Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/06B42D1A056111F091871F1DC4F9AE02.roa
File: 06B42D1A056111F091871F1DC4F9AE02.roa (raw, json)
Hash identifier: 9tEx/UuD7HXQAb7Nhxqk2FZsOD+pjGMRaW5znfarz0o=
Subject key identifier: 39:CA:A4:A3:F4:FE:29:8C:BF:06:00:73:18:5E:2E:FE:BD:2B:22:FD
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0FDD
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/06B42D1A056111F091871F1DC4F9AE02.roa
Signing time: Mon 24 Mar 2025 08:29:01 +0000
ROA not before: Mon 24 Mar 2025 08:29:01 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.10.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.28.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.32.0/24 maxlen: 24
139.190.33.0/24 maxlen: 24
139.190.34.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/24 maxlen: 24
139.190.49.0/24 maxlen: 24
139.190.50.0/24 maxlen: 24
139.190.51.0/24 maxlen: 24
139.190.52.0/24 maxlen: 24
139.190.53.0/24 maxlen: 24
139.190.54.0/24 maxlen: 24
139.190.68.0/24 maxlen: 24
139.190.69.0/24 maxlen: 24
139.190.70.0/24 maxlen: 24
139.190.71.0/24 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 22
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 12:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4061 (0xfdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Mar 24 08:29:01 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67e117cd-5230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:2c:15:c8:d3:7e:3f:40:b1:7c:67:50:41:
1c:10:ce:c1:83:63:ea:72:4f:34:22:0f:e1:cf:09:
6d:6c:23:3b:61:bc:a9:5e:b3:eb:37:70:80:c2:74:
3d:08:d7:66:d1:f0:88:22:ca:a8:5b:76:a9:bc:35:
f4:a0:26:ea:8e:09:63:c7:11:61:b0:d6:bc:c4:28:
1b:72:71:37:41:78:2f:07:1d:60:9a:d6:15:c9:ff:
9b:16:ed:52:ce:31:29:dd:bd:42:ff:5d:b9:a5:b0:
fd:e8:36:9d:71:80:c4:26:ae:3e:49:8c:c1:b3:5f:
89:e7:4a:6c:a4:4f:82:fc:e3:21:2f:2b:92:57:eb:
02:76:2c:8f:eb:96:ee:84:b9:52:15:b3:c8:8b:25:
73:e2:2a:a8:8f:32:6b:fd:2a:fb:69:c2:e8:15:cd:
af:f9:ea:85:0c:be:09:b2:84:bc:df:7f:0a:90:38:
5c:2d:78:2c:a0:d8:4b:47:d4:db:47:84:08:42:b8:
9a:ae:92:58:c4:f2:c0:f5:e5:11:e5:9b:28:db:1d:
39:8f:66:98:5d:c8:c7:15:56:d3:91:ee:c5:96:50:
2b:39:6a:fc:a6:42:db:d1:b2:06:12:6a:66:b3:12:
d2:62:f7:dd:82:d0:3e:9a:40:19:ca:21:fe:77:b0:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:A4:A3:F4:FE:29:8C:BF:06:00:73:18:5E:2E:FE:BD:2B:22:FD
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/06B42D1A056111F091871F1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/24
139.190.10.0-139.190.15.255
139.190.21.0-139.190.23.255
139.190.28.0-139.190.34.255
139.190.36.0/22
139.190.48.0-139.190.54.255
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:6e:59:a3:b1:e8:2a:f7:92:1c:d2:04:af:06:a1:31:ef:dd:
7c:54:54:43:1b:7b:ff:7a:54:68:c5:66:20:1a:e9:ba:eb:0f:
1d:25:29:c6:bd:c2:75:35:8e:6c:2d:65:06:9f:aa:71:bb:d4:
a3:8e:43:00:4a:90:72:54:83:c7:76:8e:d1:5b:11:66:0d:f3:
e6:28:52:88:21:20:62:b5:35:32:7e:68:3f:fc:7c:ef:76:3c:
e8:9e:cb:ea:a7:83:44:19:d8:eb:f9:45:e2:02:44:2e:a6:2d:
06:d5:a6:fb:dc:50:a7:3c:6b:81:a9:43:72:53:06:72:2a:16:
32:1d:f4:8d:ab:61:03:db:c8:0c:05:45:f7:0a:10:7c:3d:b9:
5c:fa:b2:dc:69:03:35:d3:b1:a8:98:ab:ad:e5:8c:4c:4d:76:
50:34:44:80:09:9a:c5:15:ef:6a:7a:65:01:9e:61:53:18:aa:
3b:22:db:a7:38:f1:cc:b1:4b:9f:82:80:61:43:1f:9d:b0:47:
99:60:46:8e:a6:e9:aa:c4:b1:31:35:5c:6a:7b:4c:4e:9e:2f:
c5:8d:44:10:f8:ba:fd:1f:cf:ba:0d:c4:9b:06:67:58:86:5f:
cf:04:dc:aa:94:81:96:4f:1c:5b:0c:65:4e:30:6d:10:d6:df:
a5:cf:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:18 2025 by rpki-client