Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1DED9C20B87511EFA92A0382C4F9AE02.roa
File: 1DED9C20B87511EFA92A0382C4F9AE02.roa (raw, json)
Hash identifier: 4XeJoHKLtsKWUtyO8TmnkbGlWDpjtXFTQr4OXg1YDkk=
Subject key identifier: CE:93:54:47:3E:5F:99:72:C1:7F:39:9E:35:65:44:B5:D2:00:C9:F5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1F53
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1DED9C20B87511EFA92A0382C4F9AE02.roa
Signing time: Thu 12 Dec 2024 10:37:43 +0000
ROA not before: Thu 12 Dec 2024 10:37:43 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213990
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.60.0/23 maxlen: 23
115.167.62.0/23 maxlen: 23
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.64.0/22 maxlen: 22
175.110.105.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 11:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8019 (0x1f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 12 10:37:43 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=675abcf6-ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:19:d4:f4:47:92:a6:b7:25:30:bb:50:c9:
b8:4c:cd:d8:ab:5b:f6:ad:51:bc:4b:82:6a:4b:44:
2d:d4:39:f7:b3:f9:63:3f:55:9c:b3:fa:1f:ad:36:
58:09:58:5b:fb:78:07:59:1d:0a:fc:68:23:ff:fe:
23:91:65:76:80:d1:31:20:db:d2:a2:7b:e1:b3:af:
1d:46:e8:02:06:fe:6c:f3:b8:22:11:6e:84:52:d0:
50:e0:94:3b:0f:90:0a:eb:a2:74:d9:f2:08:cf:14:
c5:bd:9b:55:5b:d9:4a:e0:8e:cb:ac:a2:d1:af:22:
71:49:ae:03:7c:90:05:1c:c0:bb:c3:d4:1e:38:f0:
0e:84:fd:7a:aa:f4:fc:b0:78:f8:38:9b:1b:70:96:
66:82:bc:cb:34:72:8a:62:2a:f3:17:3a:7c:85:34:
0d:ec:d0:f3:74:3a:1a:8d:e3:db:e2:72:a0:a9:cb:
95:00:ce:31:0c:90:53:77:51:f8:15:91:0a:99:7e:
2f:1e:58:c6:d4:a6:40:a3:71:de:11:08:cb:e4:c8:
64:32:94:ca:b1:12:43:2b:2b:fd:cd:23:80:49:7c:
e8:2c:c6:36:ab:40:ce:12:e4:93:0a:27:5a:fa:5e:
d2:f8:d6:1b:c1:2b:54:b8:23:af:90:71:65:85:a7:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:93:54:47:3E:5F:99:72:C1:7F:39:9E:35:65:44:B5:D2:00:C9:F5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1DED9C20B87511EFA92A0382C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/23
113.203.212.0/24
113.203.214.0/24
113.203.222.0/24
113.203.231.0/24
113.203.233.0/24
113.203.245.0/24
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.60.0-115.167.64.255
115.167.66.0/24
115.167.124.0/24
175.110.64.0/22
175.110.105.0/24
180.178.144.0/24
180.178.146.0/24
180.178.161.0-180.178.164.255
180.178.188.0/24
180.178.190.0/24
223.29.226.0/24
223.29.229.0/24
Signature Algorithm: sha256WithRSAEncryption
92:04:34:a5:d3:7b:0e:72:55:94:d1:e8:d7:b0:e6:80:31:e7:
81:d2:c6:46:ef:97:5d:1f:85:7f:df:e0:47:bb:7a:c5:3d:93:
b0:ff:b2:7e:b3:a7:d1:87:11:47:d5:aa:c9:3d:e3:62:81:5a:
a5:41:7e:2a:b1:46:26:20:3d:0b:2d:84:c4:99:98:0e:75:96:
d0:52:7a:af:90:1f:7f:24:58:87:38:ed:3a:d9:64:93:30:77:
3f:05:d4:01:11:44:79:f7:51:32:df:5a:66:51:9c:94:d7:82:
41:74:49:bc:09:f1:3b:95:69:1f:f3:e6:9a:a1:14:13:39:94:
7f:7a:f6:21:d2:9b:df:0d:98:86:79:e1:93:b7:c6:fd:71:59:
60:49:b6:01:61:16:ca:b8:14:7a:74:b1:04:e4:f0:68:b6:ea:
24:7a:7d:6f:9c:80:ec:63:2e:29:a7:ea:cf:73:d5:d5:7e:39:
ab:35:ab:1e:df:f4:6a:fa:ba:41:35:ba:a8:47:18:26:d5:40:
83:c5:4d:39:3f:1e:4b:85:05:eb:da:50:43:78:93:c4:ae:61:
31:53:88:e8:7f:b9:68:8c:97:c5:ca:74:96:1a:9d:98:da:2a:
66:82:49:5f:bf:54:aa:6a:4c:37:e3:c4:a2:28:f4:8d:c5:f6:
50:d0:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:44:37 2025 by rpki-client