Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/445F8C3C308011F0BE869912C4F9AE02.roa
File: 445F8C3C308011F0BE869912C4F9AE02.roa (raw, json)
Hash identifier: UahDmBrDzOuA2udRXI1LjpfdGmFedN5Wt/O9apy0AZI=
Subject key identifier: F6:C3:AC:B9:C5:B9:B9:DE:32:75:5E:67:C0:DF:A8:BF:B0:DA:BE:EC
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 26E3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/445F8C3C308011F0BE869912C4F9AE02.roa
Signing time: Wed 14 May 2025 11:02:14 +0000
ROA not before: Wed 14 May 2025 11:02:14 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 07:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9955 (0x26e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 14 11:02:14 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=68247836-3949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:01:d5:5c:8d:ff:8e:9d:08:ca:e1:cc:f7:
5c:4e:f2:b7:0c:ae:e7:69:26:e2:17:2c:b1:3e:b6:
3d:93:9e:b1:13:ec:6b:d5:55:09:cd:68:23:ed:cf:
b7:c4:16:2f:ea:2b:ad:bc:49:3e:37:d5:99:aa:54:
68:60:48:e2:2c:d3:c8:a4:46:4d:f6:5e:f8:93:a0:
07:af:36:cb:ac:1c:98:f6:13:91:1b:8b:57:b8:f9:
2a:9c:3f:fc:0a:35:c8:f0:0e:06:ea:e6:b9:97:a5:
07:d2:53:61:2b:d8:80:47:d5:0e:6f:93:35:f1:48:
96:c2:06:7e:d7:43:56:c1:e6:77:1c:35:a4:fe:f0:
d2:a0:74:db:00:95:94:b5:36:fe:90:26:14:f7:c1:
9a:6b:80:44:56:8f:ae:ea:b8:99:8c:ac:c3:60:62:
e1:cd:0f:72:3e:5d:46:b8:50:7e:44:3b:7a:39:0c:
d0:26:ae:42:11:5c:87:2a:11:3e:ba:6a:7b:19:e3:
99:30:21:47:d2:0f:aa:6d:9d:36:fa:1f:b7:71:8b:
b6:c0:ba:53:0c:7c:52:99:23:70:f1:7f:4d:8d:ad:
3c:f4:1f:b1:43:e4:10:ea:24:be:b0:ee:a3:27:f9:
6b:3d:31:72:bf:1c:d1:92:60:a1:29:f8:2a:ad:63:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:AC:B9:C5:B9:B9:DE:32:75:5E:67:C0:DF:A8:BF:B0:DA:BE:EC
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/445F8C3C308011F0BE869912C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.224.0/24
115.167.77.0/24
175.110.81.0/24
175.110.83.0/24
202.92.18.0/24
223.29.235.0-223.29.236.255
Signature Algorithm: sha256WithRSAEncryption
70:f8:ec:d6:25:25:17:6d:44:5e:1f:ae:15:50:e0:f9:e9:ea:
a0:22:ca:a0:f4:f0:1e:7d:02:d7:cd:49:99:be:e0:17:50:14:
9a:c6:c2:11:2d:3a:8f:f4:b5:7c:70:48:71:11:8b:3f:2a:ae:
b2:98:94:0e:4e:22:0f:a5:46:58:96:8e:f4:97:b8:b9:cc:86:
2f:2e:1e:de:66:6c:2e:14:84:0c:2a:d0:bc:f6:4d:ec:22:38:
24:3e:f9:a4:30:8e:69:8f:24:9b:1c:0a:18:fb:e8:d5:0f:6c:
cf:f7:f9:c3:31:43:a8:6d:0d:00:b6:7e:7d:d5:57:c0:93:8d:
63:74:3a:f4:a4:44:60:c3:63:6f:ee:0d:88:52:02:fd:a0:e4:
19:a7:40:fb:5f:d7:d3:2e:c5:92:e9:ec:43:2e:99:11:b3:d1:
b5:b5:fd:f0:8e:fc:6e:9a:54:c7:c4:b6:5a:4f:86:21:ff:12:
7c:ad:8b:51:d4:5c:b9:dc:c7:e6:52:97:80:f8:fe:1b:ec:be:
d6:a3:a7:15:54:e4:6e:82:6f:15:45:b4:61:7b:f9:a5:98:a5:
4f:bd:bf:17:ce:4c:91:56:cb:d8:79:86:9c:0b:af:55:9c:e4:
e8:9d:38:2b:12:39:5c:b0:79:3d:c9:05:17:54:59:c8:d2:e5:
d9:0a:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:58:00 2025 by rpki-client