Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C9DA2BAC0F311EFAF9CC14BC4F9AE02.roa
File: 8C9DA2BAC0F311EFAF9CC14BC4F9AE02.roa (raw, json)
Hash identifier: sW0HpRz6K5mCj1Ca0H0pxgoRR3scB4o6F9V/USd+bGg=
Subject key identifier: 07:07:72:DF:50:2A:E5:B0:AC:8A:04:8E:4D:D7:7F:40:E4:39:00:50
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2025
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C9DA2BAC0F311EFAF9CC14BC4F9AE02.roa
Signing time: Mon 23 Dec 2024 06:02:54 +0000
ROA not before: Mon 23 Dec 2024 06:02:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 11:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8229 (0x2025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 23 06:02:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6768fd0e-55e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:62:89:c8:d1:5b:a2:f5:65:0f:de:ca:b6:
89:6f:64:89:31:b7:51:da:88:5c:bf:07:d2:da:3d:
08:24:f3:02:f6:d5:c0:9b:f3:40:95:e1:98:ac:82:
7a:a3:17:d5:70:ac:90:cf:7f:de:a8:ec:82:93:a3:
da:aa:59:da:6c:07:49:b9:f7:e5:cc:86:49:0f:99:
3b:01:46:81:d2:27:b9:47:38:d5:25:78:6c:77:f7:
36:cd:01:81:db:b2:d7:b7:95:8e:27:be:f1:da:63:
d6:5c:fa:31:e1:c8:37:9e:b9:02:4a:ce:3c:a9:1c:
c7:8d:38:42:6f:ef:f4:73:c1:2e:0d:65:2c:b2:ae:
06:bd:28:ab:e0:f9:0d:52:7a:a2:98:70:07:c0:70:
09:9b:03:89:ce:d8:5e:d3:f0:b3:d4:6b:7c:5a:38:
d0:46:1c:bc:8a:4b:14:28:7f:0e:56:25:a7:dc:bb:
84:94:fa:3d:45:a0:9c:c5:69:3f:2b:b9:38:13:d8:
23:75:d4:de:96:22:a8:cb:a6:f1:b1:d1:b6:47:ff:
66:d4:7d:18:29:52:8b:41:ec:30:b7:51:93:94:05:
8e:8b:ec:4c:79:57:30:38:3a:54:8f:fc:28:bd:f5:
ef:83:58:14:b1:84:f6:23:93:45:a5:16:c8:03:4e:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:07:72:DF:50:2A:E5:B0:AC:8A:04:8E:4D:D7:7F:40:E4:39:00:50
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C9DA2BAC0F311EFAF9CC14BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.246.0/24
113.203.255.0/24
115.167.20.0/22
115.167.48.0/24
115.167.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:19:27:53:05:73:19:39:d8:ad:f3:dc:3a:0e:ed:09:4b:91:
1f:99:85:76:a7:c7:8e:58:36:6e:9e:15:0c:8a:2e:d6:59:35:
e1:86:51:2e:67:72:44:d6:64:11:5f:98:a0:f1:0f:bd:1f:b6:
9c:f7:3f:12:3f:d4:3a:e2:50:8b:bb:03:fa:38:8b:42:f2:40:
98:ab:44:af:03:96:b5:55:7e:23:42:53:70:c3:c6:c7:8d:83:
87:20:8b:38:3a:1d:e2:0f:d5:fb:d3:d3:65:25:f0:ff:19:13:
ce:ff:ef:61:63:b2:2d:27:cc:46:f0:f0:54:3c:33:ad:48:c7:
41:11:87:6e:63:35:57:46:1e:7d:5c:65:84:2b:bd:6d:ce:7d:
8c:7a:7c:11:b3:e5:29:04:93:0e:7c:7f:85:c8:42:70:ed:e0:
d0:fa:49:b3:32:f8:68:f2:df:75:bd:31:59:1b:5d:f4:ce:f7:
94:91:30:bc:34:e6:5d:ad:c9:13:32:6a:7b:b8:13:9b:8c:e2:
72:19:cd:13:e1:ef:e1:d0:4b:4c:6a:3b:91:b7:d1:cb:11:bd:
34:59:79:1b:f3:77:8a:93:d7:51:aa:9f:8a:02:1a:14:75:ba:
08:5c:75:b8:20:03:03:ad:77:a8:94:eb:ca:b5:0d:9c:08:43:
33:df:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:06 2025 by rpki-client