Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1A595B0E29C111F08A05830AC4F9AE02.roa
File: 1A595B0E29C111F08A05830AC4F9AE02.roa (raw, json)
Hash identifier: UOZA/y0Yg+NmFaPgfcDlcG6srHQa+YuxaOmQldbxP6E=
Subject key identifier: 04:EC:E8:45:A4:B1:37:FD:EC:C2:50:79:01:E2:02:30:75:CF:6D:4E
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 108E
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1A595B0E29C111F08A05830AC4F9AE02.roa
Signing time: Mon 05 May 2025 14:56:19 +0000
ROA not before: Mon 05 May 2025 14:56:19 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.9.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.32.0/24 maxlen: 24
139.190.33.0/24 maxlen: 24
139.190.34.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/24 maxlen: 24
139.190.49.0/24 maxlen: 24
139.190.50.0/24 maxlen: 24
139.190.51.0/24 maxlen: 24
139.190.52.0/24 maxlen: 24
139.190.53.0/24 maxlen: 24
139.190.54.0/24 maxlen: 24
139.190.68.0/24 maxlen: 24
139.190.69.0/24 maxlen: 24
139.190.70.0/24 maxlen: 24
139.190.71.0/24 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 22
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 03:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238 (0x108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 5 14:56:19 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6818d193-3cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:de:5d:40:e9:84:e8:49:68:65:6c:d8:cc:
74:2e:33:50:21:67:c8:77:c3:b7:11:23:8c:08:32:
a1:7c:06:23:e6:7d:35:f1:9c:8d:c1:36:ea:56:e2:
17:94:7e:91:f2:1b:51:a3:02:5c:03:52:30:76:19:
2e:3b:10:e6:c0:4b:45:67:bb:41:db:ae:df:14:60:
20:46:9b:4b:6e:d0:42:99:72:e0:77:5f:22:db:dd:
55:fd:c8:34:40:56:66:cf:74:43:f7:bc:08:94:0f:
53:fa:10:29:2a:57:b9:10:18:aa:14:4b:7e:df:78:
6c:e8:e8:e5:f8:f4:ea:75:28:ec:c0:da:ad:25:6d:
3c:05:86:91:6f:1f:cd:c8:2a:cb:5e:24:f4:6c:f0:
5b:a3:82:d5:16:1e:b9:a1:4c:08:db:e5:19:c5:29:
7a:85:81:b0:a3:79:45:ce:70:2b:dc:07:0f:69:11:
c8:cc:01:7e:94:ec:19:2c:07:ce:2b:0a:10:2a:20:
e4:5d:dc:67:2b:69:eb:95:11:cf:fa:1d:3b:c2:2d:
9f:e1:68:ae:f5:58:00:65:4b:8c:88:cf:3f:68:77:
25:84:c0:f3:04:19:89:06:33:92:cc:16:06:e5:e8:
3a:7e:ce:4b:a4:ce:3e:82:ff:9d:64:77:2b:bd:37:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:E8:45:A4:B1:37:FD:EC:C2:50:79:01:E2:02:30:75:CF:6D:4E
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1A595B0E29C111F08A05830AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.9.0/24
139.190.12.0/24
139.190.14.0/24
139.190.19.0/24
139.190.21.0-139.190.23.255
139.190.29.0/24
139.190.32.0-139.190.34.255
139.190.36.0/22
139.190.48.0-139.190.54.255
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:2d:10:72:ad:be:39:20:b5:71:8a:35:79:8d:42:30:f7:38:
7f:21:19:ba:df:4f:d5:73:69:08:28:52:29:0e:e1:d5:49:b6:
b3:e0:4f:a3:e7:c6:0f:05:81:81:8b:2f:e2:23:48:0c:26:51:
7d:8e:02:13:74:bd:b7:52:a3:0b:40:fa:e7:29:dc:65:97:9a:
59:15:a0:2b:12:7f:9f:fc:f0:e3:49:29:31:93:07:49:9b:51:
4c:cd:82:00:61:2e:99:84:81:c0:04:dc:45:0c:be:22:99:87:
b8:12:79:71:38:36:30:8c:71:02:95:e2:e7:96:bd:21:3a:d2:
2c:08:d3:10:0b:98:a5:b5:4f:fd:59:ea:19:06:e0:bf:94:f1:
8b:45:d3:e9:b7:d1:43:75:a6:19:21:e8:78:1d:3f:59:c4:65:
b5:13:6b:e8:07:22:a0:df:11:3e:0f:91:a4:4a:e5:ac:d0:e7:
9c:76:71:63:c4:37:95:23:35:6e:f7:31:ad:17:a5:a6:16:db:
bb:90:1c:87:a3:b5:5a:fd:f2:f9:af:5e:20:b4:26:83:6c:f9:
b7:cd:ce:d4:f8:d4:cf:cb:5f:b7:8b:24:58:c6:c2:e7:1e:e9:
1d:c4:da:d4:d4:75:99:67:ff:7b:50:f2:e1:6f:58:5b:e6:ff:
b4:a4:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:11:31 2025 by rpki-client