Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/C1A5D38289D111EFAE1BBE09C4F9AE02.roa
File: C1A5D38289D111EFAE1BBE09C4F9AE02.roa (raw, json)
Hash identifier: adNQDqxVotJqZPv81MPLyjvZbm+EvAgcsFsBDH2FNVE=
Subject key identifier: CD:D0:E6:C0:C9:79:48:9F:8E:EB:56:53:09:56:FF:E4:64:B6:71:B5
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0C38
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/C1A5D38289D111EFAE1BBE09C4F9AE02.roa
Signing time: Mon 25 Nov 2024 03:18:38 +0000
ROA not before: Mon 25 Nov 2024 03:18:38 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 18206
IP address blocks: 49.236.192.0/24 maxlen: 24
49.236.193.0/24 maxlen: 24
49.236.194.0/24 maxlen: 24
49.236.195.0/24 maxlen: 24
49.236.197.0/24 maxlen: 24
49.236.198.0/24 maxlen: 24
49.236.199.0/24 maxlen: 24
49.236.200.0/24 maxlen: 24
49.236.202.0/24 maxlen: 24
49.236.203.0/24 maxlen: 24
49.236.204.0/24 maxlen: 24
49.236.205.0/24 maxlen: 24
112.137.160.0/24 maxlen: 24
112.137.161.0/24 maxlen: 24
112.137.162.0/24 maxlen: 24
112.137.163.0/24 maxlen: 24
112.137.164.0/24 maxlen: 24
112.137.165.0/24 maxlen: 24
112.137.168.0/24 maxlen: 24
112.137.169.0/24 maxlen: 24
112.137.170.0/24 maxlen: 24
112.137.171.0/24 maxlen: 24
112.137.172.0/24 maxlen: 24
112.137.173.0/24 maxlen: 24
112.137.174.0/24 maxlen: 24
112.137.175.0/24 maxlen: 24
119.110.97.0/24 maxlen: 24
119.110.98.0/24 maxlen: 24
119.110.99.0/24 maxlen: 24
119.110.100.0/24 maxlen: 24
119.110.102.0/24 maxlen: 24
119.110.105.0/24 maxlen: 24
119.110.107.0/24 maxlen: 24
119.110.108.0/24 maxlen: 24
124.197.224.0/20 maxlen: 20
124.197.224.0/22 maxlen: 22
124.197.224.0/24 maxlen: 24
124.197.225.0/24 maxlen: 24
124.197.233.0/24 maxlen: 24
124.197.238.0/24 maxlen: 24
124.197.239.0/24 maxlen: 24
202.71.96.0/20 maxlen: 24
202.75.45.0/24 maxlen: 24
202.75.48.0/20 maxlen: 24
202.162.0.0/19 maxlen: 24
202.165.0.0/19 maxlen: 24
203.153.80.0/20 maxlen: 24
210.48.144.0/20 maxlen: 24
2404:b8::/32 maxlen: 32
2404:b8::/48 maxlen: 48
2404:b8:0:1::/64 maxlen: 64
2404:b8:1::/48 maxlen: 48
2404:b8:3::/48 maxlen: 48
2404:b8:20::/43 maxlen: 43
2404:b8:2000::/44 maxlen: 44
2404:b8:2020::/43 maxlen: 43
Validation: Failed, certificate revoked on Wed 27 Nov 2024 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Nov 25 03:18:38 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6743ec8e-51fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:13:e7:6a:82:32:5b:c3:5d:8c:1e:e6:6a:
b3:24:fd:22:39:b5:d5:06:6a:4a:40:76:98:4b:74:
75:1c:dc:8e:51:38:2d:b4:d7:66:a4:e4:90:04:26:
f9:06:dd:54:a8:02:d6:51:82:34:50:ff:66:8d:89:
4a:5e:7e:10:59:eb:0b:ff:f3:e4:c7:cc:38:77:44:
5c:a8:9f:78:28:81:cc:28:26:c0:c2:02:d5:a1:38:
d5:8e:f7:3e:1a:1e:2d:a8:1b:1a:61:0a:b5:09:8b:
d8:0a:c6:9a:33:a2:8a:38:41:ed:19:b4:74:9e:da:
6c:8f:b7:87:bb:4f:02:3f:6b:ed:3a:9c:71:25:3d:
20:56:5f:62:e6:d7:a8:46:01:2f:0d:fb:b5:4e:5e:
68:a5:9f:99:2e:e3:06:02:97:28:94:79:64:14:67:
bd:48:e2:d9:95:63:87:5d:72:ac:6e:12:94:48:46:
4b:e1:26:5c:f6:ba:b8:22:1c:51:e5:4f:72:24:7e:
a0:6c:da:0c:44:92:dd:46:2c:20:6c:6e:53:15:dd:
04:4b:68:c3:79:c1:d3:53:1a:5c:6e:26:5f:34:fd:
