Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E18530EE2A3A11F09AACF47DC4F9AE02.roa
File: E18530EE2A3A11F09AACF47DC4F9AE02.roa (raw, json)
Hash identifier: oqUtWRSYYUmW1PxuyRVUbNy/P9ws5OCgXi2JPRZUERE=
Subject key identifier: E8:FB:F3:42:7D:EF:FF:19:C1:B3:81:85:A4:B1:89:F3:8D:EB:EE:4C
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1097
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E18530EE2A3A11F09AACF47DC4F9AE02.roa
Signing time: Tue 06 May 2025 05:28:03 +0000
ROA not before: Tue 06 May 2025 05:28:03 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 139.190.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 05:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4247 (0x1097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 6 05:28:03 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=68199de3-e603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:0e:0b:7f:83:a4:ed:ce:14:6c:fd:9f:c7:
4e:56:89:af:3e:5c:c9:0d:6e:81:26:bc:0a:28:5b:
6b:df:4c:b9:4d:99:11:f4:95:b1:2d:65:55:25:07:
3d:bc:e6:76:38:cf:b1:5c:42:5f:b4:8c:5c:23:df:
e8:ea:ff:ac:f9:07:0e:46:a5:6c:63:80:fc:9a:3d:
3b:0d:6b:45:d3:4b:bc:75:b8:f9:8e:0b:01:2f:6a:
ef:d2:b4:3a:30:27:55:b9:fa:bc:63:15:7c:2b:74:
1b:37:4e:a5:11:57:d4:ad:2b:fe:12:0c:bd:b2:d2:
a1:22:e3:b3:97:27:05:5c:c6:fd:be:f8:a2:97:ba:
97:f6:7b:37:2d:0c:49:67:de:82:94:1a:f6:c5:0b:
70:f7:5d:ee:2b:00:a0:6f:91:9c:8b:57:9d:c1:1f:
b7:c8:31:9f:00:ca:44:3f:3b:29:f1:b8:72:c6:b6:
6c:70:04:a2:d7:81:25:49:2b:67:c8:3b:15:34:8a:
7d:cb:15:6d:b9:34:a2:09:9b:fe:b2:e7:fb:84:68:
80:b0:8b:db:92:b8:88:62:4d:6b:1b:2a:c5:3f:7e:
52:fb:0a:86:8d:09:e2:f9:9b:d2:49:27:8d:3b:99:
54:94:18:11:d3:f7:eb:87:67:25:c7:aa:5c:62:2b:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:F3:42:7D:EF:FF:19:C1:B3:81:85:A4:B1:89:F3:8D:EB:EE:4C
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E18530EE2A3A11F09AACF47DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.80.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:17:30:24:fc:dc:d5:03:35:de:9f:be:bd:c4:66:8f:4c:a6:
66:9f:2a:d1:4f:f4:48:12:6c:74:8b:66:a9:b8:cb:ac:26:cc:
5f:87:85:b2:a4:e6:99:05:e5:1f:1c:61:2a:84:30:a2:a4:f5:
3e:6d:8e:df:b7:71:a3:a3:ae:67:97:31:da:b1:d9:5f:79:a1:
dc:ab:14:95:ee:b3:ca:79:d6:3f:f9:21:c2:2f:99:e2:f7:29:
16:37:ca:d8:45:93:bc:2d:a7:12:f2:ef:5b:b4:24:9d:f8:25:
eb:c0:80:ae:44:e2:b4:9a:00:c9:d0:af:c8:ee:bc:ca:14:ed:
a1:bf:66:31:88:5d:c2:15:64:09:cb:e2:34:b9:7f:1c:8d:02:
c0:fc:79:65:02:12:75:f9:61:3a:f2:fc:47:7a:92:5e:93:89:
35:56:5b:08:83:83:ab:9e:c0:da:3d:7b:4b:31:66:df:fa:1d:
9c:1b:76:eb:ed:5d:e5:58:f0:97:4f:46:f3:1a:6b:f1:bd:7d:
6d:45:39:d3:0e:03:1f:c7:9c:ae:bb:e1:2d:14:cb:99:e5:de:
37:07:b5:fd:6b:e2:9f:80:96:8d:41:bc:6a:6a:17:f2:dc:1c:
70:dc:75:b8:51:d1:e5:08:02:6d:00:e5:7e:20:67:ae:39:c3:
c5:74:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:50:02 2025 by rpki-client