Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/51FA6F7A315B11F09172CA2FC4F9AE02.roa
File: 51FA6F7A315B11F09172CA2FC4F9AE02.roa (raw, json)
Hash identifier: mq9lR273Uz6RjR+V1N64CM0j61aatxpE3A+yzWiVHTU=
Subject key identifier: EF:A4:A1:9C:98:C6:2F:93:00:30:AE:D1:C9:A6:52:CA:83:76:DA:55
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 26EB
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/51FA6F7A315B11F09172CA2FC4F9AE02.roa
Signing time: Thu 15 May 2025 07:07:53 +0000
ROA not before: Thu 15 May 2025 07:07:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 10:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9963 (0x26eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 15 07:07:53 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=682592c9-b1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:9d:35:70:55:ce:b5:4a:cf:09:48:f6:ee:
16:52:4e:ad:49:e8:d3:92:3e:f9:0a:27:ef:1c:7c:
c4:d3:71:43:ee:ea:94:30:e2:fd:da:dc:97:c9:89:
b4:bf:07:26:32:90:d1:f5:2e:f8:d4:df:9b:84:85:
c2:8e:49:2a:2f:6c:0f:4c:35:2a:bf:51:6c:87:d7:
c2:eb:f6:97:05:d5:31:52:31:ee:e2:2f:be:f0:3f:
2d:2a:62:b2:53:e7:75:cb:e8:e7:55:61:79:bc:7a:
0c:58:9b:b7:38:f0:6a:06:a5:b3:30:69:14:0d:7b:
98:f3:90:b4:a0:7d:4e:d2:34:ce:6e:05:2e:5f:8f:
44:1b:87:30:34:2a:0d:dc:97:5f:56:9e:a6:d3:d9:
07:8c:56:cd:37:71:3b:b2:de:17:a9:b6:6b:1d:b1:
68:8d:e2:27:17:82:1e:23:dd:d0:f7:15:4c:68:27:
ec:9d:0a:75:fe:a3:93:22:6e:f7:ca:02:61:31:01:
3c:b1:01:18:81:ec:e4:48:9f:2b:e0:3c:9b:fe:fd:
2e:52:06:60:82:45:2e:a0:d5:09:45:96:78:0a:b7:
f8:94:da:fa:32:4e:35:8c:77:4b:e0:87:10:75:fe:
1a:8c:52:93:be:dc:7f:9e:e4:2b:75:0f:af:0c:d0:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:A1:9C:98:C6:2F:93:00:30:AE:D1:C9:A6:52:CA:83:76:DA:55
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/51FA6F7A315B11F09172CA2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.77.0/24
175.110.81.0/24
175.110.83.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b9:92:a5:5f:fb:08:a7:e4:af:7f:64:c2:fe:2b:72:b8:e8:
19:75:fe:a3:c0:d4:77:5f:14:2a:74:6b:1a:ce:d9:5d:01:cb:
48:2e:a1:d7:e6:3d:51:2f:d7:27:40:23:98:f7:22:b8:f7:9c:
62:8c:63:85:f6:8e:9e:85:35:07:a2:c3:c3:c6:ea:37:35:cf:
ef:d4:1b:0b:58:8c:b7:05:f7:67:2f:0c:14:8b:38:41:66:d4:
e8:ad:35:d6:36:40:f6:2d:f1:f3:92:45:18:18:22:35:00:d8:
97:fe:74:4a:5f:ca:99:ab:53:6c:71:a7:fe:0d:44:27:90:ef:
f8:24:f3:6b:ad:2f:8f:4f:50:74:9c:7a:c0:19:c3:ae:6f:42:
be:30:79:1f:a9:ed:8f:c8:fa:d0:dd:fc:2a:c6:9a:0e:1b:cf:
29:1b:aa:6b:1f:10:24:bd:50:62:69:ab:3d:22:3c:b7:69:32:
63:ba:c1:c5:c0:5e:c0:c5:66:61:8f:07:e3:54:a5:ad:0a:6f:
61:a6:71:7b:e7:be:bf:80:cf:3a:b9:20:79:c4:25:b2:73:a2:
49:ec:8d:87:a8:0c:68:62:ba:0f:b4:f5:62:7a:a1:bf:74:52:
d6:c8:63:72:be:52:cf:53:10:dc:9b:f5:08:10:a2:41:aa:36:
85:85:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:36:49 2025 by rpki-client