Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2C50B362EF6E11EFB37AC167C4F9AE02.roa
File: 2C50B362EF6E11EFB37AC167C4F9AE02.roa (raw, json)
Hash identifier: XUIZB8jrUtlNUjxj7xJf+tWyNhyriR0ouMqDzLdmZ50=
Subject key identifier: 5B:6E:95:69:F0:CC:0A:B0:3B:0A:C6:B0:02:DF:2F:FA:A4:DF:C7:64
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0C7F
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2C50B362EF6E11EFB37AC167C4F9AE02.roa
Signing time: Thu 20 Feb 2025 09:38:33 +0000
ROA not before: Thu 20 Feb 2025 09:38:33 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 329007
IP address blocks: 111.92.139.0/24 maxlen: 24
111.92.142.0/24 maxlen: 24
111.92.144.0/24 maxlen: 24
111.92.146.0/24 maxlen: 24
111.92.148.0/24 maxlen: 24
111.92.149.0/24 maxlen: 24
111.92.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3199 (0xc7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Feb 20 09:38:33 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67b6f818-e697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:42:7d:f1:37:f5:b9:af:46:62:44:b1:e1:
7d:af:cc:9b:4d:26:17:c5:eb:e9:d6:7e:d8:ac:25:
64:f8:62:41:4c:66:59:a7:25:4b:ff:44:b8:d7:74:
a3:27:c4:33:27:14:fe:4c:22:c0:5e:a1:f2:c1:02:
c2:71:5e:16:f1:b1:29:4c:17:28:67:1a:93:27:fc:
02:ce:c9:85:fc:c3:7b:c7:81:93:59:41:21:7b:25:
3b:68:0e:e7:31:49:1c:3b:3c:6e:04:d9:0b:1f:8e:
41:96:3d:61:81:8d:94:37:81:ca:ee:4e:ed:28:db:
6b:f3:04:ab:5d:be:5f:70:a7:04:dd:a7:d6:60:93:
f2:a4:59:33:5f:71:8c:11:ca:b5:c9:b0:f5:9b:b0:
0d:e2:eb:0a:cf:35:ba:39:b3:f8:05:a9:4a:54:c0:
d7:2c:77:63:77:93:be:b8:dc:26:3b:eb:fc:b4:89:
24:f2:0c:a7:68:d7:fd:e6:d1:95:3e:79:64:f8:88:
7a:7f:54:46:f8:a6:d8:55:e7:1f:51:de:b8:44:30:
e7:40:3c:05:4b:a7:55:a6:eb:36:a0:c2:94:6e:ac:
1b:ca:ea:00:ce:ec:14:d0:72:82:81:20:59:da:28:
21:88:ae:09:b9:52:07:f2:fa:b7:6f:a4:a9:ae:09:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:95:69:F0:CC:0A:B0:3B:0A:C6:B0:02:DF:2F:FA:A4:DF:C7:64
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2C50B362EF6E11EFB37AC167C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.92.139.0/24
111.92.142.0/24
111.92.144.0/24
111.92.146.0/24
111.92.148.0/23
111.92.151.0/24
Signature Algorithm: sha256WithRSAEncryption
22:09:67:42:e0:cd:19:55:92:f7:93:18:73:64:9a:49:fb:5a:
43:60:93:aa:ec:e7:c7:82:fc:5a:7c:86:5a:6c:76:e6:e5:d7:
47:72:d1:8a:88:af:20:6e:d5:dd:a3:79:6f:cc:79:af:bf:f3:
da:6d:8f:e8:5f:92:f4:1a:49:1b:bf:ac:b8:8a:58:fa:97:04:
f8:96:69:f4:ca:99:a9:0a:30:ae:ed:8e:e3:48:27:10:b4:8d:
73:fe:51:0b:c9:d8:22:12:bb:ba:eb:c1:b9:4e:8f:e5:b5:4e:
f1:37:05:5e:ae:63:92:89:f8:4e:71:42:9f:fd:31:8d:6a:85:
f3:2e:2c:f6:72:78:8d:38:4a:f0:a1:2c:7c:c9:f3:d3:44:78:
28:37:96:52:7a:12:f3:e0:86:50:c1:4c:f2:31:ad:21:fa:ea:
d7:2d:27:9a:c1:b4:f0:bc:ab:a5:a2:fe:ff:ba:b7:42:22:c7:
9f:0f:1c:6a:1d:8c:36:04:8b:35:10:ca:80:88:5a:4c:ff:02:
20:36:06:c7:ca:f7:1d:7f:85:96:a2:6c:b7:c5:3d:de:94:39:
6f:c3:a0:1b:b3:b1:8f:4a:36:d4:ab:47:7f:dc:2b:28:f1:31:
60:8d:49:32:3f:96:dd:50:e3:37:ef:ca:fd:5f:c7:ba:e9:9e:
0d:bc:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:44 2025 by rpki-client