Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/721068662F4711F0A103F281C4F9AE02.roa
File: 721068662F4711F0A103F281C4F9AE02.roa (raw, json)
Hash identifier: ifpHIhzBAJKi1+xTNujUFat+JDoksL+eHwSW4m73R78=
Subject key identifier: 1B:7F:F7:0F:21:76:FE:44:BF:E4:14:AA:B4:AB:D4:3D:A0:EE:B5:59
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 26D3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/721068662F4711F0A103F281C4F9AE02.roa
Signing time: Mon 12 May 2025 15:49:30 +0000
ROA not before: Mon 12 May 2025 15:49:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 200010
IP address blocks: 113.203.242.0/24 maxlen: 24
175.110.64.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 05:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9939 (0x26d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 12 15:49:30 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6822188a-5a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:ff:1d:90:c0:20:d5:74:15:a0:93:b7:60:
dd:a9:c0:8f:c1:ec:87:c5:ac:18:ce:72:6e:67:0d:
c2:7c:ea:27:30:17:7e:6f:ce:ad:37:74:75:7c:35:
31:c6:04:b9:7f:c2:88:07:2e:94:b6:94:11:a1:79:
82:c1:db:a2:0d:df:88:4d:3e:8a:47:a8:86:02:05:
d9:bb:e9:c4:9c:0a:0d:df:36:97:32:48:42:e8:24:
e7:6b:9a:92:7f:80:33:b6:ff:37:5a:7b:73:b5:fc:
ff:1e:cd:4e:92:3e:77:02:3c:e4:25:93:e9:53:9f:
c0:b8:83:ba:f9:6b:d8:3d:a6:29:d4:73:a4:10:c7:
87:37:b4:50:4e:23:47:b7:ac:a2:6b:55:aa:0f:f3:
97:b6:75:39:0f:0f:34:ff:e1:f4:34:51:9b:3b:47:
c8:e7:cc:57:cb:bd:b5:41:45:56:cf:a5:ba:e0:6b:
1e:73:47:53:b4:4a:f5:15:70:09:11:6f:10:f7:c4:
af:27:70:ba:6a:26:81:d3:3f:02:30:1a:ed:e2:d5:
68:9c:1b:2d:46:a1:38:c3:70:8e:e4:a0:ca:47:e2:
55:e3:98:f4:19:8f:e1:d1:16:8e:06:7a:d1:24:98:
f5:1c:37:e8:3d:09:46:05:9d:dd:2c:e7:94:5a:c0:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7F:F7:0F:21:76:FE:44:BF:E4:14:AA:B4:AB:D4:3D:A0:EE:B5:59
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/721068662F4711F0A103F281C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.242.0/24
175.110.64.0/24
175.110.91.0/24
202.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:11:18:5f:8e:b9:a1:cf:81:ca:1f:65:27:f5:91:39:6b:aa:
a6:dc:5b:f1:d8:12:9c:c9:5d:22:b3:e0:eb:c8:6b:e7:53:08:
41:d1:03:ca:d8:9b:a8:8d:65:cd:9a:30:3f:fc:21:aa:5d:40:
d3:87:b3:50:dc:1e:3c:38:68:e3:88:10:57:bb:c6:35:6d:e9:
54:59:e7:9b:67:f8:d4:16:72:cf:11:85:82:c7:66:a4:3d:27:
06:03:72:80:ae:94:21:35:c3:a9:9a:fa:30:d3:16:e5:61:79:
55:46:d9:23:3f:72:70:22:78:e6:81:b5:b6:ee:a1:b3:3b:f9:
1d:3e:f6:cd:52:e6:da:e2:53:6a:1a:ff:91:ca:b2:1c:b0:b9:
a6:c9:c7:8a:30:cd:34:d3:a6:df:01:5a:c7:cb:e0:0c:d1:88:
1b:51:fc:93:83:50:bb:be:ef:7a:13:95:36:aa:5a:86:d5:eb:
68:ab:01:64:d1:2f:ce:bb:dd:70:45:9c:15:1a:93:44:0a:b2:
32:95:19:a9:93:6f:c6:8a:a4:e0:4d:7d:d4:52:fd:18:9d:20:
49:3d:88:14:c4:0b:01:02:4b:1f:59:61:ec:23:c3:fb:7c:e4:
9a:3f:46:60:64:97:c5:a4:48:18:9a:a3:83:44:30:ee:09:71:
bd:4a:52:4a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICJtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNTEyMTU0OTMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODIyMTg4YS01YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPr/HZDAINV0FaCTt2DdqcCPweyHxawYznJuZw3CfOonMBd+b86tN3R1fDUx
xgS5f8KIBy6UtpQRoXmCwduiDd+ITT6KR6iGAgXZu+nEnAoN3zaXMkhC6CTna5qS
f4Aztv83Wntztfz/Hs1Okj53AjzkJZPpU5/AuIO6+WvYPaYp1HOkEMeHN7RQTiNH
t6yia1WqD/OXtnU5Dw80/+H0NFGbO0fI58xXy721QUVWz6W64Gsec0dTtEr1FXAJ
EW8Q98SvJ3C6aiaB0z8CMBrt4tVonBstRqE4w3CO5KDKR+JV45j0GY/h0RaOBnrR
JJj1HDfoPQlGBZ3dLOeUWsDJFwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBt/9w8h
dv5Ev+QUqrSr1D2g7rVZMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNzIxMDY4NjYy
RjQ3MTFGMEExMDNGMjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABxy/IDBACvbkADBACvblsDBADKXBQwDQYJKoZIhvcNAQEL
BQADggEBAF4RGF+OuaHPgcofZSf1kTlrqqbcW/HYEpzJXSKz4OvIa+dTCEHRA8rY
m6iNZc2aMD/8IapdQNOHs1DcHjw4aOOIEFe7xjVt6VRZ55tn+NQWcs8RhYLHZqQ9
JwYDcoCulCE1w6ma+jDTFuVheVVG2SM/cnAieOaBtbbuobM7+R0+9s1S5triU2oa
/5HKshywuabJx4owzTTTpt8BWsfL4AzRiBtR/JODULu+73oTlTaqWobV62irAWTR
L8673XBFnBUak0QKsjKVGamTb8aKpOBNfdRS/RidIEk9iBTECwECSx9ZYewjw/t8
5Jo/RmBkl8WkSBiao4NEMO4Jcb1KUko=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:00:11 2025 by rpki-client