Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9CF488DE366311EEB376DC3AC4F9AE02.roa
File: 9CF488DE366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: Po7xy1t+M4YUPp4ndqI5Ho0Ov0Z85FwC1gHojkyHHcI=
Subject key identifier: 9B:A9:A1:15:A1:02:31:47:F4:C1:90:23:3D:CD:F7:8B:5C:90:A3:67
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0118
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9CF488DE366311EEB376DC3AC4F9AE02.roa
Signing time: Thu 17 Oct 2024 05:38:31 +0000
ROA not before: Thu 17 Oct 2024 05:38:31 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132280
IP address blocks: 96.30.74.0/23 maxlen: 24
96.30.76.0/23 maxlen: 24
96.30.80.0/22 maxlen: 22
96.30.83.0/24 maxlen: 24
96.30.88.0/23 maxlen: 24
96.30.90.0/23 maxlen: 24
96.30.92.0/22 maxlen: 22
96.30.93.0/24 maxlen: 24
96.30.94.0/23 maxlen: 23
96.30.96.0/22 maxlen: 23
96.30.97.0/24 maxlen: 24
96.30.104.0/23 maxlen: 24
96.30.106.0/24 maxlen: 24
96.30.110.0/24 maxlen: 24
96.30.113.0/24 maxlen: 24
96.30.114.0/23 maxlen: 24
96.30.116.0/22 maxlen: 23
96.30.116.0/24 maxlen: 24
96.30.120.0/23 maxlen: 23
96.30.120.0/24 maxlen: 24
96.30.123.0/24 maxlen: 24
96.30.124.0/24 maxlen: 24
96.30.125.0/24 maxlen: 24
96.30.126.0/23 maxlen: 24
146.88.32.0/20 maxlen: 20
146.88.32.0/22 maxlen: 22
146.88.32.0/24 maxlen: 24
146.88.33.0/24 maxlen: 24
146.88.40.0/24 maxlen: 24
146.88.48.0/22 maxlen: 23
146.88.56.0/23 maxlen: 24
146.88.58.0/24 maxlen: 24
146.88.59.0/24 maxlen: 24
146.88.60.0/24 maxlen: 24
146.88.61.0/24 maxlen: 24
146.88.62.0/24 maxlen: 24
146.88.63.0/24 maxlen: 24
161.82.128.0/17 maxlen: 19
161.82.128.0/21 maxlen: 22
161.82.135.0/24 maxlen: 24
161.82.136.0/21 maxlen: 22
161.82.138.0/24 maxlen: 24
161.82.142.0/24 maxlen: 24
161.82.144.0/21 maxlen: 22
161.82.146.0/24 maxlen: 24
161.82.152.0/21 maxlen: 22
161.82.156.0/24 maxlen: 24
161.82.157.0/24 maxlen: 24
161.82.160.0/21 maxlen: 22
161.82.164.0/24 maxlen: 24
161.82.168.0/21 maxlen: 22
161.82.173.0/24 maxlen: 24
161.82.176.0/21 maxlen: 22
161.82.180.0/24 maxlen: 24
161.82.182.0/24 maxlen: 24
161.82.184.0/21 maxlen: 22
161.82.192.0/21 maxlen: 22
161.82.197.0/24 maxlen: 24
161.82.200.0/21 maxlen: 22
161.82.203.0/24 maxlen: 24
161.82.204.0/24 maxlen: 24
161.82.208.0/21 maxlen: 22
161.82.208.0/24 maxlen: 24
161.82.210.0/24 maxlen: 24
161.82.211.0/24 maxlen: 24
161.82.212.0/24 maxlen: 24
161.82.213.0/24 maxlen: 24
161.82.214.0/24 maxlen: 24
161.82.216.0/21 maxlen: 22
161.82.216.0/24 maxlen: 24
161.82.220.0/24 maxlen: 24
161.82.221.0/24 maxlen: 24
161.82.222.0/24 maxlen: 24
161.82.223.0/24 maxlen: 24
