Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9E6041986E9E11F09C09FC4CC4F9AE02.roa
File: 9E6041986E9E11F09C09FC4CC4F9AE02.roa (raw, json)
Hash identifier: ja+IDYZ09/Vre2qDXSRw7Vif1voaXCSX0/5yaDP7yjk=
Subject key identifier: EE:DD:E8:BC:CD:20:64:C6:CE:C7:2A:8D:5C:DA:7C:B5:D2:90:F1:1C
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 112B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9E6041986E9E11F09C09FC4CC4F9AE02.roa
Signing time: Fri 01 Aug 2025 06:13:19 +0000
ROA not before: Fri 01 Aug 2025 06:13:19 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 06:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Aug 1 06:13:19 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=688c5aff-03f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:1f:7b:7a:64:0f:43:6d:d3:37:14:3c:50:
b0:9f:69:1b:30:09:23:99:af:5d:f4:6f:e2:3d:b3:
c6:c7:1a:60:bc:bf:e2:6b:06:ba:6c:35:3c:33:55:
aa:1b:20:a0:be:ac:ce:b8:13:69:54:e2:38:d0:47:
dd:68:90:ab:46:f9:20:d5:24:13:29:1d:2e:c8:12:
80:e0:61:aa:68:ee:bc:2d:b3:48:c4:db:14:ec:13:
68:8d:66:25:e4:0e:2d:e2:d9:e6:28:a5:de:b2:49:
44:27:2b:77:41:24:65:4d:66:9f:12:bd:47:eb:bf:
5d:d9:51:99:9b:a6:f5:38:a6:1e:c9:14:11:79:6c:
e4:16:2a:1f:4a:17:54:fb:0e:fc:fd:06:95:9b:f6:
a5:f4:bb:5a:32:3e:64:aa:1c:c3:05:ec:5d:2b:9c:
44:1c:31:bc:45:4e:d1:b0:2d:f4:a7:f0:db:82:34:
4e:34:ce:f9:14:d8:f4:96:ab:ed:92:26:78:3f:90:
7d:b5:6f:3c:f3:8d:3c:a9:9b:1f:f8:ae:d3:38:d8:
fc:5d:91:b0:79:dd:fc:40:f6:ee:6a:ef:10:f5:26:
4c:f2:54:53:03:75:25:44:c1:2d:08:6d:2c:aa:52:
97:05:03:2e:15:8a:45:16:f8:ab:7d:ec:90:db:9f:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:E8:BC:CD:20:64:C6:CE:C7:2A:8D:5C:DA:7C:B5:D2:90:F1:1C
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9E6041986E9E11F09C09FC4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:e8:2d:0a:7a:de:9f:97:04:88:46:b6:ba:0e:45:80:4b:d1:
1c:4b:d6:1b:55:a1:a8:41:a6:61:a0:03:35:eb:9f:9f:38:5e:
69:15:0b:c0:b4:82:87:69:c7:88:2d:3a:65:49:e7:ab:ad:4b:
53:ca:27:96:54:b3:e0:df:95:e8:03:8c:09:55:f0:ef:f0:ec:
6d:c4:56:2b:59:94:74:34:b0:cb:ec:ef:56:bf:2a:bf:df:a6:
dd:58:ef:4b:d5:04:eb:ce:15:a0:b6:b1:be:75:71:25:58:30:
77:f6:bb:f5:ce:f8:28:07:6d:24:d0:83:d5:6e:6a:f3:77:55:
6e:cd:af:ee:3a:87:94:05:f5:a2:ea:b8:4e:70:6a:43:56:ad:
61:1c:b9:46:1d:37:7d:1c:49:9f:64:46:66:6a:f8:03:8b:2f:
09:3b:de:54:52:7e:90:7c:46:54:82:3f:2d:14:b6:48:ef:b4:
46:81:c6:e7:78:e8:94:7c:91:55:f9:ec:7c:c0:cc:49:99:e7:
a7:df:da:0f:69:20:ff:5c:7e:80:51:4b:e4:35:3d:4b:3c:14:
35:88:85:bf:1e:f8:10:b5:18:07:21:71:8b:0a:65:bf:26:4e:
75:7c:bc:8b:1e:e6:ff:f3:d8:49:d8:a0:ed:b8:b3:f9:48:b9:
1c:ab:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:32 2025 by rpki-client