Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7C4A6E3825C611F094ADE186C4F9AE02.roa
File: 7C4A6E3825C611F094ADE186C4F9AE02.roa (raw, json)
Hash identifier: wLspgFvqANS5k1uEtlQtBkXcqvLr5Y6OclCjdh1gU70=
Subject key identifier: C7:E9:A1:14:C3:D2:EC:18:F7:C1:58:94:3F:FB:83:94:CF:4D:D5:7B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2698
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7C4A6E3825C611F094ADE186C4F9AE02.roa
Signing time: Wed 30 Apr 2025 13:29:55 +0000
ROA not before: Wed 30 Apr 2025 13:29:55 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 113.203.224.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 03:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9880 (0x2698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 30 13:29:55 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=681225d3-c79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:74:e0:50:a9:f2:c1:72:ed:de:5f:fb:ec:
e9:b0:99:54:b0:c7:78:a8:b7:9a:05:3e:03:c5:ce:
7e:9f:4a:28:78:89:ae:60:f6:40:d0:e1:87:7d:a8:
6f:38:a7:bb:08:a6:aa:25:f3:a7:d7:18:a8:eb:43:
6b:b3:1d:f9:25:96:8a:d0:f4:7d:ce:12:3d:df:63:
b4:f7:e1:9a:b5:7c:4a:60:ac:93:fa:04:b0:73:70:
0a:ab:12:fd:81:e1:33:63:bd:01:e5:a9:9f:84:b5:
39:73:29:bc:eb:84:fb:bc:ea:f8:e3:98:f9:7b:61:
d3:b2:8b:78:37:41:03:47:89:f6:0b:c7:11:6a:d4:
6f:9a:ee:93:d6:e3:ed:f2:26:9f:bc:79:88:3d:70:
2f:c7:4b:b7:80:1e:49:90:e9:9c:f7:49:1a:ec:69:
f7:ad:1d:1d:ec:e3:8c:8e:4b:2b:67:15:8d:68:08:
b7:6c:79:fe:c3:cc:89:19:49:0d:bc:54:16:07:51:
47:ed:5c:b5:3e:07:83:47:96:b5:6b:ce:0a:d9:b5:
6e:f8:d1:c4:95:e9:b0:9b:f6:ac:ba:9e:e6:ae:da:
cc:37:18:77:c7:83:53:22:fc:9c:07:96:98:02:84:
d7:8e:c7:4d:ee:db:53:2b:3b:bb:cb:4c:3a:92:9a:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:A1:14:C3:D2:EC:18:F7:C1:58:94:3F:FB:83:94:CF:4D:D5:7B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7C4A6E3825C611F094ADE186C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.224.0/24
223.29.235.0/24
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:3e:89:f4:85:76:f1:4e:ba:55:d8:70:2f:72:92:b0:f9:4b:
f4:22:69:2e:9e:b7:2c:15:1c:fc:c9:7f:2b:65:fc:82:96:c4:
11:f7:81:a5:0f:7f:94:40:bb:26:16:8f:7b:d4:d0:f1:2d:1d:
14:70:c1:29:01:7c:5f:f5:ac:05:d5:4a:ec:84:2c:b5:be:b4:
f1:36:3e:69:72:df:bd:35:79:d8:de:31:53:ef:fe:11:8c:ae:
35:73:9d:da:f8:5c:a3:8d:f3:6c:2e:fa:cd:5f:08:9d:2b:68:
4d:fa:d0:85:3a:6e:05:b5:05:c1:ce:5f:ce:79:79:90:26:db:
52:49:0f:f8:3f:b6:85:6e:d0:af:85:73:71:96:73:35:68:6c:
70:6d:98:c1:b0:78:b6:7a:f2:f0:ad:a4:3f:65:d0:88:ed:7e:
5a:3d:b9:07:bc:22:da:3e:db:98:4b:c6:fd:e7:22:68:33:72:
8e:b3:55:77:16:2f:87:39:0b:d1:1e:69:87:3d:0b:9d:77:20:
d1:bc:6b:d7:d6:bf:85:f5:62:9b:1f:14:8d:3b:15:10:d3:36:
be:fa:59:26:c0:51:a7:93:0c:90:2e:55:9e:51:68:51:4b:6f:
8a:a0:03:62:b8:2b:4c:30:82:fd:fa:66:b8:82:22:90:4c:37:
c2:6f:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:29:29 2025 by rpki-client