Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/BC2B6092E2EC11EFB2A66168C4F9AE02.roa
File: BC2B6092E2EC11EFB2A66168C4F9AE02.roa (raw, json)
Hash identifier: l6d0nqEyyAgSxQ6QTZylp3C4CV+9OVECSJ/HehR8abc=
Subject key identifier: CD:A8:50:B3:E9:1B:98:D5:71:96:0D:48:E4:FB:34:91:C1:8A:49:7D
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0DCD
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/BC2B6092E2EC11EFB2A66168C4F9AE02.roa
Signing time: Tue 04 Feb 2025 11:39:47 +0000
ROA not before: Tue 04 Feb 2025 11:39:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 11:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3533 (0xdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Feb 4 11:39:47 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a1fc83-a17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:43:ad:b7:48:f5:0c:2b:a4:d7:d3:58:a2:
50:c6:f7:18:3a:5e:02:04:5b:f0:75:35:9d:79:37:
27:d5:01:9f:cd:10:18:bc:63:e3:20:fc:d1:4f:07:
2f:f2:9e:6e:a5:96:66:d7:3f:13:e0:11:86:78:3c:
34:d4:cc:82:a8:7d:73:ce:db:e1:9a:24:14:ad:5c:
a9:26:27:4f:3d:9e:fc:61:4c:bc:44:3b:94:f0:4c:
14:b3:f6:d7:58:b0:c4:f7:18:97:3d:44:2b:70:9e:
f6:cc:09:91:d9:13:4a:e9:e0:a4:06:43:58:de:9a:
94:28:f2:ea:6a:93:f4:3c:21:08:1f:29:18:87:7c:
3d:8c:16:84:a5:15:9d:b0:98:27:60:bf:e1:56:b4:
c5:ac:69:05:f0:7f:4d:07:f5:f3:bc:7f:35:99:83:
c9:09:5f:4d:02:8a:ad:b6:7c:de:2e:8d:12:85:15:
0a:77:d4:68:4a:1c:50:ab:49:14:79:b0:17:50:06:
98:f2:39:2d:46:c8:18:1c:b4:eb:cf:df:32:7f:6a:
79:5c:96:2e:cf:e6:83:90:d2:18:b2:77:41:f6:43:
c9:f5:a4:9a:1d:c4:70:f6:ef:8f:7b:b1:08:01:f7:
85:42:f9:37:35:d8:e4:9d:2d:eb:a7:04:c4:04:d6:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:50:B3:E9:1B:98:D5:71:96:0D:48:E4:FB:34:91:C1:8A:49:7D
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/BC2B6092E2EC11EFB2A66168C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.19.0-139.190.27.255
139.190.29.0-139.190.31.255
Signature Algorithm: sha256WithRSAEncryption
27:b1:ce:8b:9b:2e:30:b3:bf:a2:20:74:41:33:3b:85:74:a3:
15:9e:6e:d4:de:e8:5a:91:08:24:70:bb:c6:b8:fc:8c:e1:bf:
12:3c:c2:f3:c7:63:22:5c:9a:6b:6d:d2:30:7a:7d:3d:43:fe:
fe:23:b8:22:b3:93:b2:3e:bc:47:ed:e1:d5:31:8b:6c:37:72:
6e:6e:be:de:7e:89:34:49:37:6a:5e:8e:dd:71:e6:83:86:4b:
fb:81:c9:51:7c:24:16:5f:bc:f1:44:f2:42:e7:ea:8a:a7:de:
b8:6f:99:5d:9c:3b:9d:ec:90:ca:30:5b:86:35:6c:39:ab:84:
c4:11:3e:2a:e3:87:68:fa:b7:6a:aa:4c:92:bd:13:25:4c:8c:
6b:86:f5:69:42:2d:0c:99:2f:02:fb:88:b2:79:25:dd:a5:6c:
1b:f3:9a:f0:81:c1:2f:85:a2:fd:e7:d7:65:7f:7c:36:1d:b7:
49:43:c4:4e:b5:82:9b:0f:63:cc:77:a0:e6:68:fe:c3:ca:23:
01:37:bc:ae:73:9e:89:80:1d:a6:9c:17:64:d9:fd:12:5c:cc:
7b:68:ab:45:e6:7c:64:6b:a6:53:d5:77:4b:70:ad:ff:5a:5a:
0e:7a:ff:16:a9:3d:d0:b5:63:d5:a0:34:ed:9c:eb:f4:0c:f1:
a4:6e:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:22:49 2025 by rpki-client