Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3B751A4424C611F0BDFB410DC4F9AE02.roa
File: 3B751A4424C611F0BDFB410DC4F9AE02.roa (raw, json)
Hash identifier: bvBZOzTflMdSe4rMLVMGzpR81KVTzRrIKqB8BgufSHo=
Subject key identifier: B4:8D:D0:4B:1B:E4:43:BA:E0:52:DD:3C:45:62:78:7B:A2:21:75:4A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2656
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3B751A4424C611F0BDFB410DC4F9AE02.roa
Signing time: Tue 29 Apr 2025 06:50:27 +0000
ROA not before: Tue 29 Apr 2025 06:50:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213659
IP address blocks: 115.167.11.0/24 maxlen: 24
115.167.56.0/22 maxlen: 22
115.167.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 May 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9814 (0x2656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 29 06:50:27 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=681076b3-aec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:aa:9f:44:ff:25:74:cf:f9:63:b6:71:34:
0f:f1:77:36:10:d9:33:fa:33:33:dd:d2:04:71:8d:
df:d4:7f:34:30:de:58:88:36:5d:90:ac:6e:f8:02:
6b:e8:23:8f:88:4c:e6:4a:08:61:65:69:b4:4c:9c:
80:b3:17:80:cc:8d:a0:bc:f8:73:1e:d6:36:61:40:
96:57:4d:bf:dc:60:88:a5:7a:df:77:f0:35:33:a0:
93:e9:8c:eb:46:b8:58:45:8e:58:c5:55:85:1e:0a:
4d:1b:50:e0:a0:26:cc:15:98:37:23:6d:44:8f:1a:
ce:29:e8:7b:04:db:90:44:0a:b1:e6:a5:34:8a:c6:
34:67:8f:af:b2:d3:68:d5:35:f8:aa:fe:f0:bf:a0:
8d:8b:f7:1d:c4:c7:c6:a1:4b:3e:37:f9:94:73:d4:
6d:55:24:ff:b3:8a:04:59:9a:7f:68:66:cf:27:29:
f9:a0:be:3b:d2:2d:87:0c:1f:07:bb:b4:73:fe:3d:
45:04:1a:99:b1:43:56:4e:4a:78:83:c9:fc:98:5a:
0f:e3:27:59:bf:dc:c7:7b:34:10:34:6f:49:f9:0d:
2e:9f:c9:c8:5b:76:e9:2a:32:28:30:f7:0b:53:da:
11:28:92:77:ae:73:3c:20:96:b1:e4:28:f6:f5:fd:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:D0:4B:1B:E4:43:BA:E0:52:DD:3C:45:62:78:7B:A2:21:75:4A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3B751A4424C611F0BDFB410DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.11.0/24
115.167.56.0/22
115.167.124.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4a:6a:21:8a:2d:a2:77:50:0c:4d:23:db:9e:86:f7:42:47:
db:9f:94:78:51:6b:c3:2f:75:99:e0:6d:bf:08:6c:51:bb:26:
78:b4:2d:59:61:81:73:06:ab:ec:69:c3:65:26:dd:42:a3:4b:
bd:2e:de:2f:f4:27:29:b4:2a:20:60:9d:41:88:b4:55:18:f8:
47:20:4f:8b:1e:71:1c:a2:d9:2d:c6:19:3f:89:14:e7:0d:55:
56:0d:54:76:6c:bd:82:e6:13:fd:3b:65:c8:b2:6a:b9:e4:30:
c8:49:30:a6:ab:ad:c9:b2:91:a1:43:9d:71:fb:d9:60:77:ed:
74:28:6a:80:0e:43:60:1c:77:77:aa:de:a5:a6:f6:87:e1:28:
27:ce:94:a3:11:3f:d2:ab:5c:8c:cd:5b:7b:f6:4e:71:fb:58:
cd:48:40:aa:90:e3:cf:88:36:82:79:80:e6:5e:e0:dd:dc:f7:
be:51:d0:d8:e0:4e:6a:ce:95:24:83:84:ce:93:90:14:c2:14:
cf:eb:9c:ed:6d:16:45:9c:fb:78:4a:cb:1f:76:b5:5e:e8:45:
59:6d:7d:87:95:42:7c:81:9c:88:3f:59:5d:bf:0b:23:18:dd:
79:d1:56:90:d8:50:1e:51:61:51:38:f7:bf:1e:dd:47:4c:04:
e0:23:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:51:46 2025 by rpki-client