Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1275DBDC913311EFA57B0D6CC4F9AE02.roa
File: 1275DBDC913311EFA57B0D6CC4F9AE02.roa (raw, json)
Hash identifier: tLl34xCSXVBOHvK6LaVv5Hhc+J1htekWtorDFAQQY2Q=
Subject key identifier: E9:08:5A:1D:4A:6F:56:00:17:E5:23:42:65:F5:96:DB:6D:66:9E:CE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 18E6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1275DBDC913311EFA57B0D6CC4F9AE02.roa
Signing time: Wed 23 Oct 2024 11:36:41 +0000
ROA not before: Wed 23 Oct 2024 11:36:41 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 11:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6374 (0x18e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 23 11:36:41 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6718dfc9-5441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:17:e4:19:57:66:21:b8:e1:9d:b6:b0:2d:
03:ab:9f:2d:9e:a4:65:95:bb:7f:ef:1a:af:ed:4a:
8c:20:bf:df:92:80:73:2d:85:ca:ee:ec:05:fc:c9:
b2:a2:37:5a:12:6f:5e:7c:9e:40:ef:38:54:55:3b:
48:fe:49:8d:95:06:a9:ed:d9:7f:c4:f5:5c:a0:56:
79:79:be:dd:24:e7:c2:5d:fa:85:5c:28:3b:35:5a:
98:12:8b:74:b3:ff:20:26:09:6d:bf:e1:e3:be:6e:
a6:f0:0c:8e:d7:df:d9:66:ea:c1:73:89:ad:c5:ac:
67:a7:1c:5b:5f:e5:a8:69:70:b7:58:97:be:35:31:
02:57:a6:db:60:e3:d7:c7:1f:e5:89:8f:d0:b8:ba:
6d:6c:63:59:15:ed:da:3e:88:9d:14:99:2f:7c:7c:
00:2a:1f:92:81:08:20:21:7c:5f:1a:35:fa:01:3d:
6e:e2:fe:23:69:38:3d:1f:37:d4:c2:6f:e7:ea:30:
91:38:5e:81:db:75:52:d0:b7:05:bf:cd:15:99:e3:
5e:8c:29:4e:14:33:d3:a5:6c:6b:af:ea:07:41:7c:
98:32:87:f7:cd:89:7f:72:7a:20:1b:1b:5f:49:63:
72:27:49:4f:31:7b:2b:3c:97:49:30:2d:ba:ff:85:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:5A:1D:4A:6F:56:00:17:E5:23:42:65:F5:96:DB:6D:66:9E:CE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1275DBDC913311EFA57B0D6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.252.0/22
115.167.125.0/24
180.178.142.0/24
180.178.176.0-180.178.187.255
202.92.26.0/24
223.29.235.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2f:47:8c:cc:2f:08:9e:0f:d1:30:66:ea:8a:cf:4a:7c:d1:
17:72:90:2e:5e:d3:e0:85:17:55:6f:21:33:b3:2d:53:ae:58:
36:92:3e:06:88:d4:58:74:9f:1b:e8:2a:99:66:5a:21:66:d8:
14:04:b5:2b:af:6e:b5:48:24:c9:e0:bc:5e:0f:7d:cc:ed:ee:
62:d0:82:0e:b0:ba:18:bb:00:b2:75:9f:e3:79:ce:14:93:27:
3c:98:f7:1f:60:73:ab:1e:3b:02:31:ee:e2:e6:0a:f0:c2:b2:
e1:b1:e4:20:d8:19:bf:18:95:a4:e7:38:bf:ef:7e:1f:2c:31:
c7:21:35:2f:3e:08:f2:8d:f5:4c:1e:90:88:a6:0e:e8:74:5c:
6a:01:ed:22:fa:d0:23:88:09:ba:0e:03:23:69:ca:23:0b:fe:
14:a9:51:1b:7d:ee:b9:b5:b3:60:e2:dc:93:bd:8e:a2:1d:d5:
be:5f:94:6a:97:53:b0:73:11:2b:99:d6:90:2c:e5:da:f3:bb:
c9:48:f0:ce:7d:51:53:9c:f2:67:38:1f:72:9d:92:41:4c:a4:
c5:71:7b:86:23:04:fa:ee:c2:7d:23:a1:e3:de:97:53:63:fc:
24:b5:58:4c:9a:74:9a:c1:97:87:00:b6:cb:77:6a:cb:f2:dd:
49:7f:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:46:02 2025 by rpki-client