Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3F213CD4F2AF11EF888C4F5DC4F9AE02.roa
File: 3F213CD4F2AF11EF888C4F5DC4F9AE02.roa (raw, json)
Hash identifier: YgW8ooq37MgN+FyqNXT0GUYeSrrYe5E0otHjZYcFu0o=
Subject key identifier: B3:A6:44:CD:A1:E7:E5:74:A5:19:68:03:63:79:19:95:F5:D3:B0:D9
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0EFD
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3F213CD4F2AF11EF888C4F5DC4F9AE02.roa
Signing time: Mon 24 Feb 2025 12:59:57 +0000
ROA not before: Mon 24 Feb 2025 12:59:57 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.9.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.32.0/24 maxlen: 24
139.190.33.0/24 maxlen: 24
139.190.34.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.52.0/22 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 14:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3837 (0xefd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Feb 24 12:59:57 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67bc6d4c-4635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:60:5e:cf:bf:73:e7:20:85:85:df:98:0f:
f3:f7:96:8e:6b:37:25:61:73:2a:f0:27:df:f1:14:
e7:c9:0e:ca:7f:db:7f:29:62:2d:64:63:37:0c:cf:
18:f4:e0:7c:3b:10:e8:50:95:66:73:ee:ae:dc:d2:
01:5d:45:4b:ae:d8:e6:1c:fd:be:62:43:9c:3c:f8:
cf:b0:d1:e2:b2:cb:ec:0f:4c:a9:fc:94:55:2f:f5:
61:97:11:42:d4:bf:47:d3:15:52:a2:5c:d7:92:51:
69:e2:e1:98:7b:b3:7f:aa:70:ff:79:7c:a2:91:66:
bc:fd:34:15:08:1c:a6:17:eb:6f:b1:c2:bd:fe:69:
81:da:e6:ea:c6:c7:08:a0:8b:07:e8:c7:0e:41:02:
78:b7:28:09:bc:d0:61:d1:39:20:1b:6b:cc:d0:ed:
0c:e5:c3:7d:16:ae:95:52:af:1a:3b:83:0a:fc:13:
cc:96:f7:a2:d8:ea:3c:41:7d:e4:29:68:eb:3f:89:
b8:9d:0a:88:d8:5c:13:6b:16:47:a6:c0:b7:21:44:
2d:14:75:53:99:6e:ab:5a:ef:d6:de:36:0a:ff:fe:
78:56:af:19:4b:d3:24:78:06:4a:85:a8:b4:48:27:
5e:34:87:ff:09:b7:c2:77:52:56:34:33:45:1c:6d:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:44:CD:A1:E7:E5:74:A5:19:68:03:63:79:19:95:F5:D3:B0:D9
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3F213CD4F2AF11EF888C4F5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/23
139.190.11.0/24
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.20.0/24
139.190.24.0/22
139.190.30.0-139.190.34.255
139.190.36.0/22
139.190.48.0/21
139.190.68.0/22
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2a:40:20:18:32:61:db:8a:18:db:5d:97:25:90:b5:64:f3:
db:9a:72:e3:45:78:45:ec:a0:42:c4:ae:42:e9:76:c3:65:d3:
88:a6:9a:7f:2c:8b:2e:94:f6:09:da:2b:59:49:d6:29:2a:ef:
5a:14:c8:c3:e1:17:a3:25:5b:0b:f3:3b:1a:7b:d4:4e:1f:99:
3d:b4:66:eb:44:3d:6c:61:2a:5a:70:7a:5e:2c:d8:e0:5c:f7:
dc:d7:da:9d:77:b1:fc:a4:0e:83:f7:e2:f8:84:99:68:77:d3:
5d:5d:45:73:47:d5:c0:f9:b6:95:a5:f7:ae:1e:76:88:97:2c:
4d:34:b1:c9:d4:1c:1c:e8:69:66:58:4a:cf:26:18:3c:3d:29:
43:23:54:55:de:ae:88:f5:83:9c:7f:ce:dc:73:f6:a4:4d:3d:
f7:57:b9:a2:a2:dc:96:b8:98:5a:eb:3a:34:04:fc:c8:97:1d:
1f:f3:9a:fd:27:23:02:18:74:f2:93:fe:0b:0d:84:ad:33:1f:
aa:d5:f1:06:da:14:9b:6d:35:22:72:24:36:b4:7d:33:97:d2:
aa:bf:f2:dc:62:b0:30:b3:1c:e0:8f:54:1d:8e:cf:85:a8:59:
81:d1:f1:be:c2:19:e1:b2:81:53:62:0a:8f:d0:ee:da:e1:4d:
54:c9:be:82
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgICDv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjUwMjI0MTI1OTU3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JjNmQ0Yy00NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAospgXs+/c+cghYXfmA/z95aOazclYXMq8Cff8RTnyQ7Kf9t/KWItZGM3DM8Y
9OB8OxDoUJVmc+6u3NIBXUVLrtjmHP2+YkOcPPjPsNHissvsD0yp/JRVL/VhlxFC
1L9H0xVSolzXklFp4uGYe7N/qnD/eXyikWa8/TQVCBymF+tvscK9/mmB2ubqxscI
oIsH6McOQQJ4tygJvNBh0TkgG2vM0O0M5cN9Fq6VUq8aO4MK/BPMlvei2Oo8QX3k
KWjrP4m4nQqI2FwTaxZHpsC3IUQtFHVTmW6rWu/W3jYK//54Vq8ZS9MkeAZKhai0
SCdeNIf/CbfCd1JWNDNFHG3YIQIDAQABo4IC3zCCAtswHQYDVR0OBBYEFLOmRM2h
5+V0pRloA2N5GZX107DZMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvM0YyMTNDRDRG
MkFGMTFFRjg4OEM0RjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E
WjBYMFYEAgABMFADBAGLvggDBACLvgsDBACLvg0DBACLvg8DBACLvhEDBACLvhQD
BAKLvhgwDAMEAYu+HgMEAIu+IgMEAou+JAMEA4u+MAMEAou+RAMEAIu+7zANBgkq
hkiG9w0BAQsFAAOCAQEAjipAIBgyYduKGNtdlyWQtWTz25py40V4ReygQsSuQul2
w2XTiKaafyyLLpT2CdorWUnWKSrvWhTIw+EXoyVbC/M7GnvUTh+ZPbRm60Q9bGEq
WnB6XizY4Fz33NfanXex/KQOg/fi+ISZaHfTXV1Fc0fVwPm2laX3rh52iJcsTTSx
ydQcHOhpZlhKzyYYPD0pQyNUVd6uiPWDnH/O3HP2pE0991e5oqLclriYWus6NAT8
yJcdH/Oa/ScjAhh08pP+Cw2ErTMfqtXxBtoUm201InIkNrR9M5fSqr/y3GKwMLMc
4I9UHY7PhahZgdHxvsIZ4bKBU2IKj9Du2uFNVMm+gg==
-----END CERTIFICATE-----
Generated at Wed May 14 09:20:50 2025 by rpki-client