Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7CBB41A6BBA611EF8900FC2EC4F9AE02.roa
File: 7CBB41A6BBA611EF8900FC2EC4F9AE02.roa (raw, json)
Hash identifier: yUa2oltLWadaHarAKM7AoFnK7tMdfyvcSLZmhG0RfD0=
Subject key identifier: 46:13:16:B3:53:CE:64:10:18:96:22:00:ED:85:8D:C1:43:D3:C6:53
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C82
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7CBB41A6BBA611EF8900FC2EC4F9AE02.roa
Signing time: Mon 16 Dec 2024 13:31:08 +0000
ROA not before: Mon 16 Dec 2024 13:31:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/21 maxlen: 24
139.190.40.0/24 maxlen: 24
139.190.41.0/24 maxlen: 24
139.190.42.0/24 maxlen: 24
139.190.43.0/24 maxlen: 24
139.190.44.0/24 maxlen: 24
139.190.45.0/24 maxlen: 24
139.190.46.0/24 maxlen: 24
139.190.47.0/24 maxlen: 24
139.190.48.0/24 maxlen: 24
139.190.49.0/24 maxlen: 24
139.190.50.0/24 maxlen: 24
139.190.51.0/24 maxlen: 24
139.190.52.0/24 maxlen: 24
139.190.53.0/24 maxlen: 24
139.190.54.0/24 maxlen: 24
139.190.55.0/24 maxlen: 24
139.190.56.0/22 maxlen: 22
139.190.56.0/24 maxlen: 24
139.190.57.0/24 maxlen: 24
139.190.58.0/24 maxlen: 24
139.190.59.0/24 maxlen: 24
139.190.60.0/24 maxlen: 24
139.190.61.0/24 maxlen: 24
139.190.62.0/24 maxlen: 24
139.190.63.0/24 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.80.0/21 maxlen: 24
139.190.88.0/21 maxlen: 24
139.190.124.0/24 maxlen: 24
139.190.125.0/24 maxlen: 24
139.190.126.0/24 maxlen: 24
139.190.127.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 11:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Dec 16 13:31:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67602b9c-f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:77:a4:ea:22:00:50:d3:af:d3:bd:19:f7:
e8:b7:69:88:02:5f:89:b7:c8:14:5e:88:38:e3:cf:
68:fd:aa:3d:bd:d9:b5:b2:ed:37:66:3f:f0:b1:3b:
4f:7d:26:be:90:a4:c2:be:42:93:26:15:53:b3:70:
57:e6:98:b6:76:5c:ca:a7:04:f4:a6:48:2b:3b:97:
4d:0a:c2:a3:45:c0:94:e7:36:58:f7:de:41:f4:3c:
0a:b5:b4:13:aa:43:80:f5:d3:65:b7:8b:b7:77:d4:
5d:a7:92:dc:8a:bd:4b:74:fd:84:ff:f5:46:9a:82:
4c:ae:fd:2e:92:51:22:77:f0:27:07:7b:21:7b:8e:
b9:21:f8:fb:b3:f5:39:38:56:69:59:85:97:f3:8c:
b6:b8:67:f7:d4:29:a6:25:ea:ab:05:02:4c:af:11:
ce:76:de:fd:e1:bc:98:99:b7:3d:25:25:f0:e5:dc:
92:d1:a2:e0:cb:09:50:30:38:4a:54:75:23:c0:0e:
56:f3:e2:cf:be:2e:af:c5:b7:90:71:f1:45:d2:79:
44:98:af:53:67:a0:da:9b:59:04:45:90:7c:51:27:
f1:e1:e1:85:1d:43:a6:84:56:ea:01:b2:c7:49:93:
8b:0c:51:5b:90:d5:d0:a2:f0:83:fb:f5:16:30:a3:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:16:B3:53:CE:64:10:18:96:22:00:ED:85:8D:C1:43:D3:C6:53
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7CBB41A6BBA611EF8900FC2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/21
139.190.40.0-139.190.63.255
139.190.68.0/22
139.190.80.0/20
139.190.124.0/22
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
52:94:04:90:37:55:3a:49:85:01:e1:a5:c3:e5:aa:e6:63:67:
75:18:b6:94:0a:47:fe:d1:c7:a4:8c:f9:a1:f6:d8:f8:bb:db:
59:11:15:16:de:5e:80:b9:4c:09:78:ac:b5:d8:b7:70:c3:3d:
fb:f8:d4:e7:4e:c6:f1:34:f8:dc:22:6d:d1:5f:8f:03:e9:ac:
c5:ff:f3:bb:db:d4:9c:a5:28:b5:0c:29:88:3a:30:c4:60:32:
3d:ac:e6:c4:20:f9:71:66:77:de:0f:09:b3:b0:50:a6:74:3c:
59:8a:89:47:97:7f:1b:ed:00:12:6c:7b:9d:ee:2e:59:20:66:
ec:74:2e:b1:a5:8d:28:8f:35:36:e3:fd:7f:02:d6:25:fe:87:
60:88:bb:00:16:35:f9:34:2d:37:08:cf:03:a2:99:2f:46:96:
c8:57:5d:5c:37:22:19:4c:3a:eb:0f:45:d1:44:68:52:61:a5:
95:89:07:1d:01:41:86:d6:5c:4b:86:b9:74:7b:5f:b0:2b:c6:
55:36:4c:51:0d:e0:7a:6d:60:6e:f7:e2:c6:e7:2d:b6:9d:19:
68:da:2d:54:df:81:b2:a9:1f:aa:17:61:b0:09:cf:25:12:59:
c3:73:71:73:08:07:65:80:9a:93:18:35:10:52:ab:1b:81:33:
f5:61:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:24 2025 by rpki-client