Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/517A262A54C611EF805B5632C4F9AE02.roa
File: 517A262A54C611EF805B5632C4F9AE02.roa (raw, json)
Hash identifier: 2YqvhcgzWtaHq6uBTZqmgrxwyBJvcI39VJiTSDWoz0g=
Subject key identifier: EB:16:A1:36:E7:E6:27:4D:87:F2:30:C5:92:FB:67:CF:EE:93:65:FF
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 353C
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/517A262A54C611EF805B5632C4F9AE02.roa
Signing time: Wed 07 Aug 2024 14:07:02 +0000
ROA not before: Wed 07 Aug 2024 14:07:02 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.101.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.64.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
121.46.67.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Aug 2024 12:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Aug 7 14:07:02 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66b37f86-09a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:f7:49:1f:51:34:70:bc:39:2d:22:55:61:
b5:32:54:c0:ac:26:76:c0:8e:ff:2c:8e:eb:5a:58:
55:c3:d2:c4:3c:cf:96:15:68:ca:03:50:f1:e4:86:
8a:2a:2a:7b:cc:42:a8:78:ce:ba:ef:25:9a:73:23:
86:fc:5a:e9:22:f9:11:ad:f9:a4:00:54:dd:ac:54:
64:cb:1d:0d:d7:b5:90:5c:8c:64:d3:57:74:1f:a7:
08:ef:13:2b:f4:e5:99:86:c2:c6:8f:dc:db:51:50:
12:43:0c:36:36:5d:4c:f9:cf:6f:b7:37:6c:9d:c4:
c9:7d:fc:df:15:21:67:7f:1f:c2:de:bc:4a:1e:e7:
53:f6:8f:7f:8a:e0:29:dc:5e:85:75:bf:6f:a0:de:
20:72:94:85:bf:69:b2:b2:e6:30:88:37:c7:1b:14:
e8:02:28:e1:b6:22:94:30:02:3f:18:06:70:2f:47:
4a:fb:f8:44:29:22:bc:96:ba:25:d4:75:e6:cb:cf:
9d:49:46:a2:a9:5c:50:43:28:74:f1:5d:c1:72:c9:
48:c9:b7:b6:1a:06:0e:62:d0:df:57:8d:8f:f6:23:
61:b0:46:3b:21:6b:e1:d3:4d:84:05:8f:b5:89:85:
15:84:cf:f6:c3:34:f2:47:78:d3:af:3b:19:38:0f:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:16:A1:36:E7:E6:27:4D:87:F2:30:C5:92:FB:67:CF:EE:93:65:FF
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/517A262A54C611EF805B5632C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.100.0/23
116.90.106.0-116.90.111.255
116.90.115.0/24
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.64.0/24
121.46.66.0/23
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::/48
Signature Algorithm: sha256WithRSAEncryption
40:05:8d:23:88:35:ab:29:27:7c:87:c4:20:f9:e9:68:af:a6:
91:b1:20:df:0a:97:5d:69:ee:50:0f:06:19:f6:31:76:06:2d:
f8:29:38:3d:f5:52:dc:37:e8:6f:f4:04:95:17:27:56:6a:dc:
5a:d5:d2:e8:d3:8e:93:99:12:cb:9c:1f:44:d3:96:ce:0d:63:
3c:87:0a:90:00:e3:e0:8b:9a:43:dd:46:6a:87:9a:b6:fd:79:
40:60:ec:67:e9:56:56:0d:d0:b9:50:3d:3b:06:eb:fa:a6:6a:
1d:2a:cc:0d:de:48:7d:5f:ae:3b:0a:56:25:55:e9:9d:4a:1d:
a9:77:11:f2:54:a9:ad:50:c7:3f:d1:b1:43:09:d0:61:8b:a9:
1b:18:e7:03:50:4b:7c:9f:11:a8:e6:ac:71:3b:56:f3:fd:8b:
a5:aa:ab:c0:4e:c6:33:8e:d5:bd:11:29:01:7e:2e:bf:13:67:
8c:66:38:aa:97:35:54:d1:3d:a9:44:5c:39:fb:df:73:f1:b5:
3e:1d:08:17:af:61:c0:8c:37:b8:2e:0b:3c:02:d3:28:63:23:
a3:76:35:3f:62:2a:f3:29:8a:e7:50:3f:f8:4e:81:04:ad:1d:
ce:4f:33:2f:14:6f:0f:a2:54:e4:6d:eb:ac:20:6b:cd:09:20:
6c:eb:57:ea
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjQwODA3MTQwNzAyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmIzN2Y4Ni0wOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Zr3SR9RNHC8OS0iVWG1MlTArCZ2wI7/LI7rWlhVw9LEPM+WFWjKA1Dx5IaK
Kip7zEKoeM667yWacyOG/FrpIvkRrfmkAFTdrFRkyx0N17WQXIxk01d0H6cI7xMr
9OWZhsLGj9zbUVASQww2Nl1M+c9vtzdsncTJffzfFSFnfx/C3rxKHudT9o9/iuAp
3F6Fdb9voN4gcpSFv2mysuYwiDfHGxToAijhtiKUMAI/GAZwL0dK+/hEKSK8lrol
1HXmy8+dSUaiqVxQQyh08V3BcslIybe2GgYOYtDfV42P9iNhsEY7IWvh002EBY+1
iYUVhM/2wzTyR3jTrzsZOA9c/QIDAQABo4IDJTCCAyEwHQYDVR0OBBYEFOsWoTbn
5idNh/IwxZL7Z8/uk2X/MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNTE3QTI2MkE1
NEM2MTFFRjgwNUI1NjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwga4GCCsGAQUFBwEHAQH/
BIGeMIGbMHQEAgABMG4DBABnz1QDBAFnz1YDBAF0WmQwDAMEAXRaagMEBHRaYAME
AHRacwMEAHRaeDAMAwQAdFp7AwQHdFoAAwQAeS5AAwQBeS5CAwQFykUgMAwDBATK
jpADBADKjpYwDAMEA8qOmAMEAMqOmgMEAsqOnDAjBAIAAjAdMBIDBwAkBqwAAAED
BwAkBqwAAAIDBwAkBqwAAgMwDQYJKoZIhvcNAQELBQADggEBAEAFjSOINaspJ3yH
xCD56WivppGxIN8Kl11p7lAPBhn2MXYGLfgpOD31Utw36G/0BJUXJ1Zq3FrV0ujT
jpOZEsucH0TTls4NYzyHCpAA4+CLmkPdRmqHmrb9eUBg7GfpVlYN0LlQPTsG6/qm
ah0qzA3eSH1frjsKViVV6Z1KHal3EfJUqa1Qxz/RsUMJ0GGLqRsY5wNQS3yfEajm
rHE7VvP9i6Wqq8BOxjOO1b0RKQF+Lr8TZ4xmOKqXNVTRPalEXDn733PxtT4dCBev
YcCMN7guCzwC0yhjI6N2NT9iKvMpiudQP/hOgQStHc5PMy8Ubw+iVORt66wga80J
IGzrV+o=
-----END CERTIFICATE-----
Generated at Thu Aug 8 15:18:59 2024 by rpki-client on console-ams.rpki-client.org