Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C545C8DAE60611EF804E8B1AC4F9AE02.roa
File: C545C8DAE60611EF804E8B1AC4F9AE02.roa (raw, json)
Hash identifier: VV7vsJbX213tGBQinrBWyeyBI2ocYxHVteKkRos3F5g=
Subject key identifier: 3D:49:C3:4F:9D:AD:2B:E5:E6:27:D2:BB:88:0A:88:B7:19:24:C7:61
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0E1B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C545C8DAE60611EF804E8B1AC4F9AE02.roa
Signing time: Sat 08 Feb 2025 10:23:43 +0000
ROA not before: Sat 08 Feb 2025 10:23:43 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.9.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3611 (0xe1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Feb 8 10:23:43 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a730ae-768c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:85:56:b8:a7:36:7d:da:5d:35:44:2c:1a:
ee:77:0b:69:4b:87:2b:db:78:4d:02:fa:0f:c4:48:
0a:36:84:7e:a0:fa:45:8c:ba:78:97:1e:3e:82:93:
ba:ce:dd:ab:56:e3:50:b7:57:3c:8d:9f:46:18:9c:
e4:dc:9f:cb:c8:de:4f:a5:48:33:65:56:8f:85:66:
2d:e5:de:dc:4e:7a:e1:a5:b0:43:dd:c6:6c:69:db:
87:30:b0:2e:89:ef:dd:68:1f:d1:54:8d:bf:03:ae:
62:b7:a1:a2:88:20:9e:28:9c:9c:9e:a4:2e:b2:c7:
b2:eb:13:41:8e:cc:14:cd:7d:72:72:ab:73:b9:5f:
b2:50:00:f8:8a:6c:f1:db:25:58:71:c8:f2:2c:8a:
b5:96:ce:d1:4b:34:50:d0:a9:2a:50:2c:a2:2b:92:
40:c0:0f:87:ca:e6:f3:44:14:ee:a8:f1:a4:ad:ea:
3b:78:79:07:de:cb:ce:92:f0:53:70:24:13:24:04:
f6:85:b2:bd:57:ca:4f:1e:71:38:6c:cf:16:da:92:
a4:3b:70:c5:31:84:79:59:b7:f3:02:77:5c:e7:34:
06:20:5b:11:44:d7:a8:52:d3:ab:0a:d9:48:5d:b3:
33:f7:6c:0b:3f:3b:ff:14:46:cc:03:59:23:de:e6:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:49:C3:4F:9D:AD:2B:E5:E6:27:D2:BB:88:0A:88:B7:19:24:C7:61
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C545C8DAE60611EF804E8B1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/23
139.190.11.0/24
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.19.0-139.190.27.255
139.190.29.0-139.190.31.255
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:cb:29:81:0a:9c:25:31:f9:d8:f6:d7:3b:3a:63:71:12:f6:
d0:37:41:92:20:55:ec:1d:4b:20:51:4e:bc:34:69:a0:91:48:
ec:79:41:a9:e1:c4:af:9c:92:f7:2b:f6:29:f4:1b:f7:a4:9d:
de:1f:0c:1d:89:b9:f2:71:72:9b:24:03:34:4f:5c:f1:0a:ee:
e5:d0:80:72:64:42:ec:b6:c2:67:d5:2f:ad:38:d2:8c:e8:39:
ba:43:cd:44:32:53:d1:e6:4a:f2:32:c7:ce:ff:61:13:2b:98:
46:45:6c:d5:50:c7:bf:04:68:86:97:05:0c:22:1e:3a:28:5c:
9b:4c:62:6a:ae:db:71:27:c5:19:f2:c0:ff:b3:37:c8:51:d1:
f8:1f:64:18:2e:07:ca:29:4b:3d:6a:dc:1a:7e:7e:0b:bf:1f:
a0:47:ab:46:3b:d5:7f:ee:c2:8b:16:35:73:4a:1d:fd:a8:4b:
fa:39:39:c2:c6:33:df:b2:f6:44:c8:a2:13:d4:25:da:ab:a2:
5c:c6:c8:b7:14:09:a3:d7:c0:ab:a5:a0:e4:94:6f:b6:29:ec:
30:9b:76:d4:a5:d8:7a:d9:46:c1:a5:89:71:e9:a7:9b:cd:3e:
74:05:a9:95:f4:a4:d7:31:aa:dc:0c:86:ae:d4:7f:3c:dd:62:
58:91:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:33:43 2025 by rpki-client