Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/11E8135825C911F087150A2EC4F9AE02.roa
File: 11E8135825C911F087150A2EC4F9AE02.roa (raw, json)
Hash identifier: BeCMur7Gr09/iUSlA5NXC/FY5R/9W24hXKLJxh4VLa4=
Subject key identifier: 72:09:BA:EA:F9:F9:C1:1D:9A:8A:96:1F:D6:ED:BB:77:90:08:C6:13
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1077
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/11E8135825C911F087150A2EC4F9AE02.roa
Signing time: Wed 30 Apr 2025 13:43:17 +0000
ROA not before: Wed 30 Apr 2025 13:43:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.9.0/24 maxlen: 24
139.190.10.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.18.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.28.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.32.0/24 maxlen: 24
139.190.33.0/24 maxlen: 24
139.190.34.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/24 maxlen: 24
139.190.49.0/24 maxlen: 24
139.190.50.0/24 maxlen: 24
139.190.51.0/24 maxlen: 24
139.190.52.0/24 maxlen: 24
139.190.53.0/24 maxlen: 24
139.190.54.0/24 maxlen: 24
139.190.68.0/24 maxlen: 24
139.190.69.0/24 maxlen: 24
139.190.70.0/24 maxlen: 24
139.190.71.0/24 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 22
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 09:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4215 (0x1077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Apr 30 13:43:17 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=681228f5-bbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:98:db:74:68:9f:bb:87:0c:ce:50:60:cf:
8b:f2:7d:06:cd:b3:ae:65:74:11:24:88:2f:9a:01:
4c:02:61:29:2e:6c:a3:f4:bc:5b:ae:4f:07:2a:84:
fb:0f:42:75:67:14:c6:f3:b1:e3:21:45:1b:6e:ef:
37:4c:55:80:64:97:ef:22:ab:8a:7c:8a:68:15:06:
7a:a2:9e:e4:31:00:f5:3b:5a:87:4b:70:ea:ba:71:
47:64:8b:fd:8a:72:f7:a5:44:ed:08:e0:db:3c:d5:
76:fc:a6:07:71:b5:72:2c:f3:ed:cd:37:78:0e:4a:
36:c6:fc:f1:34:93:a4:a9:7d:f4:4e:f6:a9:a3:6f:
ad:94:6a:f0:74:73:7e:30:c2:8e:0f:13:46:63:06:
a0:a4:0a:88:62:17:e3:c4:09:04:0e:84:4c:61:57:
ba:34:60:3d:d3:91:65:a9:a5:a8:88:3a:4f:3d:b9:
0d:5e:90:a6:c0:5a:bf:cd:be:d2:58:5d:9d:2d:12:
a4:cc:bd:d4:4a:e2:38:8e:8e:23:96:2f:ab:37:70:
89:c1:0a:b7:f5:5e:a3:79:0d:cc:93:80:02:46:33:
ee:66:a5:71:d0:0a:1c:fb:cf:f7:bc:8b:aa:8b:ff:
0f:47:97:7e:b4:b9:f8:0b:77:d0:41:5b:96:5f:de:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:09:BA:EA:F9:F9:C1:1D:9A:8A:96:1F:D6:ED:BB:77:90:08:C6:13
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/11E8135825C911F087150A2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.9.0-139.190.12.255
139.190.14.0/24
139.190.18.0/23
139.190.21.0-139.190.23.255
139.190.28.0/23
139.190.32.0-139.190.34.255
139.190.36.0/22
139.190.48.0-139.190.54.255
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
25:28:ca:84:62:b7:d9:ad:99:9b:c6:56:86:38:99:49:f9:2f:
08:8a:4a:99:9f:c6:5f:f2:d9:ab:36:6d:42:f7:15:e2:91:46:
f9:55:11:37:23:93:c4:f8:7c:a7:8a:a8:27:ea:2a:12:a4:4a:
59:fd:45:90:65:5e:bf:c0:8a:72:d6:c1:5d:69:41:4d:cf:3e:
43:00:e9:c4:bc:48:e6:1c:31:43:fa:3a:7b:95:d8:f6:85:aa:
f7:42:f9:f4:06:6e:50:e2:f3:ed:5d:c1:9a:2a:98:54:a0:69:
cc:4e:68:01:79:cd:90:db:9e:a6:f9:1b:fc:fe:cc:7c:9d:30:
5b:b4:54:2a:13:3a:99:6b:42:3c:ff:a3:32:8c:0a:00:a3:c0:
55:72:c4:0e:b4:71:74:04:3a:e1:7e:1f:df:28:08:91:cf:5e:
ba:87:1c:97:27:c2:b2:65:03:ee:71:1f:76:dd:37:8d:e6:8f:
9a:6e:7b:55:07:3d:f6:88:f5:69:b8:f2:c0:ef:cc:99:04:80:
a1:f8:5b:0c:e7:fc:34:35:16:0a:80:7a:dd:04:4f:4a:09:75:
2a:a3:16:ff:91:a2:90:80:4f:03:be:e6:7a:6a:f2:45:39:d3:
e3:57:24:d1:67:0a:17:88:72:6c:36:75:14:8a:0b:a1:b1:0c:
37:d7:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:16:21 2025 by rpki-client