Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/05A303B4296111F0B256CB22C4F9AE02.roa
File: 05A303B4296111F0B256CB22C4F9AE02.roa (raw, json)
Hash identifier: nxRh4FPPpBvpMlk1XKyUCFDNzUf0gz1is7AwshVP30M=
Subject key identifier: EB:C1:23:95:59:5A:86:67:4F:FF:38:90:1B:A3:F7:C5:07:23:5B:95
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 109D
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/05A303B4296111F0B256CB22C4F9AE02.roa
Signing time: Tue 06 May 2025 05:31:09 +0000
ROA not before: Tue 06 May 2025 05:31:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 139.190.1.0/24 maxlen: 24
139.190.3.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.35.0/24 maxlen: 24
139.190.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 12 May 2025 16:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4253 (0x109d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 6 05:31:09 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=68199e9c-6b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:34:59:5d:cb:25:15:cf:ab:43:a2:93:ba:
56:50:06:ba:68:fd:d4:62:06:a0:30:52:07:7a:c2:
f6:d6:bf:fa:2b:b0:78:16:cb:0d:c7:95:82:b0:31:
1b:a7:b7:bd:10:2e:3e:5b:d5:36:6f:f8:19:38:44:
e7:79:9f:85:e7:14:28:9d:6f:0d:93:b6:1d:24:e2:
01:c4:ba:4a:02:77:a1:2d:08:81:6f:ab:63:66:d0:
25:69:c5:f6:b8:84:7c:df:89:cf:3e:6e:0f:18:be:
b7:3a:73:9b:ff:14:d1:3c:6d:e5:1d:43:67:18:f3:
5a:07:80:6a:90:4c:da:42:83:98:bd:f7:23:c3:7b:
2d:a4:87:0c:9f:60:07:f7:f4:d8:c1:8a:b0:89:54:
19:bc:29:fe:dc:47:c5:de:49:3c:98:3d:42:f2:e4:
82:93:11:2f:77:98:f4:25:0a:e8:3e:66:b4:4c:dc:
f0:dc:c4:46:f5:46:2d:c3:ca:45:b7:01:73:c4:4b:
88:ec:a7:41:9d:f5:51:cc:c6:a4:33:15:6d:2a:ab:
a2:31:65:ff:3e:35:08:62:57:fd:55:f0:a2:01:b9:
a9:c7:94:67:3b:b5:59:ee:e8:9f:0f:ed:32:f0:d1:
9c:c1:1b:75:23:30:eb:94:56:a2:27:23:a6:91:76:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C1:23:95:59:5A:86:67:4F:FF:38:90:1B:A3:F7:C5:07:23:5B:95
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/05A303B4296111F0B256CB22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.1.0/24
139.190.3.0/24
139.190.12.0/22
139.190.17.0/24
139.190.20.0/24
139.190.30.0/24
139.190.35.0/24
139.190.124.0/22
Signature Algorithm: sha256WithRSAEncryption
19:15:fe:30:ea:e4:0a:da:75:aa:35:5d:e6:f2:aa:a0:8f:e6:
b4:cb:4f:c2:24:3f:2f:23:cb:b2:d2:68:58:fb:94:87:3f:0a:
e8:84:8c:43:bf:0a:38:e0:73:b3:92:9a:8d:31:14:0d:aa:38:
a0:8d:2a:81:88:2a:9e:29:1f:68:d6:a2:da:c0:2f:a1:df:bd:
5b:99:77:fd:d8:82:3d:6b:8b:c7:80:95:a3:f4:ef:ea:73:7e:
0c:60:aa:74:be:e8:aa:27:a6:0b:3d:67:e8:11:fd:a1:2b:68:
89:95:ab:c5:73:de:2f:a7:04:38:9f:60:c0:9a:63:98:b7:fa:
9d:bf:c5:18:8b:22:43:df:c9:a9:ef:1d:e4:9d:1c:a2:6c:1d:
64:3e:2e:11:ff:03:1f:09:af:f0:1a:5f:a6:25:43:c6:c5:8b:
c8:85:f8:ce:67:75:da:fc:be:ea:8b:c3:b2:e8:c8:54:af:76:
81:14:c4:6e:8c:19:1c:c2:a4:4c:e3:06:40:60:97:45:4e:e8:
25:43:4b:2e:df:fc:1d:67:a6:57:0b:8c:e5:88:75:26:94:9d:
e7:e1:7c:95:cb:87:ee:5e:89:c0:14:fd:7a:02:41:a0:e6:94:
f9:ba:dc:cb:1b:8f:4a:00:ec:dc:18:87:f7:d8:21:62:d3:34:
fb:0f:49:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 14 18:26:28 2025 by rpki-client