Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D409B60B15211EFA0770478C4F9AE02.roa
File: 8D409B60B15211EFA0770478C4F9AE02.roa (raw, json)
Hash identifier: 7CzUoojIPfJG1PTvfcBnsNSx/M1siDUMDHYxAXEX+s0=
Subject key identifier: D5:2E:E5:3A:DB:BF:05:49:07:6A:52:EE:69:C7:72:24:AA:75:C5:8B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1E7F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D409B60B15211EFA0770478C4F9AE02.roa
Signing time: Tue 03 Dec 2024 08:42:39 +0000
ROA not before: Tue 03 Dec 2024 08:42:39 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 113.203.210.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 05:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7807 (0x1e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 3 08:42:39 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=674ec47e-134c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:f8:cc:62:22:95:3b:42:50:59:c9:f7:f6:
bb:8e:f8:c1:3b:cd:bb:87:e3:42:af:11:f7:52:1f:
f5:cb:90:ff:4a:09:15:bf:44:df:9b:2f:42:b1:b6:
f0:e1:c9:ad:a4:98:f8:56:14:a9:bd:c2:ff:cc:0a:
78:11:5b:88:13:f0:6d:d2:0f:51:07:f6:cc:a0:81:
35:27:c2:b8:88:5d:aa:90:f4:20:68:bd:1d:87:b7:
2f:a1:66:4a:e0:3c:35:f9:8a:6a:b1:a5:91:ea:7b:
a6:b0:fe:57:04:26:37:cd:63:90:c8:51:75:c0:3b:
ec:6d:6c:4e:8d:11:a4:78:4c:81:d6:cf:b1:71:47:
f2:18:22:ff:1b:d8:d8:22:33:98:a7:19:1e:dd:f6:
50:3e:20:ac:95:36:7e:08:90:2d:88:4c:c7:0a:b5:
3e:30:d9:69:b9:5b:a2:ff:93:c8:90:c2:e0:02:c2:
96:76:cc:01:7c:26:22:e4:1a:e2:51:11:87:65:6e:
89:61:c9:8a:4b:bb:a8:30:29:f7:94:ea:19:b4:59:
51:f6:7d:41:3e:8e:01:1e:a8:35:b7:e0:73:4b:53:
e9:0c:1f:ef:ae:db:6e:59:67:da:6a:8a:3d:be:ba:
72:f2:6b:60:6f:85:7b:7d:5b:15:f6:63:61:e6:19:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:E5:3A:DB:BF:05:49:07:6A:52:EE:69:C7:72:24:AA:75:C5:8B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D409B60B15211EFA0770478C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.210.0/24
113.203.217.0/24
113.203.220.0/24
113.203.246.0/24
115.167.20.0/22
115.167.56.0/22
Signature Algorithm: sha256WithRSAEncryption
01:93:d3:42:ae:0a:ee:8f:01:84:94:4e:7a:df:66:60:6a:bc:
66:60:df:05:ac:a6:a8:4a:b9:da:4a:cc:87:e8:2b:4f:19:a6:
e5:ba:2c:7c:81:39:ff:ee:82:a2:32:f6:09:3d:b1:bd:47:9b:
81:cc:78:66:11:1f:4c:94:e7:5b:7c:10:2f:20:48:01:81:34:
b0:c2:b3:34:9c:3b:54:23:8f:39:45:e8:5d:a2:60:fa:7c:e6:
52:ef:70:70:e1:66:e5:28:5a:27:41:86:62:cd:b8:06:bf:2d:
8e:27:9b:ec:ad:e8:53:1f:6a:95:8e:3a:2d:0d:e9:3f:58:ef:
90:35:7f:8d:ac:b9:7e:55:66:3f:22:ff:b4:15:c2:f1:5b:b9:
12:66:13:66:38:e9:2f:68:33:d7:9a:fb:89:fe:cd:1a:e1:93:
86:ed:aa:ee:c2:24:14:2b:9a:ac:51:b5:46:45:17:cc:97:92:
fa:98:80:c0:eb:ad:45:ac:0f:92:bc:d4:3e:67:d8:4e:45:b4:
10:63:de:3f:93:df:29:87:4e:45:24:f4:76:96:fd:a7:9b:07:
63:91:1b:3f:c6:26:78:1e:d6:f5:15:62:28:1f:e5:3b:a1:9d:
42:4f:98:96:ed:05:ae:18:ff:42:0a:5a:af:e7:da:51:03:dd:
8b:b6:28:43
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICHn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMjAzMDg0MjM5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRlYzQ3ZS0xMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uv4zGIilTtCUFnJ9/a7jvjBO827h+NCrxH3Uh/1y5D/SgkVv0Tfmy9Csbbw
4cmtpJj4VhSpvcL/zAp4EVuIE/Bt0g9RB/bMoIE1J8K4iF2qkPQgaL0dh7cvoWZK
4Dw1+YpqsaWR6numsP5XBCY3zWOQyFF1wDvsbWxOjRGkeEyB1s+xcUfyGCL/G9jY
IjOYpxke3fZQPiCslTZ+CJAtiEzHCrU+MNlpuVui/5PIkMLgAsKWdswBfCYi5Bri
URGHZW6JYcmKS7uoMCn3lOoZtFlR9n1BPo4BHqg1t+BzS1PpDB/vrttuWWfaaoo9
vrpy8mtgb4V7fVsV9mNh5hlFBQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFNUu5Trb
vwVJB2pS7mnHciSqdcWLMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOEQ0MDlCNjBC
MTUyMTFFRkEwNzcwNDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBABxy9IDBABxy9kDBABxy9wDBABxy/YDBAJzpxQDBAJzpzgw
DQYJKoZIhvcNAQELBQADggEBAAGT00KuCu6PAYSUTnrfZmBqvGZg3wWspqhKudpK
zIfoK08ZpuW6LHyBOf/ugqIy9gk9sb1Hm4HMeGYRH0yU51t8EC8gSAGBNLDCszSc
O1QjjzlF6F2iYPp85lLvcHDhZuUoWidBhmLNuAa/LY4nm+yt6FMfapWOOi0N6T9Y
75A1f42suX5VZj8i/7QVwvFbuRJmE2Y46S9oM9ea+4n+zRrhk4btqu7CJBQrmqxR
tUZFF8yXkvqYgMDrrUWsD5K81D5n2E5FtBBj3j+T3ymHTkUk9HaW/aebB2ORGz/G
Jnge1vUVYigf5TuhnUJPmJbtBa4Y/0IKWq/n2lED3Yu2KEM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:27:35 2025 by rpki-client