ae:e0:6d:95:85:8a:1a:0a:2d:ae:43:
6f:bf:58:f0:3b:ff:e4:a0:a7:a4:39:18:e6:f1:08:
74:ec:44:6e:bb:e0:68:14:b3:ab:b7:ac:d5:6d:8b:
89:aa:6b:02:85:aa:95:e7:c0:a4:9c:4d:f1:96:bc:
e5:6d:76:cd:fc:d8:7b:68:27:08:81:43:07:86:3a:
92:41:1d:f8:5d:7d:db:e4:40:fb:e3:e6:be:ef:0d:
5e:92:20:4b:fd:bf:bd:ec:89:0f:5e:da:b7:a7:4d:
24:d6:3b:ae:c7:1a:cb:b9:4f:4f:ed:24:94:d8:4d:
3c:f1:b5:b4:1b:11:e4:46:33:96:30:e9:ee:2c:09:
0c:fb:7a:96:ef:6d:50:e6:23:fc:bc:fd:1b:79:78:
5a:ef:3b:f8:e2:ad:30:68:e6:d2:3f:f9:19:20:00:
19:ef:03:53:29:71:51:7a:c4:1a:a4:09:15:28:23:
6d:c0:66:ad:c8:a8:5c:8d:79:f6:54:3d:af:1d:c4:
99:10:87:52:47:82:ac:5e:f1:e2:83:99:96:c3:df:
dd:cf:f0:4d:2e:72:cb:ae:b4:02:b8:81:37:f1:a9:
0a:f4:c6:39:bf:a6:8f:d8:5a:fe:0c:3e:49:99:f7:
4e:01:7a:02:ba:f7:ab:c6:ad:71:17:aa:25:80:91:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:64:9C:27:9E:7C:0D:61:9D:0F:A5:F4:69:F8:7C:DC:A3:02:85
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/56AE7D02D6F411EFB69B8A29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/23
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.19.0-139.190.27.255
139.190.29.0-139.190.31.255
Signature Algorithm: sha256WithRSAEncryption
b7:d6:7a:e1:99:dc:dc:bb:aa:6e:d4:ed:c5:02:f9:5d:8e:c2:
8a:eb:fe:00:0d:92:f5:e2:ad:b3:08:84:82:65:5f:df:09:cb:
39:f5:ac:13:ab:41:c8:e9:84:ea:12:19:da:e8:2a:f7:d5:38:
6d:ce:92:ed:4a:fb:cd:8a:bf:8c:f1:07:3a:e6:47:5f:e8:35:
fc:3c:02:b3:d9:c7:d2:3c:00:ff:c1:30:73:da:73:db:a9:21:
05:ef:ef:36:bd:ed:30:97:20:e6:77:cb:7a:06:1e:c8:77:71:
40:92:42:da:ec:93:40:81:fd:18:61:b4:b7:5f:dd:df:3b:69:
b4:d1:6f:a8:73:a3:e5:7e:b8:b3:3f:dc:83:1d:69:0d:57:04:
dc:39:3e:9b:e2:5e:6b:f1:db:06:8b:63:4b:83:ea:af:e9:9c:
12:3b:6c:02:2d:79:b8:88:b6:46:72:c1:61:d4:7e:ba:03:05:
34:f3:68:52:5b:d8:c3:00:b5:f1:63:20:b5:d7:5f:f0:4c:a5:
5a:9c:11:09:10:19:43:67:f9:f4:cd:a7:01:c4:45:67:41:43:
1f:73:ed:9c:4b:7d:3b:72:50:66:f4:16:dc:00:d1:b9:f8:9b:
cf:74:8a:5e:67:22:13:43:09:60:92:53:b3:cf:66:01:54:29:
bf:f2:12:cd
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjUwMTIwMDYxMDMxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzhkZThkNy00NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMhKruBtlYWKGgotrkNvv1jwO//koKekORjm8Qh07ERuu+BoFLOrt6zVbYuJ
qmsChaqV58CknE3xlrzlbXbN/Nh7aCcIgUMHhjqSQR34XX3b5ED74+a+7w1ekiBL
/b+97IkPXtq3p00k1juuxxrLuU9P7SSU2E088bW0GxHkRjOWMOnuLAkM+3qW721Q
5iP8vP0beXha7zv44q0waObSP/kZIAAZ7wNTKXFResQapAkVKCNtwGatyKhcjXn2
VD2vHcSZEIdSR4KsXvHig5mWw9/dz/BNLnLLrrQCuIE38akK9MY5v6aP2Fr+DD5J
mfdOAXoCuverxq1xF6olgJFaAQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFBCaZJwn
nnwNYZ0PpfRp+HzcowKFMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNTZBRTdEMDJE
NkY0MTFFRkI2OUI4QTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E
PjA8MDoEAgABMDQDBAGLvggDBACLvg0DBACLvg8DBACLvhEwDAMEAIu+EwMEAou+
GDAMAwQAi74dAwQFi74AMA0GCSqGSIb3DQEBCwUAA4IBAQC31nrhmdzcu6pu1O3F
AvldjsKK6/4ADZL14q2zCISCZV/fCcs59awTq0HI6YTqEhna6Cr31ThtzpLtSvvN
ir+M8Qc65kdf6DX8PAKz2cfSPAD/wTBz2nPbqSEF7+82ve0wlyDmd8t6Bh7Id3FA
kkLa7JNAgf0YYbS3X93fO2m00W+oc6PlfrizP9yDHWkNVwTcOT6b4l5r8dsGi2NL
g+qv6ZwSO2wCLXm4iLZGcsFh1H66AwU082hSW9jDALXxYyC111/wTKVanBEJEBlD
Z/n0zacBxEVnQUMfc+2cS307clBm9BbcANG5+JvPdIpeZyITQwlgklOzz2YBVCm/
8hLN
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:41 2025 by rpki-client