Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E796CE6C36FA11F08257C411C4F9AE02.roa
File: E796CE6C36FA11F08257C411C4F9AE02.roa (raw, json)
Hash identifier: Wv/zvIb0Fh2GZSdsc/HL/ku1H39FQHqeXweg26FGGKo=
Subject key identifier: 8D:B4:91:8B:EE:F1:81:A0:34:80:9A:C4:CF:E5:FA:03:23:2C:8A:1B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 276D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E796CE6C36FA11F08257C411C4F9AE02.roa
Signing time: Mon 02 Jun 2025 21:07:30 +0000
ROA not before: Mon 02 Jun 2025 21:07:30 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.104.0/21 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/21 maxlen: 24
180.178.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 11:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10093 (0x276d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 2 21:07:30 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=683e1292-28ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:cc:04:9c:e5:97:3c:e7:6d:86:54:23:ea:
46:ee:7a:01:e6:0e:c9:b0:c8:ab:fe:fc:83:56:19:
fc:ed:bc:eb:c5:33:34:5b:30:a7:0c:fc:d1:50:df:
8a:f3:03:1e:97:16:45:8c:18:d0:ab:ad:75:28:44:
d0:31:65:e7:a8:03:7b:db:83:84:f0:16:eb:80:a3:
13:1f:9c:95:48:b6:c1:c7:57:f2:cb:e0:6b:84:95:
44:c8:2e:6e:0f:99:0a:19:b8:8d:28:36:58:38:64:
cb:af:dc:3a:c8:f3:e2:dd:9a:8f:cd:72:da:e4:9e:
3e:78:0c:ff:25:04:3e:7a:cf:00:43:39:c2:88:77:
26:2e:e2:de:11:14:aa:c5:ab:8d:ad:39:32:51:4d:
41:70:49:97:b1:55:89:6d:e1:d3:45:1e:15:af:a8:
a8:f9:b4:64:9e:ba:d0:81:0d:0e:b1:30:c2:10:f7:
86:4a:1f:4c:1b:2d:d2:62:02:43:dc:77:94:d0:b6:
b8:bf:70:6b:da:b9:88:e8:8b:a3:b5:f6:c9:4f:db:
ce:f0:fd:2d:92:de:6a:60:dc:29:1f:65:d0:13:90:
62:57:74:da:38:f2:b5:5a:95:60:ff:14:45:c3:8f:
d0:88:25:28:f3:1e:58:e8:78:12:d1:ab:1d:a2:47:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:91:8B:EE:F1:81:A0:34:80:9A:C4:CF:E5:FA:03:23:2C:8A:1B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E796CE6C36FA11F08257C411C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.220.0/24
113.203.222.0/23
175.110.97.0-175.110.98.255
175.110.101.0/24
175.110.104.0/21
180.178.152.0-180.178.167.255
180.178.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:6d:b0:9f:1b:f4:32:ea:6b:5d:35:8d:27:57:aa:2d:58:4d:
27:7d:20:03:c2:1e:ae:cd:46:04:1a:36:ad:05:2f:b2:6b:73:
6b:42:09:c0:89:66:42:fc:08:18:24:67:25:3a:ec:14:77:1f:
05:9b:34:b7:f8:2a:9e:ed:93:21:7b:46:0d:fc:d6:ad:b2:41:
87:19:fd:db:6c:5b:48:83:3c:4d:2b:4f:d7:c3:f3:7d:55:15:
e9:ce:56:8a:eb:50:36:67:93:e5:a3:e4:f0:02:1e:63:f5:5b:
c3:26:36:cc:31:b7:8d:7d:4a:09:62:60:f5:27:00:25:6f:60:
38:5a:0c:ff:cc:bc:5d:60:b0:0b:4e:a8:f3:b5:9e:4a:b8:36:
de:22:2f:dd:35:db:1e:83:33:83:af:c4:63:71:29:c8:b5:8f:
d8:19:43:fa:50:61:97:69:bd:77:5c:2e:8d:0d:76:17:25:5e:
a9:dd:a5:ab:9f:e7:b3:56:ed:7c:62:0b:26:a2:83:c0:4e:7d:
01:f9:13:77:9f:25:93:57:00:5e:b6:d9:8c:1c:41:07:ac:56:
ec:5c:76:3b:28:88:5b:00:7a:bc:1e:01:84:58:f5:21:86:88:
25:ce:bc:ee:96:74:62:71:42:e2:3a:c2:54:b6:1e:99:b1:9d:
52:4c:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:22:52 2025 by rpki-client