Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9BFF4A1ED18E11EFB7248086C4F9AE02.roa
File: 9BFF4A1ED18E11EFB7248086C4F9AE02.roa (raw, json)
Hash identifier: TCdI5HB2asz36RAjPCji/UShNYNT9cFKGpRwvjS3L0k=
Subject key identifier: 69:8F:34:25:F9:0C:20:99:52:79:9A:25:63:A2:B6:73:C7:2B:32:C0
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0D5C
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9BFF4A1ED18E11EFB7248086C4F9AE02.roa
Signing time: Tue 14 Jan 2025 05:56:17 +0000
ROA not before: Tue 14 Jan 2025 05:56:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.9.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/24 maxlen: 24
139.190.25.0/24 maxlen: 24
139.190.26.0/24 maxlen: 24
139.190.27.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.32.0/21 maxlen: 24
139.190.40.0/21 maxlen: 24
139.190.48.0/21 maxlen: 24
139.190.56.0/21 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 06:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 14 05:56:17 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6785fc81-d49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:a6:d2:62:6b:90:46:81:f7:5d:dd:eb:41:
25:eb:b1:ae:76:05:04:ca:c6:07:3f:c2:7e:94:d0:
cd:e0:18:5b:4a:91:6d:e3:40:9b:83:de:7a:dd:a2:
b4:41:5e:3f:a3:19:12:18:86:82:17:fa:1a:18:27:
05:3a:02:f7:cc:c3:35:f4:af:fd:df:74:c2:ab:d8:
b7:05:8c:07:07:9b:c9:9c:90:af:fa:01:a0:81:46:
90:56:c8:db:6e:04:dd:2a:35:7f:3d:ea:9c:6e:bf:
19:28:4d:60:a2:3c:d7:7b:81:c3:e1:a6:7f:f5:86:
09:83:02:e2:db:2d:f1:f2:1b:dd:39:83:cc:04:d9:
b7:cb:96:8a:b3:d2:9d:80:5e:b5:c4:bf:c0:0e:40:
f7:16:08:b4:b9:be:b8:08:8f:94:08:6f:75:41:7c:
4a:58:73:d9:ca:7e:f7:b3:b7:80:4d:4d:61:f1:e3:
5b:e7:fa:24:94:60:16:60:f1:e6:63:7b:bf:a5:61:
37:07:57:09:61:3e:9c:e4:b4:f8:92:e9:a1:d8:6c:
96:9f:51:d3:ad:21:2d:27:c1:2a:c5:5a:6d:c1:8e:
be:7d:5c:be:31:8f:6d:33:2b:04:48:89:4e:c2:47:
f5:aa:4a:05:c6:d9:59:1f:e3:96:50:d0:7e:58:c1:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8F:34:25:F9:0C:20:99:52:79:9A:25:63:A2:B6:73:C7:2B:32:C0
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9BFF4A1ED18E11EFB7248086C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/23
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.19.0-139.190.27.255
139.190.29.0-139.190.63.255
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
20:81:27:7c:c2:24:d4:2b:df:f0:e0:01:60:15:dc:83:96:fe:
24:63:4d:48:e5:89:dc:d2:2e:15:e2:a0:95:61:ab:c6:cf:10:
30:cb:f5:9d:8c:47:37:d7:09:02:d4:aa:28:eb:de:49:80:8f:
09:8d:23:0b:41:7c:c6:03:12:04:cc:54:73:ac:0e:84:c8:97:
8f:44:c9:9f:e6:dd:a7:f9:b0:ff:83:66:2d:70:3c:16:4d:ba:
af:8c:60:de:81:72:e5:33:70:f8:67:e9:88:75:dd:0f:e4:a1:
6d:44:79:d0:a6:48:21:9e:86:b8:0a:0f:1c:47:c1:a2:da:1c:
5e:4a:2a:21:d6:31:9c:06:0c:88:65:cf:63:6e:45:23:4a:a1:
09:b1:ea:df:0d:7e:ec:c2:6c:0b:ce:99:49:d7:7d:66:f6:72:
9a:d4:2e:2e:84:a2:54:f7:be:71:5a:23:73:dc:cf:01:0a:3f:
d5:b7:1a:5c:c2:59:c7:0a:dd:93:5b:2b:c6:27:00:be:77:ac:
2e:ff:d6:30:5c:3e:00:fd:e6:3a:cc:9f:0a:00:5e:a3:b0:53:
c1:8f:57:32:87:04:8c:ec:a5:ef:99:d2:41:95:7b:90:58:13:
d5:a1:36:1f:0b:c8:24:9a:20:5b:5f:23:31:51:d7:12:02:be:
2b:df:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:01 2025 by rpki-client