Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3138ACD8D9A011EF93D5100FC4F9AE02.roa
File: 3138ACD8D9A011EF93D5100FC4F9AE02.roa (raw, json)
Hash identifier: BldQP/bU3/43qql+82NJ/9BC7x+teZ43/4+qM4nxslo=
Subject key identifier: 77:52:75:AE:8A:BC:D0:49:25:9A:CF:29:B2:1A:CA:17:9A:30:3D:9D
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 35C9
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3138ACD8D9A011EF93D5100FC4F9AE02.roa
Signing time: Tue 11 Feb 2025 12:03:40 +0000
ROA not before: Tue 11 Feb 2025 12:03:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.105.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.64.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
121.46.67.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Feb 2025 06:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13769 (0x35c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E
Validity
Not Before: Feb 11 12:03:40 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67ab3c9b-65d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:a5:22:5d:2b:a0:b9:8b:a7:e0:8e:c0:df:
c0:44:5d:5f:9c:83:ca:07:21:e7:fd:b7:9f:6b:45:
ab:68:68:1f:14:8b:66:3e:92:5e:12:35:bf:a4:15:
a0:eb:5e:20:47:2e:94:62:3a:c1:a8:8d:5c:36:68:
59:7a:56:04:d0:ae:f4:f3:a7:f5:1e:4f:4a:36:b2:
7b:a2:70:08:ed:93:14:58:65:df:03:0f:4d:d7:b1:
34:86:54:3e:71:2a:b8:f2:5e:e1:7e:30:ea:0e:4c:
24:37:ad:6c:59:9e:bd:8e:ee:13:a2:58:0a:47:69:
02:d6:e3:e7:da:9f:5a:ca:b2:08:86:7f:a0:fa:6a:
0f:33:47:4a:e9:c4:08:50:ba:42:47:b6:80:3e:3e:
d8:ab:d8:be:65:d6:52:9c:8e:bc:80:ba:9f:f3:be:
3e:9d:7d:98:4c:72:07:c0:61:ad:1c:fc:94:22:90:
a5:da:2d:92:d2:0e:c4:a1:c0:ba:bd:74:01:9d:3a:
aa:6c:6a:37:35:63:f5:7a:45:c6:3e:a3:63:80:44:
99:0a:e9:b4:bc:fe:2b:92:16:4d:70:35:aa:eb:a6:
e3:0f:f6:ea:6f:31:5f:f2:cd:9c:0a:56:a5:7a:de:
0e:60:6c:9a:43:8d:d6:f5:a7:d3:aa:42:9c:2a:61:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:52:75:AE:8A:BC:D0:49:25:9A:CF:29:B2:1A:CA:17:9A:30:3D:9D
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3138ACD8D9A011EF93D5100FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.100.0/24
116.90.105.0-116.90.111.255
116.90.115.0/24
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.64.0/24
121.46.66.0/23
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::/48
Signature Algorithm: sha256WithRSAEncryption
85:6e:ef:63:32:85:75:b1:d5:c6:40:96:f2:0b:62:d9:8b:bc:
8e:b0:55:98:ce:74:ec:73:c1:e8:40:8a:6b:0e:6b:13:bc:dc:
96:e6:52:1c:b8:0c:ff:e1:74:9c:47:06:d0:fc:cd:13:84:96:
ef:79:c8:29:97:f1:85:3a:43:22:ac:33:60:47:52:5f:86:b5:
b2:d0:68:81:28:da:71:8b:fb:54:7e:e2:55:a9:7c:83:f8:4b:
23:fd:c9:57:b5:3b:03:20:39:aa:2f:4c:86:36:f3:b6:d8:52:
d4:42:46:ed:39:06:e0:50:35:c1:7d:29:8c:3b:8f:42:a0:3b:
b0:ef:c8:e3:b3:59:92:6e:d8:56:c5:5a:32:d1:1c:be:de:dd:
ce:11:8b:7b:d6:4b:cc:8e:a4:74:24:85:e1:e1:32:30:e8:45:
64:5e:e0:c4:2e:20:31:f2:88:78:e1:4f:5d:1a:b2:6e:94:07:
f4:90:f0:26:c1:d9:ce:c1:e1:32:e5:06:1b:62:4b:03:c5:4f:
7c:2e:7f:4e:df:e1:85:45:44:a4:22:b0:d7:8d:cc:b8:8d:3a:
c3:d1:c7:f0:5f:4e:9a:f1:00:1c:c1:3c:00:02:1b:a9:0c:a6:
51:56:b7:6b:aa:ed:0f:98:7b:74:cf:c7:ea:69:34:58:1e:7f:
7d:1e:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:40:42 2025 by rpki-client