Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0FA9DABA968E11EFA6DD343CC4F9AE02.roa
File: 0FA9DABA968E11EFA6DD343CC4F9AE02.roa (raw, json)
Hash identifier: B0ViR4JccwjjiOl6hk8FUrJjTz2FYWRJMSgwjJOLsBI=
Subject key identifier: B2:22:04:08:13:B3:AE:D9:29:40:32:C7:FB:E5:17:31:52:9C:60:72
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1A46
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0FA9DABA968E11EFA6DD343CC4F9AE02.roa
Signing time: Wed 30 Oct 2024 07:10:36 +0000
ROA not before: Wed 30 Oct 2024 07:10:36 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 11:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6726 (0x1a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 30 07:10:36 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6721dbec-77de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:5f:c3:52:01:1f:6e:c3:a3:63:0a:9e:53:
0b:fd:f5:91:63:bc:5e:0d:68:35:48:b5:ac:ce:74:
a3:3c:a7:83:e8:b9:9a:a2:62:d3:5d:96:cb:c1:8f:
72:63:fe:95:ce:63:b4:42:55:9d:04:2a:38:2b:24:
b3:01:22:12:58:aa:a1:7d:9b:47:e7:4f:88:c3:96:
98:48:0d:4b:30:4b:c1:24:d8:ea:2e:d8:72:b5:4c:
60:2b:62:79:2d:bf:a4:ed:e2:a7:a5:39:00:9c:fa:
dc:15:7f:bf:8c:9b:25:9f:92:21:20:6c:15:fc:a2:
9c:c1:41:99:fe:38:14:1d:25:4e:71:20:99:60:bf:
02:ce:9c:1d:f8:6e:70:a1:8d:b5:d3:0e:d6:68:50:
00:93:fb:dd:49:a6:68:65:0f:d3:b3:51:6e:c8:94:
0c:2d:4b:c9:c2:7b:a1:d0:5b:5c:6e:d1:f6:16:3b:
ef:f5:19:33:83:90:32:ea:05:e1:e3:1a:d6:82:8a:
46:e8:ed:7f:2d:40:45:1c:9f:34:de:53:27:d7:b9:
6e:61:98:bf:0e:de:c6:bd:4d:66:34:7f:98:48:f7:
aa:a8:d7:17:84:a2:d1:a0:09:7d:22:ae:5e:12:6d:
45:87:3d:72:37:a7:71:ec:98:a9:1f:6a:6e:87:c5:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:04:08:13:B3:AE:D9:29:40:32:C7:FB:E5:17:31:52:9C:60:72
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0FA9DABA968E11EFA6DD343CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.213.0/24
113.203.227.0/24
113.203.243.0/24
113.203.248.0/24
115.167.3.0/24
115.167.5.0/24
115.167.28.0/24
115.167.66.0/24
115.167.73.0/24
115.167.101.0/24
115.167.103.0/24
175.110.64.0/22
180.178.148.0/24
180.178.160.0/24
180.178.166.0/24
180.178.169.0/24
180.178.171.0/24
180.178.189.0/24
180.178.191.0/24
223.29.231.0/24
223.29.237.0/24
Signature Algorithm: sha256WithRSAEncryption
51:75:ee:ea:95:cb:cb:9c:eb:a9:45:8d:87:eb:93:87:7f:7d:
72:56:63:57:8c:ce:12:48:45:ab:d6:e2:c9:86:4f:70:eb:9b:
f0:18:dc:a8:e5:10:79:7e:e5:64:d2:1e:00:e0:66:52:49:68:
64:e9:fb:49:8a:21:d3:e9:c0:32:f8:93:15:9b:9e:f0:f2:aa:
0e:08:3f:9f:e2:d7:19:cb:e4:bf:bf:e7:ff:c6:95:f0:f4:09:
df:9b:20:52:b0:c8:81:d7:41:11:92:ef:12:33:04:6d:23:d8:
5f:4f:5c:c5:57:1f:e9:e4:01:bb:1c:6f:14:e2:e0:ea:f2:d0:
a4:91:2c:8c:7e:71:17:ce:e2:86:a7:88:ec:b2:70:cc:15:4d:
ab:c3:7e:e4:b6:ee:5a:cd:21:c1:ad:50:68:3d:89:d0:ef:08:
47:dd:36:d2:bd:ed:14:ce:df:87:c4:c8:8d:32:af:dd:2a:f0:
e9:bc:b1:9c:61:5b:74:3c:d4:2f:b0:bf:1d:72:64:ea:fa:d5:
4c:42:ea:33:f6:85:0d:38:5c:c3:3f:49:92:c3:0f:ae:e9:7b:
d1:08:5f:c6:7e:84:ed:6c:11:8c:f7:70:b1:73:c7:b4:55:a1:
3c:cf:6e:3a:59:30:2b:7d:ab:9e:11:1c:ac:d2:d6:75:cc:63:
2a:ea:69:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:26 2025 by rpki-client