161.82.224.0/19 maxlen: 22
161.82.226.0/24 maxlen: 24
161.82.233.0/24 maxlen: 24
161.82.237.0/24 maxlen: 24
161.82.246.0/24 maxlen: 24
161.82.248.0/24 maxlen: 24
161.82.249.0/24 maxlen: 24
161.82.250.0/24 maxlen: 24
161.82.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 07:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Oct 17 05:38:31 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6710a2d7-1ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:ca:e2:97:5f:ef:4f:8f:e0:97:07:c8:93:
f5:8a:fc:82:02:27:3a:b4:8e:a2:15:0d:17:8f:20:
86:85:eb:75:88:e5:dd:92:4c:8e:58:2a:a2:a3:1b:
ee:a2:74:f2:c4:33:66:1d:8a:41:f6:e5:67:ce:84:
38:e5:4b:9f:34:06:3c:83:ee:09:64:a2:36:c6:c5:
72:51:b8:cf:77:cf:d4:0b:e1:56:21:8f:46:e9:1d:
e2:cc:70:02:f4:d6:fd:9c:2f:69:78:a3:be:e1:9a:
56:5e:ab:dc:65:5b:1e:1a:a9:eb:bd:7e:7e:fe:89:
c9:2b:c4:87:94:ed:f5:cb:d1:e3:59:d3:0d:56:9d:
75:70:33:08:69:9d:58:dc:2c:eb:ab:8f:12:0f:7a:
a0:b2:f9:b9:3d:3a:e0:e9:66:ea:bb:40:ba:8f:2b:
a4:18:7b:f3:ba:12:ab:5d:7a:e1:66:67:0a:e1:0b:
02:9c:cf:5b:fe:6b:55:6d:01:18:05:40:7f:24:0b:
ee:2b:6b:25:af:2f:eb:64:93:f3:7f:21:c2:27:1d:
4a:f9:c0:59:f4:11:87:4f:b2:d2:a9:fc:03:ac:dd:
83:0e:b3:1d:14:5d:81:58:78:87:18:ea:c4:96:a1:
bb:71:89:a2:72:2a:1e:09:2e:c4:bf:02:5e:9c:0a:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:A1:15:A1:02:31:47:F4:C1:90:23:3D:CD:F7:8B:5C:90:A3:67
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9CF488DE366311EEB376DC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.74.0-96.30.77.255
96.30.80.0/22
96.30.88.0-96.30.99.255
96.30.104.0-96.30.106.255
96.30.110.0/24
96.30.113.0-96.30.121.255
96.30.123.0-96.30.127.255
146.88.32.0-146.88.51.255
146.88.56.0/21
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
36:e1:43:51:09:5a:eb:f3:65:a1:c9:02:15:d1:60:40:5e:67:
e2:57:4b:09:6c:c8:05:b9:af:74:32:1a:3e:89:38:c2:13:1f:
3c:40:67:8f:45:46:57:de:b4:e1:23:04:84:04:63:71:5f:bc:
8a:2f:dd:79:17:d3:38:1a:18:b4:28:74:07:f9:a2:78:af:74:
06:62:d7:2b:f5:b2:a6:1c:a9:ff:ac:d7:54:4f:19:41:66:a1:
86:bb:f5:ce:70:cb:7c:91:52:87:d7:16:09:32:fc:d5:fe:f4:
8a:a1:95:b0:cd:63:c4:07:53:86:f1:54:43:eb:62:d1:c9:c5:
86:39:08:9e:fe:a4:2f:df:2c:5f:fa:c4:ad:be:85:b6:23:9d:
c8:69:1e:9f:f6:ff:4f:d7:a1:91:90:a1:fc:76:33:38:37:f2:
6d:d3:70:18:20:3b:cc:e8:5c:c7:b0:84:da:e5:99:a6:9d:fa:
82:dd:fe:58:9b:9a:d3:b5:d0:ef:76:b0:ad:7e:83:d9:85:26:
7c:ba:bd:ea:69:7e:6e:a9:19:85:8e:67:21:f4:50:ac:ed:cc:
5b:48:ca:8c:3c:2a:dd:d8:33:f3:7a:39:ef:a6:31:8e:15:04:
53:b6:f8:80:f1:15:94:3a:92:5e:a2:f8:0c:94:eb:94:e1:79:
90:5f:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:51:46 2025 by rpki-client