Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA3FFB78273811F08D4E1C2FC4F9AE02.roa
File: FA3FFB78273811F08D4E1C2FC4F9AE02.roa (raw, json)
Hash identifier: CkiHU2bnZP+LKwX3ZQzy4+0o4v7rECAmLryjetn7Dp8=
Subject key identifier: 65:BE:12:83:FE:28:CA:23:8D:02:BD:29:71:38:E7:8C:6A:39:0B:BF
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1084
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA3FFB78273811F08D4E1C2FC4F9AE02.roa
Signing time: Fri 02 May 2025 09:37:56 +0000
ROA not before: Fri 02 May 2025 09:37:56 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213659
IP address blocks: 139.190.10.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 12:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4228 (0x1084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 2 09:37:56 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=68149274-c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:7a:8c:17:6b:47:7a:5c:dc:ca:f8:fc:79:
13:f5:16:f1:b6:28:48:66:2e:65:fe:42:c8:b3:05:
c7:fb:b4:25:6f:ef:ea:f4:9d:74:7f:8e:19:49:9c:
d2:3e:7a:ba:08:22:61:8d:27:02:aa:66:b3:b9:4d:
6e:25:ad:39:ad:33:ca:80:85:69:06:41:60:bf:bd:
b2:36:3d:2b:d2:d3:ed:16:fb:5f:ae:fe:e3:ae:99:
2c:c9:79:d6:20:11:ed:d2:4e:66:74:7a:af:94:e9:
7b:02:84:00:d7:64:46:72:c9:d5:8b:f1:72:50:d0:
51:4d:98:64:de:ca:e6:c3:c8:ac:e6:94:7d:d4:44:
b8:ed:ac:e2:47:0f:dc:0a:18:36:c3:d7:a9:be:c7:
67:c3:1e:6b:fd:db:52:55:99:da:11:7d:66:66:7e:
db:6d:47:4d:97:1e:62:13:44:e3:ae:3c:ef:ae:da:
c2:4a:a5:94:24:1e:15:ad:8a:47:96:ea:11:f5:4c:
1b:15:3e:34:f8:c3:e2:4d:51:1e:95:db:f1:88:2d:
0f:52:66:c8:c4:1d:58:ea:2e:8f:8f:44:42:97:34:
d0:cf:90:f3:4f:61:81:35:7b:fb:c2:90:c3:24:8f:
42:bc:94:9b:7f:6b:24:01:8f:d9:ec:de:ff:88:65:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:12:83:FE:28:CA:23:8D:02:BD:29:71:38:E7:8C:6A:39:0B:BF
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA3FFB78273811F08D4E1C2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.10.0/23
139.190.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bf:90:95:0d:6a:b0:0a:cd:41:ec:c8:27:c1:e2:26:08:85:
15:74:b0:4d:23:28:fa:3c:77:2f:1d:51:e3:e6:6a:7b:ce:9d:
18:57:29:19:1b:3e:a2:64:54:51:35:59:a6:0e:a6:0f:87:5d:
9c:7d:a0:8c:2a:96:cc:de:c5:10:49:d9:af:e4:a3:d7:7e:8b:
cd:9d:7f:58:95:c6:49:83:87:0f:bc:67:19:d9:c3:ae:90:37:
3c:51:7d:10:4b:c4:2e:c7:63:b3:42:c4:75:06:1c:ed:be:1b:
56:31:d2:13:6b:a0:de:1f:cc:36:2f:f1:5b:35:5d:c2:a2:bc:
d8:cf:ec:a7:c2:0b:ff:b3:22:b6:26:38:bf:81:30:18:71:dd:
60:0a:a5:95:04:e4:f9:79:f3:d4:85:c8:74:97:e4:a9:0d:b9:
07:7e:96:de:cf:be:6e:65:58:94:db:b2:60:a5:d9:e5:7d:f7:
ee:b8:83:da:77:5f:4b:1e:dc:cb:4a:2f:df:bf:9a:13:a1:bc:
27:5b:6f:d0:7e:e2:41:48:94:02:0a:1d:04:3f:e4:dd:81:1c:
51:b1:4c:b4:a4:f9:a4:df:7a:e9:17:6e:c3:d0:dc:c7:0f:c3:
eb:f7:75:c4:af:a9:d2:11:e0:3e:17:56:64:5c:f3:bd:c2:9c:
15:36:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:16:20 2025 by rpki-client