Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7105DB06420511F090CCC710C4F9AE02.roa
File: 7105DB06420511F090CCC710C4F9AE02.roa (raw, json)
Hash identifier: 9NlNVCgsJVNsHlVmB6FVne/Crme+YOwQcGkbS8FjN0k=
Subject key identifier: A7:06:91:2C:C2:74:2E:74:82:9D:9B:9A:62:6D:30:48:02:B5:2E:D6
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2779
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7105DB06420511F090CCC710C4F9AE02.roa
Signing time: Thu 05 Jun 2025 12:05:59 +0000
ROA not before: Thu 05 Jun 2025 12:05:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
175.110.104.0/21 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/21 maxlen: 24
180.178.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 13:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10105 (0x2779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 5 12:05:59 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68418826-cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:53:5b:01:66:ae:a2:f3:c6:03:78:43:9d:
37:47:8a:2c:39:a1:3f:9f:bd:bc:11:01:db:23:0f:
97:7a:7a:5f:e1:0d:fe:4f:3d:a2:13:6d:73:c1:70:
85:8e:e9:7a:67:e0:42:86:5d:40:cf:6b:5d:1f:56:
9f:bb:1d:9b:2e:ab:18:32:14:71:e9:47:b3:1a:ea:
35:1f:e9:45:c4:12:07:a0:d4:15:ca:90:39:11:9d:
8b:f4:37:48:ed:46:5f:ea:83:6d:de:ee:54:0a:48:
9d:96:ad:74:29:6b:bb:3e:11:49:6b:82:7b:15:81:
a3:ab:e0:3c:fe:ce:b0:68:e9:85:e9:9d:7d:4f:a9:
5a:6e:16:65:e9:4c:03:f6:5d:c3:ef:3f:65:5e:5d:
ac:cf:30:4e:8e:81:c6:e0:22:d7:34:66:d2:c1:ff:
b5:e4:52:0c:03:0b:a6:1c:86:55:72:7b:dc:60:be:
fd:9b:34:9c:9e:77:78:25:b8:78:ab:5e:8d:af:fb:
b5:08:27:5f:2c:c9:5a:8a:15:92:b6:42:7f:49:73:
c4:03:9f:80:ff:ea:8a:bc:2e:6b:22:74:bd:26:a5:
5e:bf:89:2e:2f:15:6d:f4:b2:3d:f3:33:ec:a8:e9:
d6:50:79:15:21:a2:02:5d:a9:93:56:61:a7:94:91:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:06:91:2C:C2:74:2E:74:82:9D:9B:9A:62:6D:30:48:02:B5:2E:D6
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7105DB06420511F090CCC710C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.220.0/24
113.203.222.0/23
175.110.104.0/21
180.178.152.0-180.178.167.255
180.178.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:44:44:10:f6:a6:0d:bb:10:3c:78:69:99:ea:24:a0:70:25:
dc:e0:6c:2f:9d:5b:50:c0:df:27:04:b0:2d:ba:74:01:77:42:
ca:2e:b3:75:69:53:c0:36:95:20:bb:60:28:07:27:8b:d4:84:
07:0b:02:f2:c6:9f:f4:7d:8c:d3:82:af:54:a5:73:fa:f2:40:
f5:b9:8b:f4:dd:5b:24:67:39:68:9d:8e:97:d2:b1:36:5f:06:
34:1a:3e:6f:b5:8a:09:10:17:b6:cb:85:27:0b:30:73:1b:f8:
23:4f:24:18:f8:cf:d3:95:2b:74:d5:a8:82:74:bb:3a:93:45:
f8:a3:6e:59:5b:39:f5:58:ff:74:44:e4:b5:11:b9:80:ee:64:
5d:9d:7b:06:c0:3e:4e:0a:96:74:78:cf:78:cb:38:b3:6f:69:
09:82:a4:8d:b0:de:b8:55:94:d2:14:0a:fc:28:9f:aa:a8:6e:
bd:28:6f:fb:e2:8b:bc:50:6e:3a:93:9a:d2:a4:f3:c8:6f:22:
03:fe:6c:0a:06:f6:d5:51:bb:f2:32:21:9f:06:78:cf:2a:64:
fd:1d:ad:a2:e9:e1:bf:fe:b8:8a:bc:6d:dd:cf:66:a3:1b:5d:
d0:a1:70:ae:f3:6a:9f:ef:05:dd:24:16:0a:57:3d:1b:3c:50:
e9:24:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:40:02 2025 by rpki-client