Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4B079A40160211F089EE4734C4F9AE02.roa
File: 4B079A40160211F089EE4734C4F9AE02.roa (raw, json)
Hash identifier: Yza+HSRLQKwKm/SvwbBWeoTdsHTuJ+W7JNxQ+ZMXIEQ=
Subject key identifier: D1:5F:19:4F:51:FD:12:86:C0:E5:60:D2:55:80:AF:98:A9:1D:1F:FA
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0FF7
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4B079A40160211F089EE4734C4F9AE02.roa
Signing time: Thu 10 Apr 2025 11:52:35 +0000
ROA not before: Thu 10 Apr 2025 11:52:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 139.190.17.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 11:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4087 (0xff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Apr 10 11:52:35 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67f7b103-66ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7e:25:54:ec:10:f4:3f:52:53:85:96:2e:49:
a1:9a:7b:2a:c1:d8:e1:98:a6:2f:ba:9c:29:b1:1c:
ce:69:e5:df:2b:f8:1d:53:d3:7c:9c:04:c1:8d:8e:
24:fa:4a:cc:bf:b8:ee:3d:e2:34:66:36:93:38:b2:
56:be:85:2a:7f:96:e9:49:bf:2f:fc:a2:9a:ab:1a:
e4:ac:6b:80:ec:18:f5:51:0a:44:3a:99:de:aa:e6:
89:ae:83:35:c2:63:d4:60:62:c7:f4:f3:77:cb:d6:
f9:63:9e:d6:59:7c:39:fb:36:27:40:1f:1d:ed:9f:
ad:09:1f:fc:98:0c:03:9f:34:fc:a2:2d:60:13:e8:
30:6b:5a:10:4b:e3:70:28:f1:5c:a5:b3:4d:68:8b:
fd:14:08:cd:eb:4e:19:96:38:4d:0c:4c:5d:24:a5:
00:5b:84:16:c4:ae:52:82:cb:24:b4:53:62:0f:00:
42:0a:a3:34:b7:7e:21:b9:ce:5a:2b:63:2d:54:dd:
c5:9f:37:2b:f8:df:46:56:14:f7:ab:d6:ae:3b:cd:
a7:85:52:16:e1:f5:2b:f8:a5:82:f4:eb:13:7c:52:
e3:3a:4e:fd:f9:3c:af:f9:43:bd:27:af:62:b5:47:
bb:7e:4a:a3:f3:3a:6d:2e:ee:4e:22:78:c7:bd:40:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:19:4F:51:FD:12:86:C0:E5:60:D2:55:80:AF:98:A9:1D:1F:FA
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4B079A40160211F089EE4734C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.17.0/24
139.190.19.0/24
139.190.24.0/22
139.190.35.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5e:c3:43:45:c6:17:92:62:78:48:d6:76:49:54:69:3d:cb:
a2:1f:b3:5c:5b:e6:21:02:3f:c8:bc:83:7f:95:b9:8e:88:73:
57:f0:1c:28:d4:fd:d5:26:0d:d1:44:51:c7:f0:0d:93:62:f5:
80:b0:40:2f:27:13:7f:9c:83:bc:be:46:7a:6f:80:2e:7d:6d:
73:c5:23:5d:04:67:e9:ba:7d:9d:69:28:18:08:33:c3:c4:f9:
14:b1:a4:58:e6:76:6c:29:28:18:ae:4b:7b:c0:3e:98:1b:92:
f7:b7:c3:48:ea:26:8c:89:88:2a:a7:28:85:14:13:8a:51:b5:
5e:97:6a:92:8f:ea:a0:12:86:79:54:f7:e9:00:0e:51:db:32:
de:71:87:c3:5a:58:7d:95:12:4e:01:97:78:d7:08:bd:18:62:
d3:c8:54:f1:e2:71:43:fb:06:43:00:a1:17:ed:a0:3a:74:23:
d3:04:c0:b0:84:cd:06:31:41:d4:a6:9e:82:7f:6c:7a:59:6a:
e1:75:8f:1b:15:bf:31:76:a9:67:13:2f:5b:5d:8e:50:39:97:
df:bd:aa:df:62:d7:89:61:ed:fc:79:46:cc:e4:6e:3d:c2:10:
0a:de:dd:f7:7b:a5:13:e1:26:ed:96:cf:0a:63:69:85:22:54:
02:50:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:15:44 2025 by rpki-client