Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/85B5EBA692BD11EF8213BF23C4F9AE02.roa
File: 85B5EBA692BD11EF8213BF23C4F9AE02.roa (raw, json)
Hash identifier: fbHLw1F5WtgSkQmgZk3sgr64Y0Uf0t37JKue/TNKxuo=
Subject key identifier: FF:8D:63:9F:4D:7B:44:11:C9:20:0A:65:C4:16:5D:BB:E2:9A:02:4C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 191A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/85B5EBA692BD11EF8213BF23C4F9AE02.roa
Signing time: Fri 25 Oct 2024 10:40:16 +0000
ROA not before: Fri 25 Oct 2024 10:40:16 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
115.167.12.0/22 maxlen: 22
115.167.20.0/22 maxlen: 22
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 22
115.167.60.0/22 maxlen: 22
115.167.102.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6426 (0x191a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 25 10:40:16 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=671b7590-7671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:b8:81:11:88:af:8b:0b:1e:b9:15:ff:36:
13:d9:bb:ba:d6:b1:9e:34:49:4a:2d:b9:6e:c8:bf:
64:1b:63:f1:da:ab:cb:f4:e3:ef:ee:05:81:37:62:
ca:92:d9:23:cc:d5:2e:e6:b0:77:2a:72:53:bd:49:
d6:5e:47:cc:09:b6:2f:2b:bf:c4:cc:60:fc:85:5f:
05:bc:de:bf:59:68:51:d8:ac:3d:b0:90:31:04:2a:
87:6c:8d:ba:72:3f:dd:13:c3:dc:e9:b9:fb:b1:f3:
3d:ba:8a:0b:9e:39:6e:eb:d4:0f:4d:93:76:b8:dc:
0e:a6:af:14:55:c8:f9:b8:be:12:0b:a3:de:59:8c:
8a:53:73:84:84:b1:c0:39:77:59:7a:cb:eb:8e:10:
ba:f0:26:ac:0c:e9:bc:79:c7:88:83:b4:f0:e8:bd:
58:fe:bb:2f:79:18:86:db:42:ca:95:4f:36:44:8e:
15:ff:41:ff:8d:91:27:70:30:b3:e2:2b:e5:71:48:
89:1b:0e:a1:1e:0a:b8:ca:ae:7e:7e:fc:80:6c:16:
78:72:f1:2f:b1:bb:ff:89:a3:a2:40:a6:32:f2:fd:
97:18:aa:61:78:68:b4:73:2d:24:a4:86:3b:00:e6:
ec:79:0a:b1:61:03:f1:48:d8:df:1b:26:84:60:50:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:63:9F:4D:7B:44:11:C9:20:0A:65:C4:16:5D:BB:E2:9A:02:4C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/85B5EBA692BD11EF8213BF23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.215.0/24
113.203.219.0/24
115.167.12.0/22
115.167.20.0/22
115.167.50.0/24
115.167.56.0/21
115.167.102.0/24
175.110.89.0/24
175.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:77:61:a5:37:7e:2e:97:fb:01:00:9b:ab:e3:dd:df:7a:29:
61:38:c3:15:41:97:84:9d:f9:18:92:54:6e:c7:f5:07:10:3f:
76:11:82:6c:ce:e1:03:79:19:0a:7a:59:78:97:46:a7:b0:b4:
07:44:08:7f:86:06:92:3a:1f:42:6e:a7:bd:af:46:da:da:18:
7b:e5:89:cd:f9:89:b1:64:3f:80:f1:31:72:29:dd:f1:06:b1:
51:32:65:2b:19:ad:25:8f:47:94:0e:f0:eb:c7:cc:57:f2:da:
72:bb:d5:10:e3:6d:ee:92:11:7f:d0:67:07:c8:6c:64:49:7a:
0f:11:a4:5a:e3:2c:dd:ee:ac:94:a7:3e:b9:8c:57:4a:84:7b:
f9:2c:ea:8f:fd:a2:4c:2d:fc:41:7e:d3:60:30:31:29:08:ce:
cf:1b:6f:0c:68:0d:f4:2e:79:f9:b2:35:3e:1a:ce:89:3b:bb:
cc:54:3b:91:4a:82:94:b3:46:77:d7:db:f5:65:96:f4:7a:35:
2d:38:09:95:3d:af:e8:dd:00:05:2b:ee:04:ad:42:0a:4f:56:
05:ad:36:a0:0c:d4:d4:1c:a2:f2:07:14:3a:16:43:61:59:26:
95:c0:1c:dd:c0:13:0b:89:9d:b6:81:1b:e1:89:60:d4:2b:ce:
1f:82:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:34:59 2025 by rpki-client