d7:77:09:07:98:da:b2:85:98:29:17:96:2b:4d:cb:
46:0f:38:e9:bb:97:84:84:66:c8:92:99:51:1a:3a:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:E6:C0:C9:79:48:9F:8E:EB:56:53:09:56:FF:E4:64:B6:71:B5
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/C1A5D38289D111EFAE1BBE09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.236.192.0/22
49.236.197.0-49.236.200.255
49.236.202.0-49.236.205.255
112.137.160.0-112.137.165.255
112.137.168.0/21
119.110.97.0-119.110.100.255
119.110.102.0/24
119.110.105.0/24
119.110.107.0-119.110.108.255
124.197.224.0/20
202.71.96.0/20
202.75.45.0/24
202.75.48.0/20
202.162.0.0/19
202.165.0.0/19
203.153.80.0/20
210.48.144.0/20
IPv6:
2404:b8::/32
Signature Algorithm: sha256WithRSAEncryption
4f:c9:ab:05:88:61:17:2f:14:9d:4c:47:2c:de:0f:27:78:ef:
4b:4f:01:c3:dd:8b:da:81:ac:5a:f7:ca:05:d7:e2:54:2b:8a:
e6:26:6e:e1:47:4c:18:87:01:b1:fb:dd:c4:30:ae:db:fb:c4:
8a:ec:90:7e:11:40:51:b3:ce:06:95:b0:e2:14:9a:77:8d:d3:
39:55:f7:a0:70:e3:93:9c:a4:0e:85:91:bd:fb:e2:21:00:a4:
8a:b2:58:30:66:8d:64:72:1e:35:97:3f:4c:bc:f4:59:ba:31:
c5:f7:f2:27:33:f4:b0:b4:f8:95:db:5d:e6:aa:0b:83:f1:7c:
23:bc:5f:8b:77:a3:c4:f3:89:1b:b1:12:b7:bb:e4:6c:b4:44:
3a:df:81:33:01:83:23:79:f5:2d:aa:e2:df:10:bd:48:14:d3:
72:7c:b0:49:45:d1:14:95:fb:38:3a:8d:b4:cd:49:29:dd:e4:
8d:c7:99:4f:1f:72:68:c1:f9:93:0c:94:40:e5:ab:25:e3:9b:
3a:ab:13:a9:da:c8:84:df:3c:32:f8:2f:87:3a:a6:b3:f8:7c:
6d:09:df:23:5f:dc:55:fd:eb:fa:da:a7:ca:90:71:d3:15:dc:
2a:85:9b:05:c1:a4:54:28:c4:1b:63:cb:65:2c:1f:e3:87:eb:
bb:8f:fc:7a
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF
Q0QxRDczQjYwHhcNMjQxMTI1MDMxODM4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQzZWM4ZS01MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAue0T52qCMlvDXYwe5mqzJP0iObXVBmpKQHaYS3R1HNyOUTgttNdmpOSQBCb5
Bt1UqALWUYI0UP9mjYlKXn4QWesL//Pkx8w4d0RcqJ94KIHMKCbAwgLVoTjVjvc+
Gh4tqBsaYQq1CYvYCsaaM6KKOEHtGbR0ntpsj7eHu08CP2vtOpxxJT0gVl9i5teo
RgEvDfu1Tl5opZ+ZLuMGApcolHlkFGe9SOLZlWOHXXKsbhKUSEZL4SZc9rq4IhxR
5U9yJH6gbNoMRJLdRiwgbG5TFd0ES2jDecHTUxpcbiZfNP3XdwkHmNqyhZgpF5Yr
TctGDzjpu5eEhGbIkplRGjp6kwIDAQABo4IDMTCCAy0wHQYDVR0OBBYEFM3Q5sDJ
eUifjutWUwlW/+RktnG1MB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1
RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvQzFBNUQzODI4
OUQxMTFFRkFFMUJCRTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgboGCCsGAQUFBwEHAQH/
BIGqMIGnMIGVBAIAATCBjgMEAjHswDAMAwQAMezFAwQAMezIMAwDBAEx7MoDBAEx
7MwwDAMEBXCJoAMEAXCJpAMEA3CJqDAMAwQAd25hAwQAd25kAwQAd25mAwQAd25p
MAwDBAB3bmsDBAB3bmwDBAR8xeADBATKR2ADBADKSy0DBATKSzADBAXKogADBAXK
pQADBATLmVADBATSMJAwDQQCAAIwBwMFACQEALgwDQYJKoZIhvcNAQELBQADggEB
AE/JqwWIYRcvFJ1MRyzeDyd470tPAcPdi9qBrFr3ygXX4lQriuYmbuFHTBiHAbH7
3cQwrtv7xIrskH4RQFGzzgaVsOIUmneN0zlV96Bw45OcpA6Fkb374iEApIqyWDBm
jWRyHjWXP0y89Fm6McX38icz9LC0+JXbXeaqC4PxfCO8X4t3o8TziRuxEre75Gy0
RDrfgTMBgyN59S2q4t8QvUgU03J8sElF0RSV+zg6jbTNSSnd5I3HmU8fcmjB+ZMM
lEDlqyXjmzqrE6nayITfPDL4L4c6prP4fG0J3yNf3FX96/rap8qQcdMV3CqFmwXB
pFQoxBtjy2UsH+OH67uP/Ho=
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:22:30 2025 by rpki-client