Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/887866DAF8C411EFA06CFB39C4F9AE02.roa
File: 887866DAF8C411EFA06CFB39C4F9AE02.roa (raw, json)
Hash identifier: hm7iHSCnXrqFAPtnKsAh8x9m4IfYyuN7wy+hITAHKqw=
Subject key identifier: 2D:56:2B:7B:B2:17:2B:49:2F:F2:EF:0A:84:DB:F5:DA:4A:DC:63:D6
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0FA1
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/887866DAF8C411EFA06CFB39C4F9AE02.roa
Signing time: Thu 06 Mar 2025 09:29:07 +0000
ROA not before: Thu 06 Mar 2025 09:29:07 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.10.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.32.0/24 maxlen: 24
139.190.33.0/24 maxlen: 24
139.190.34.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/24 maxlen: 24
139.190.49.0/24 maxlen: 24
139.190.50.0/24 maxlen: 24
139.190.51.0/24 maxlen: 24
139.190.52.0/24 maxlen: 24
139.190.53.0/24 maxlen: 24
139.190.54.0/24 maxlen: 24
139.190.68.0/24 maxlen: 24
139.190.69.0/24 maxlen: 24
139.190.70.0/24 maxlen: 24
139.190.71.0/24 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 22
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 08:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4001 (0xfa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Mar 6 09:29:07 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67c96ae3-c992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:e4:45:fe:10:d8:58:49:32:24:4a:36:58:
83:61:dc:3f:57:7b:76:1f:a1:d9:08:93:09:3c:33:
ae:c0:67:42:3e:7c:88:67:78:af:de:d0:4b:b4:c7:
b0:d6:ac:eb:2d:1a:4d:d0:df:0a:2d:c7:6a:7d:a2:
89:ed:e5:2e:09:4b:d0:f2:87:27:20:58:6c:4a:ca:
10:77:a7:48:65:ac:de:1d:4f:b0:4e:8b:10:d3:28:
9e:4a:a7:46:e7:8a:33:39:0f:1a:50:54:93:28:4e:
eb:42:7e:2d:85:4f:65:86:b2:f2:64:4b:65:8b:52:
31:b3:0b:4e:06:6c:78:b8:6c:b1:91:ea:ef:a1:16:
71:2e:46:42:27:36:2c:bc:69:3d:ed:11:ea:3c:f5:
af:66:0b:54:4a:00:da:98:31:59:78:62:6b:3c:99:
d9:16:49:56:a0:4f:f1:5e:60:b7:79:4a:ec:5d:e8:
4d:75:97:60:1d:8d:2a:f8:a7:81:bb:71:29:2d:93:
37:e2:32:23:5c:9f:a4:4e:99:85:55:8d:ad:95:30:
5b:05:5c:5a:51:1c:68:71:a1:4d:9c:a1:35:e7:eb:
19:1a:e1:e9:8d:57:8c:0c:15:ea:fd:24:2c:71:d2:
92:61:d4:de:d5:05:c9:fb:97:d4:4e:2e:ec:ff:23:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:56:2B:7B:B2:17:2B:49:2F:F2:EF:0A:84:DB:F5:DA:4A:DC:63:D6
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/887866DAF8C411EFA06CFB39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/24
139.190.10.0-139.190.15.255
139.190.17.0/24
139.190.19.0-139.190.27.255
139.190.29.0-139.190.34.255
139.190.36.0/22
139.190.48.0-139.190.54.255
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:89:11:4c:2d:93:37:8a:ce:d5:bb:fc:d8:b0:04:b0:0c:9b:
f0:81:34:d4:19:68:d5:58:70:67:b2:8b:05:2b:fb:85:10:e7:
76:87:81:77:6a:e2:55:98:67:8e:81:06:53:38:b0:8e:ad:bb:
f3:6b:e2:3a:b5:3c:e7:fb:48:2a:af:1a:8b:01:ba:39:aa:e1:
02:c8:b0:aa:64:1c:88:22:8a:59:97:ab:05:1c:c9:33:77:f4:
89:71:67:68:fd:40:8e:32:55:e8:da:1f:24:aa:b8:10:79:c8:
67:28:7d:32:69:62:04:7a:7f:42:3d:87:2e:57:0c:8c:8c:0a:
39:35:10:1b:68:a0:90:08:a0:df:b2:d7:8e:bc:d1:89:97:c8:
e7:e0:02:87:45:9c:d7:da:35:ad:ff:af:27:49:e0:8e:c2:ae:
64:58:9e:8a:ba:cb:d6:40:5d:88:ee:11:39:c8:d1:f2:19:53:
4d:b0:b2:ab:f8:49:7a:85:c3:1f:1b:e8:c1:b9:f3:20:6a:f3:
b7:9c:e6:fe:66:f9:d4:ae:be:25:b0:a5:db:0b:60:81:ec:81:
d2:9a:49:22:9d:7d:ec:f8:47:db:e2:d9:b3:8e:65:28:df:91:
e7:c0:03:60:24:e7:52:c5:89:22:7c:5a:05:25:8a:3a:03:11:
92:99:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:08 2025 by rpki-client